last executing test programs:

1m24.267875922s ago: executing program 3 (id=4):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m23.436886327s ago: executing program 2 (id=7):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = socket(0x3, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000005, 0x5d031, 0xffffffffffffffff, 0x0)
pread64(r2, 0x0, 0x0, 0xb)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000000000003d00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ffffff7f6900000008005d000100000008005d000100000008005d000100000008005d000000000008005d000000000008005d0001000000"], 0x58}}, 0x4091)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000003f01f008100", @ANYRES32, @ANYBLOB="000000faffffff00", @ANYRESHEX=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
unshare(0x68060200)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES32=r0])
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x1000009}, {0x0}, &(0x7f0000000300), 0x0, 0x19039, 0x10ffffffff}}], 0x48}, 0x8880)

1m21.900018603s ago: executing program 3 (id=12):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchmod(r1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r2}])
fcntl$setstatus(r3, 0x4, 0x42800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8260}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0)
read$FUSE(r2, &(0x7f0000003240)={0x2020, 0x0, <r7=>0x0}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
socket$inet6(0xa, 0x6, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x200000, 0x7, 0x8, 0x8, 0x7, 0x0, 0x0, 0x4, 0xc}}, 0x50)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m21.117205212s ago: executing program 2 (id=14):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r0=>0xffffffffffffffff})
r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/168, 0xa8}, {0x0}], 0x2, 0x8001, 0x7)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x2, 0x8, 0xc4, 0x0, <r3=>0x0})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xfc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
socket(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYRES16=r6, @ANYRES32=r8, @ANYRESDEC=r6], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r3})
syz_usb_connect(0x5, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904000b2402010302057ff49bfd052406000105240000080624037f000109050602ff"], 0x0)

1m20.995498389s ago: executing program 3 (id=15):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchmod(r1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r2}])
fcntl$setstatus(r3, 0x4, 0x42800)
read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m18.289929234s ago: executing program 0 (id=22):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchmod(r1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r2}])
fcntl$setstatus(r3, 0x4, 0x42800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8260}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0)
read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
socket$inet6(0xa, 0x6, 0x0)
mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

1m18.158185152s ago: executing program 3 (id=23):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
pipe(&(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3f0b, 0x117001)
r4 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x123300, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETNODEID(r5, 0x80108906, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000180)="35ca", 0xfda1, 0xfffffffffffffffd)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101800, 0x1e3)
fcntl$setstatus(r6, 0x4, 0x42000)
r7 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1)
write$P9_RLINK(r7, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0xf74c, 0x2, 0xfffffffc, 0x2d7, 0x0, r4}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000340)={0x2, 0x1, 0x1c, 0x19, 0x18d, &(0x7f0000000580)="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"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0})
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20)

1m17.359538536s ago: executing program 2 (id=24):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
pipe(&(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3f0b, 0x117001)
r3 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x123300, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$SIOCGETNODEID(r4, 0x80108906, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000180)="35ca", 0xfda1, 0xfffffffffffffffd)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101800, 0x1e3)
fcntl$setstatus(r5, 0x4, 0x42000)
r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
readv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1)
write$P9_RLINK(r6, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0xf74c, 0x2, 0xfffffffc, 0x2d7, 0x0, r3}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000340)={0x2, 0x1, 0x1c, 0x19, 0x18d, &(0x7f0000000580)="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"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0})
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20)

1m16.686064339s ago: executing program 2 (id=27):
syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7da2100500000000000000f7fffffb00"})
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000))

1m15.25285521s ago: executing program 3 (id=31):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000940)=[{0x0, 0x0, 0x0}], 0x1, 0xc050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="183000000080000000000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = dup(r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"])

1m15.215239689s ago: executing program 2 (id=32):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)
unshare(0x40600)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000240)="2d72c8ba6d202efba563ad60a936e7798a564bcaf038005ca50fbf93088cc60eacf0bfeff70404abdce3b4d5470d0c4abbca522809e8e4ee8664dbdea89c57636c87b763af54f6229dcba0b270152a0b02f72796", 0x54}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000300)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}], 0x4}}], 0x3, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8c", 0x1}, {&(0x7f00000002c0)="0e", 0x1}, {&(0x7f0000000600)='\f', 0x1}, {&(0x7f00000006c0)="5daa", 0x2}, {&(0x7f00000007c0)="92", 0x1}, {&(0x7f0000000840)="e26d95", 0x3}], 0x6}}], 0x1, 0x40088c0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_clone(0x400, &(0x7f0000000700)="bed7668acd3edd297163f80840e98f4093575db16f3cbb8350967d07fe34d79735a5b42e2e0ebf0e93794d2d1e96fd7a83f4965c4264feb89ccd348615824540500deda04869ba48bc156c9b02cc7cc3788f0d36244926e5cb3a67b08c78c005866fd0a6bfacfb64e8f5270232730a0fc6689cec6567251a638ad832ddb249028c7860b9aa5b0673", 0x88, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000004c0)="15cc80b8493a026079d5d9237fb67e6b0ccfe5d753ea61aced5238bd69a40b942e179aaa5e2e81b142e2f4f65ae4ec059905fbb125b5f91c243ce7f5049343cecaec36dc1738f35518f3ec1bb6334d03e2c1b5c2430055d9a58398162c808fad448b868af9ea8afd5fb165d998defcd3e4e5a6")

1m15.143546172s ago: executing program 0 (id=33):
r0 = mq_open(&(0x7f00000003c0)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x452342, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0xa22e}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x8e, 0xd7, &(0x7f00000001c0)=""/215, 0x41100, 0x52, '\x00', 0x0, @fallback=0x27, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x6, 0xae9, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r3, r3, r6], 0x0, 0x10, 0x9, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m14.381481706s ago: executing program 0 (id=34):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001fc0)=@newtaction={0x35c, 0x30, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{0x348, 0x1, [@m_skbedit={0x24c, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x40, 0xffffffffeffffffb, 0x7, 0x101}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff7}}]}, {0x1d6, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fccc70181d74035e141d4bbdd59571d5c3fa68b6a9365539b7e734e38e7083fe43b3104f03a618c99dc38b7b166c71dcda72645a7ddd09b867d20ef1d0f2154c6c2af7bfc13509c92a055f4ba6134cf5124359fccca93ea9ef30597c542c2e259bbd96051f001127d7e760711d895b0ae2dabbb4385da14ffe779acd84bec05fb4fc35fefad1a62e114c5f2ca5c6e884ddd618acecb553d05d8ec7fb455e2684ed4d3c3df3c35bee6918"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "4d11ef01da7337a933e8a1eefb46625695ddc3d5212aa6f3638794b469"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x78, 0x36, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff81}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f41, 0xbdd, 0x0, 0x1, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x30, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "86fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x35c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1b}})
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000000000000000000000000db234fe6e592f9a47663d052890f2a00000800000000000000000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7039f430a000000850000000c000000b70700000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$RNDADDENTROPY(r2, 0x5452, &(0x7f0000005300)=ANY=[])
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="000a0074ec060f00200012800b0001006272696467650000100002800a0014000180c20000020000f71bb3995b358d06dbd965a4c0f9959097f5549ab3f0e773b308e764ae776826770ae2121ef57afa179d001d44e641ae6bf71abda36d83fdbff834f274d278fb3f209a168646c606737245bcaf5eb15f0c4ab5"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0002257000fedbdf210f0000000a0009000200e6cd9807000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044811}, 0x40040)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xff}}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f5ffffff", @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11, @ANYBLOB="55db5125212b1280fe1f105abe1a0d73c46c58ce08c840240f2d5353ab8dd51a9b7313e422f4cbc033debe2516d125e05bb9e307a8fe165b64c92dc3c553d0539cdac5ede9e1abde28eafd74b2a11e4d3a472705"], 0x1c}}, 0x0)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd7090504030000000e060d0508"], 0x0)
r12 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendfile(r12, r7, &(0x7f00000000c0)=0x7fffffff, 0x7)
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r13, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60)

1m14.274543883s ago: executing program 3 (id=35):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)

1m12.754722313s ago: executing program 2 (id=39):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) (fail_nth: 11)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

1m12.199651404s ago: executing program 0 (id=40):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="c3020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x8800}, 0x6cfa7726ce3944ad)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x38, &(0x7f0000001140)=[@in6={0xa, 0x4e20, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x6, @local, 0x268f}]}, &(0x7f0000001240)=0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032abd7000fbdbdf2516000000140001800d0001007564703a737942240cd30000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x840)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0xc, 0x4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000001280)={0x1204, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x24976043}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_NODE={0x1050, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6b8135c324dd4f7271b1851acc513101836a8fff2a3ff79c7cb8377d703dd3fd"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72e9d45b}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x65c56386}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3c8f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x760e620f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc74}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8d5f2ab5}]}]}, 0x1204}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1m10.627637719s ago: executing program 0 (id=45):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x1ff003, 0x81, 0x7d, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x23, 0xa5, {0xa5, 0x0, "8e744dbf0d839dd73fe08ce64cee84cb07bda31868b39d0efcf80a9867b07b08cbc61a6363fca9adde99f1f789ac8fb2d95400b3eeead8f73bf596b333920f2783535ce442075fd67774e748c42046892f4a8bfff70f1c75896582fa7b29bf9be2a15f2a135b5e535e0b2b29e393b5381ea326d2594a8441a3019e1cf8b7f8bd0a82e10bef475398d6635d4fe315c6ed75ce0575a1c6062a21ee66ca24980f2b8d8f0f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x40, 0x8, 0xf7, "4400ecc64a96251dbe76a4d62ca1a143d8cd5c3b1ba37f9a8b30d2a26dac57e599254db5091aa3cffe3b4becc5a0d88e74060b54edb1f775dcc043cff81796acb5c64eb0ab1d2a2e7e0e8cd4630e68e047dac57bdfd9a33e4172b1b58b6f64daf84fbba12860df5ff326f131f116d247ac56d615c83752b601463fe3a58000043d7f30b5be8a24ba7f33a07e0b293d21b9c36bf711b903a874be7bba3d391be60cdcb15eb2cf275737544a14b8748afb4a8845a83b229a84402f5260c18260eca0ff73b2643900ed379f2b860433ab20dd887376f93fd88fc5e6b7da73798aea56cb0f7006842a454482e873b3f8e5e19bf4a24d748866"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x8a, {0x88, "8484d01967f7cfc56682b30ce77f99421a12f07bfce416bc6f8aa3568c313cf3a07a5a1ed2d8b0a8d724d6101b6b2be51e7e6f5dc35f55e92b6d8ffd610ec2efdda21c5702a6c2d5044b11f2cfa6915ee7315f6589d6f12eeb9467458711f97d9ad8b5c07ca9e03cfdf1415c07b4c24ccd699e044b91808448487fd0bbface56d661ef61a1d47ad9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="40110100000024"], 0x0, 0x0, 0x0, 0x0, 0x0})

1m10.50032479s ago: executing program 1 (id=46):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async)
set_tid_address(0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150002000000050005000a000000050001008700000005000400020000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x0) (async)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',no']) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r5=>0x0, 0x4}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x9}, 0x8)

1m10.477309254s ago: executing program 1 (id=47):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m10.294862376s ago: executing program 1 (id=48):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0120b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)

1m10.263658957s ago: executing program 1 (id=49):
getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) (async)
r0 = syz_io_uring_setup(0x5044, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x15e}, &(0x7f00000002c0), &(0x7f0000000040)) (async)
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) (async)
syz_io_uring_setup(0x7d98, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000000) (async)
io_uring_setup(0x3820, 0x0) (async)
pipe(&(0x7f0000000080)) (async)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x2000000b}) (async)
ptrace(0x10, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ptrace$getregset(0x4205, 0x0, 0x1, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140)={0x4}, 0x1) (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r4 = open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x46)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async)
renameat2(r3, &(0x7f0000000280)='./cgroup\x00', r3, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="c1bf45c0f1ffffff04000000080000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x3, 0x46, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x83, 0x76, 0xd9, 0x8, 0x67b, 0x0, 0x4442, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x98, 0x8, 0x90, 0xe, [{{0x9, 0x4, 0x88, 0x3, 0x2, 0xf9, 0x32, 0x8f, 0x42, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x7f, 0xb, [@generic={0x8, 0xb, "d70a12345a08"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x7f, 0x4, 0x9a, [@generic={0x8, 0xb, "8d77ecad1235"}]}}]}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0})

1m10.190594174s ago: executing program 1 (id=50):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$netlink(0x10, 0x3, 0x9)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRESDEC=r0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYRES8=r1, @ANYRES32], 0x54}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000)

1m10.071947896s ago: executing program 1 (id=51):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x1000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

1m7.684115325s ago: executing program 4 (id=54):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000300))
r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0xfffffffc, 0x32344d59, 0x1280, 0x168})
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x7, 0x401})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1m7.578476612s ago: executing program 0 (id=55):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xb000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

1m5.869055876s ago: executing program 4 (id=56):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="c3020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x8800}, 0x6cfa7726ce3944ad)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x38, &(0x7f0000001140)=[@in6={0xa, 0x4e20, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0x6, @local, 0x268f}]}, &(0x7f0000001240)=0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032abd7000fbdbdf2516000000140001800d0001007564703a737942240cd30000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x840)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0xc, 0x4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000001280)={0x1204, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x24976043}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_NODE={0x1050, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6b8135c324dd4f7271b1851acc513101836a8fff2a3ff79c7cb8377d703dd3fd"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72e9d45b}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x65c56386}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3c8f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x760e620f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc74}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8d5f2ab5}]}]}, 0x1204}, 0x1, 0x0, 0x0, 0x840}, 0x0)

1m4.409040685s ago: executing program 4 (id=57):
r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a9f460000000000000001800b0001006578746864720000140002800800064000000001080004401f00000c0900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x18, 0x3, "279808"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fstat(r4, &(0x7f0000000480))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x8, 0x2}, 0x14)
listen(r5, 0x1ff)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r6, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80d5, 0x0, 0x1000000000, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macsec0\x00'})

1m1.323633076s ago: executing program 4 (id=58):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2bf41, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x31, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3c", 0x17}, {&(0x7f0000000980)="65eeeb6f9e80695c90a4e0eb6793664c11f0d0c597114ad165929a192e70543ec19c62f0b435034b83d0ed5d70c012bbadf0a8454c38a5658e755f740b1e213e5cc44c5ae6acfd298ac16ead099afbc4b2b3eb11", 0x54}, {&(0x7f0000000a00)="c6ed1518ef12caf5c340160960ce64a19ca16085b02c549cd0c459850a646f68736eab1501708439d086881f8837babdff52704d751b3887527b21e852678222e6c42556f38365695c977f4f0f31a4cd88369d47", 0x54}, {&(0x7f00000008c0)="7c7b7908a5c60aaa18b36128", 0xc}], 0x4}, 0x1)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
socket$kcm(0x2, 0x3, 0x2)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r4, &(0x7f0000000900)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0xfffffffffffffe98)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@ipv4_delroute={0x50, 0x19, 0xc00, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x30, 0x2, 0xff, 0x3, 0xff, 0x5, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x1}}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_OIF={0x8, 0x4, r6}, @RTA_IIF={0x8}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_UID={0x8, 0x19, 0xee00}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r7 = syz_usb_connect$uac1(0x1, 0xd6, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x10, 0x0, 0xd9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x6}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0x1, "88ed2e0f"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xb, 0x4, "ca"}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x9, 0x2, "636d1a"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "90"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x3, 0x6, 0x3}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x5, 0x5, [0x7, 0xa, 0x5, 0xa, 0x1], 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x6}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x59, 0x2, 0x5, 0x14, "e90313", "09e6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x2d, 0xca, {0x7, 0x25, 0x1, 0x0, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x80, 0x7, "43e0a82e796ce3"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x6, 0x40, {0x7, 0x25, 0x1, 0x3, 0xf, 0x9}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x8, 0x7f, 0x5, 0x20, 0x80}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x1bf2, 0xf00, 0x6, [0xffc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "a1a5a5b6d4fa9f7e99b20bcd28dcfbcf"}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xc04}}]})
syz_usb_control_io$uac1(r7, &(0x7f0000000580)={0x14, &(0x7f0000000380)={0x40, 0x11, 0xd5, {0xd5, 0xa, "08478f7d1f128efd79fb250520d4b810d337484cbdc2660107991b519044954d7b3016c183575234199b9af98b9af1553ec441e6d005c5225c70bd1013de4b227074dfaf98ae7d46c099ce111c8254b66cfc7023895088d1477071503cbc92242afd35a35b2bd1a28b688cff08ec003c835dff67e88b2344fbde4af9bd5e00ddd2aa3d7118ab2608bf0d6dd923107c5c4e645d1a46f9fd6088e84de4af723b85d52be7ccda4cec5558804fa3a515edf0835230ecd68b88670ec71484334f7b481ae944cbc20258900ef80c32b9613d87bd0949"}}, &(0x7f0000000480)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "b1038fcf66edd9625ece8ed666c27924abd408a31f0affe2f6055613b0ba37c8cb487b17fbbc0a114c907dbd53a09408776aff2dd8e670753d46264f690712368847be7879d94d7fb088808d12c06b7c717950bbdf226850735836f3c959c9158c8b2f368af8373f1df82b47f87f139aacae6fb5f8ba03026e8df413c1ccb9664ad36d60eb26686d8094053786e9169678df7df7e8c862363de7c8ec13bad53dd44286d9e8402a38c336d9c711bd4335c395ed01490caa913d90db1988b86320367841973ecc283de0b35ef24bbeb35cd8125f90"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0x20, 0x81, 0x1, "c9"}, &(0x7f0000000740)={0x20, 0x82, 0x1, "eb"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "0e"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "6654a8"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "eed96e"}})
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x9, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x12}, 0x0}, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, 0x0)
r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x6, 0x800)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f0000000140)=0xb8)

1m0.27190531s ago: executing program 4 (id=59):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000140))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @random="e1619fb82430"}, 0x71)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r6, 0x11, 0x2, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x1, 0x6, @local}, 0x10)

1m0.211408057s ago: executing program 4 (id=60):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x97ffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

59.193698815s ago: executing program 32 (id=35):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)

57.419089676s ago: executing program 33 (id=39):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) (fail_nth: 11)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

54.895122427s ago: executing program 34 (id=51):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x1000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

52.420336574s ago: executing program 35 (id=55):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xb000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

44.647567914s ago: executing program 36 (id=60):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x97ffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)

19.489632985s ago: executing program 6 (id=140):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000000c0)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ncm(0x3, 0x8c, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xea, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ba"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x0, 0xb}, {0x6, 0x24, 0x1a, 0xffff, 0x26}, [@obex={0x5, 0x24, 0x15, 0x1de7}, @obex={0x5, 0x24, 0x15, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x6, 0x2e, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0x80, 0x3, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xf, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0x9, 0x7}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x311, 0x5, 0x2, 0x7, 0x20, 0x41}, 0x30, &(0x7f0000000840)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x9, 0x0, 0xac, [0x18]}, @ssp_cap={0x18, 0x10, 0xa, 0xb0, 0x3, 0x8, 0xf00, 0x2, [0xc00f, 0xc030, 0xc000]}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x412}}]})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = gettid()
getpriority(0x1, r1)

19.357573468s ago: executing program 8 (id=141):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a1ee00"/28], 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f00000700000000000000681ebdd16598101dcf9d11e1b8b31b5ec418403737b410a6cfbc040842924943b272f88a24352e1d556dcae8a917d3390dcaa63460201a27079a5839ff13de186c17d951eddbb272419dccc0967175e09478d990add348e56906f2809bef34e13766e355ea0a286ab771794fe3e55a1363c73763f6"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000780)=0x8)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'nicvf0\x00'})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0x1, 0xff, 0xff, 0x0, '\x00', 0x0, 0x20e})
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000240)=@n={0x3, 0x2, @SEQ_NOTEON=@special, 0x7})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x69)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0)
rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0x3, 0xfffffffffffff863}}, 0x20, 0x1, 0x0)
futex(&(0x7f000000cffc), 0x82, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f0000000080)=0xffff)

17.986878349s ago: executing program 8 (id=144):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000002180), 0x77, 0x1501)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911b6000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x51073, r1, 0x363de000)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xc29, @loopback, 0x401}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000180)="82470239b8ddb515367e91f1e5b7085990000000000000e5", 0x18, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = epoll_create1(0x0)
ioctl$TIOCGICOUNT(r3, 0x545d, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
r5 = socket$kcm(0x21, 0x2, 0x2)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
syz_usb_control_io(r0, 0x0, 0x0)
r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x12000, 0x1)
openat(r6, &(0x7f0000000040)='./file0\x00', 0x644002, 0x11e)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x8, 0x74, {0x74, 0x28, "61005b9a4bee2c64a8e86d0164692c56043d53111e35bd5c4379db8ed828ad0d7dd4871f5790ffe62b926bd1d3e4d52dff495c8e57f249a96d14d739172111a4524a47d18f9a4c925586cd5bc1899ce8fe11871555f8f2b9d015fa82196850e097c13605e7b928f0e815aef179d78b17aedb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

17.826530305s ago: executing program 5 (id=145):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_dev$amidi(&(0x7f00000001c0), 0x29, 0xc2040)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f0000001500)={0x2, 0x0, @multicast1}, &(0x7f0000001540)=0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001580))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000015c0)={{{@in6, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000016c0)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'})
getegid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x651}}, &(0x7f00000003c0), 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
inotify_init()
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10)
r3 = dup(0xffffffffffffffff)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{}], 0x1}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x62, 0x0)
read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x2020)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000080), 0x10)
clock_gettime(0x4, &(0x7f0000000280))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

17.475179232s ago: executing program 7 (id=146):
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 5)

17.187846685s ago: executing program 5 (id=147):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES64], 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x72)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
writev(r2, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)="579a9d80204f9bdaaeea95a85a9d3f85a779f1a79e6150a5f740860877ed1cf010a69692d0adc0f1628887", 0x2b}], 0x2)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x8, {0xddd, 0x8, 0x9, 0x2}})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000300), 0x1, 0x0)
syz_usb_disconnect(r0)

16.011977243s ago: executing program 7 (id=148):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r2, @ANYBLOB="0a00e8"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

15.891405686s ago: executing program 6 (id=149):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r2, <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r3})

15.298142817s ago: executing program 6 (id=150):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0x69, 0x54, 0x10, 0x403, 0xf850, 0x17b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x0, 0x0, 0x5, 0x7d, 0x44}}]}}]}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create(0x47f)
syz_open_procfs(0x0, &(0x7f00000191c0)='net/dev_mcast\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r3], 0x20)
read$dsp(r0, &(0x7f0000000a80)=""/4122, 0xc5f)
r4 = socket$inet6(0xa, 0x3, 0x6)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xc, 0x3a, '*(,-', 0x3a, '\'', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x2e)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'bridge0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05030500d3", 0x5, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20)
r8 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)

15.20102695s ago: executing program 7 (id=151):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xe703, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

14.882613171s ago: executing program 8 (id=152):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = epoll_create1(0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={r2}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x0, 0xa0028000}, 0x38)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc})
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c)

14.535929655s ago: executing program 9 (id=153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x849, 0x1440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x30)

14.119334105s ago: executing program 9 (id=154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) (async)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="0407ffe7aaaaaaaaaa10"], 0x102)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200040, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200040, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)

14.111186077s ago: executing program 8 (id=155):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
write$snddsp(r1, 0x0, 0xfe00)

13.852005424s ago: executing program 8 (id=156):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a896adf660000000000001200ffffe0000012fe8000000000000000000000000000aa"], 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x758, 0x120, 0x528, 0x2f8, 0x2f8, 0x440, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x1000, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x5, @ipv4=@rand_addr=0x64010101, 0x4e22}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x4}, 0x68)
r2 = syz_mount_image$fuse(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2, 0x0, 0x1, 0x0, &(0x7f0000000980)="24f255511798f578738d4269229a37d6aeb108513b08ae679be4dbc116cc96c8b39e4e38847d4e46ee869d305b90f9071ef2b576f72428881f3f493de6f03b1d3791972b68559b71af512783ba9bbffd3ff2a3e64702ea53bbd3bbd301dae4f5ff8d77b9a5d9df8d91e502e2e2bbd3f22b3b5984b5c33fbca270119792aa0088329b23a4a95062f1d512b95d125b4579ca1d704b7b6f931ce969a3427be1e0d369e9ec9d95b063a15bb5f803b7e82950017c0e69adea7a792086")
mkdirat(r2, &(0x7f0000000a40)='./file0\x00', 0x0)

13.846411477s ago: executing program 9 (id=157):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0xe}], 0x1c)
sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xb}, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp6\x00')
read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020)
lseek(r3, 0x2000, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x79, 0x6, 0x8}]})
ioctl$RTC_WIE_OFF(r1, 0x7010)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x1, 0xa3, 0x7400)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040))
syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x32}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xa, 0xf989, "1eed56bc8d50"}, @exp_fastopen={0xfe, 0x11, 0xf989, "0fad01146ce9148924ef5cfa0f"}]}}}}}}}, 0x0)

13.640354887s ago: executing program 8 (id=158):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa040)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000000))

13.587928956s ago: executing program 9 (id=159):
pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x12a0000}, 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={<r1=>0x0, 0x9, 0x1, [0x3]}, &(0x7f0000000040)=0xa)
r2 = socket$inet6(0xa, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x200}, {r3, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x6}, 0x8)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000100)={'ip6tnl0\x00', 0xef})
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7f}, &(0x7f0000000100)=0x8)

13.501223315s ago: executing program 5 (id=160):
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r4})

13.268189446s ago: executing program 5 (id=161):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
bind$can_raw(r0, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

13.136220234s ago: executing program 5 (id=162):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000002180), 0x77, 0x1501)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911b6000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x51073, r1, 0x363de000)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xc29, @loopback, 0x401}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000180)="82470239b8ddb515367e91f1e5b7085990000000000000e5", 0x18, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = epoll_create1(0x0)
ioctl$TIOCGICOUNT(r3, 0x545d, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
r5 = socket$kcm(0x21, 0x2, 0x2)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
syz_usb_control_io(r0, 0x0, 0x0)
r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x12000, 0x1)
openat(r6, &(0x7f0000000040)='./file0\x00', 0x644002, 0x11e)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x8, 0x74, {0x74, 0x28, "61005b9a4bee2c64a8e86d0164692c56043d53111e35bd5c4379db8ed828ad0d7dd4871f5790ffe62b926bd1d3e4d52dff495c8e57f249a96d14d739172111a4524a47d18f9a4c925586cd5bc1899ce8fe11871555f8f2b9d015fa82196850e097c13605e7b928f0e815aef179d78b17aedb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

12.336074977s ago: executing program 9 (id=163):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x5, 0x2, "19dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xd, 0x10, "d5ca3f66b03715a2001bd791d10f58f0"}, 0x0, 0x0})

11.675361329s ago: executing program 7 (id=164):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000"], 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x1ff003, 0x81, 0x7d, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x23, 0xa5, {0xa5, 0x0, "8e744dbf0d839dd73fe08ce64cee84cb07bda31868b39d0efcf80a9867b07b08cbc61a6363fca9adde99f1f789ac8fb2d95400b3eeead8f73bf596b333920f2783535ce442075fd67774e748c42046892f4a8bfff70f1c75896582fa7b29bf9be2a15f2a135b5e535e0b2b29e393b5381ea326d2594a8441a3019e1cf8b7f8bd0a82e10bef475398d6635d4fe315c6ed75ce0575a1c6062a21ee66ca24980f2b8d8f0f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x40, 0x8, 0xf7, "4400ecc64a96251dbe76a4d62ca1a143d8cd5c3b1ba37f9a8b30d2a26dac57e599254db5091aa3cffe3b4becc5a0d88e74060b54edb1f775dcc043cff81796acb5c64eb0ab1d2a2e7e0e8cd4630e68e047dac57bdfd9a33e4172b1b58b6f64daf84fbba12860df5ff326f131f116d247ac56d615c83752b601463fe3a58000043d7f30b5be8a24ba7f33a07e0b293d21b9c36bf711b903a874be7bba3d391be60cdcb15eb2cf275737544a14b8748afb4a8845a83b229a84402f5260c18260eca0ff73b2643900ed379f2b860433ab20dd887376f93fd88fc5e6b7da73798aea56cb0f7006842a454482e873b3f8e5e19bf4a24d748866"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x8a, {0x88, "8484d01967f7cfc56682b30ce77f99421a12f07bfce416bc6f8aa3568c313cf3a07a5a1ed2d8b0a8d724d6101b6b2be51e7e6f5dc35f55e92b6d8ffd610ec2efdda21c5702a6c2d5044b11f2cfa6915ee7315f6589d6f12eeb9467458711f97d9ad8b5c07ca9e03cfdf1415c07b4c24ccd699e044b91808448487fd0bbface56d661ef61a1d47ad9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="40110100000024"], 0x0, 0x0, 0x0, 0x0, 0x0})

11.200435851s ago: executing program 6 (id=165):
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shutdown(r0, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x22, 0x1, 0xce31, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x40)
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})

9.975958686s ago: executing program 5 (id=166):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)={0x14, 0x2c, 0x3f, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

9.06825461s ago: executing program 9 (id=167):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000040), 0x0, 0x0, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000740)='K', 0x1, 0x24044804, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @local, 0x8}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000008bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r3, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'})
syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_dev$usbfs(&(0x7f0000000180), 0x4995, 0x10000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r2, {0xc}}, './file1\x00'})
write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC], 0x1d8)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

8.382894106s ago: executing program 6 (id=168):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a896adf660000000000001200ffffe0000012fe8000000000000000000000000000aa"], 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x758, 0x120, 0x528, 0x2f8, 0x2f8, 0x440, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x1000, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x5, @ipv4=@rand_addr=0x64010101, 0x4e22}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x4}, 0x68)
r2 = syz_mount_image$fuse(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2, 0x0, 0x1, 0x0, &(0x7f0000000980)="24f255511798f578738d4269229a37d6aeb108513b08ae679be4dbc116cc96c8b39e4e38847d4e46ee869d305b90f9071ef2b576f72428881f3f493de6f03b1d3791972b68559b71af512783ba9bbffd3ff2a3e64702ea53bbd3bbd301dae4f5ff8d77b9a5d9df8d91e502e2e2bbd3f22b3b5984b5c33fbca270119792aa0088329b23a4a95062f1d512b95d125b4579ca1d704b7b6f931ce969a3427be1e0d369e9ec9d95b063a15bb5f803b7e82950017c0e69adea7a792086")
mkdirat(r2, &(0x7f0000000a40)='./file0\x00', 0x0)

7.9630876s ago: executing program 7 (id=169):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x849, 0x1440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x3000)

7.676861478s ago: executing program 6 (id=170):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000002c0)=0x200002, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000140000000000119078000000000000000000004e200010907802000000000000001c5c695a8cd4f15692b6103038bbdc3eeaf7810deb174d2252b9f2c54e77928ef811934e4f6289d1cebf8e8ddc98c4bda484a08785766e8096fb3608d10cf208886aa3cbbfc08ec2c9384c734abb4a9029f5cd7c7763cba49b4d09913b7b270dc67501281a09705acd08813d"], 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "b856f4a1f71825c5", "3cf5cdc252fca8057215c4d1153ab96f", "0f232663", "b1560cb560a7537a"}, 0x28) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000041000b0027bd7000fcdbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="8c8a2e947af6b54d5a8551a9edb684e23360f06d59c5117470591827f9627ddace63a140bbe506e8b6656638102e1a33815e8b5d1e50ab969363a926e7272d"], 0x1c}}, 0x4040080) (async, rerun: 32)
close(r2) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x40020) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendto$packet(r7, &(0x7f0000000140)="f444fa95c09a051ce2a366a5309ccee730dc5295724aa6b04d84cdc7734f1e2273e504abd48930e9b977cb23d0865f1020f495195e4e8215e821cfad683dd644f41bd16dfe9c107b334577f79c4093c58e5fa92fafd54b346d005ad3f6e82a0a88a9124f50f12e0f9c212316de7b8fb95f9200f618e0a1c3c980269d7d39d2e935a756f1fc8c11750b2ff16475cf44a107b73455e0eb78f5b31ffa2173431aa2cc", 0xa1, 0x20000800, 0x0, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', <r10=>0x0, 0x700, 0x700, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @local, @broadcast}}}})
recvfrom(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20, &(0x7f00000003c0)=@ethernet={0x306}, 0x80) (async)
mmap(&(0x7f0000b44000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x800000) (async)
mremap(&(0x7f0000053000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYRES32=r1, @ANYRESHEX=r8, @ANYRES64=r9, @ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f000000a540), 0x2, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0100001000030426bd70000000000000000400", @ANYRESDEC=r7, @ANYRES32=r2, @ANYRES16=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x12c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000004)

0s ago: executing program 7 (id=171):
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"1322030de361dd494234901b30ca190b6505c85c0e8c361eb4b7a5331d24bb0d", r4})

kernel console output (not intermixed with test programs):

0:50:50
[   80.757540][ T5851] veth0_macvtap: entered promiscuous mode
[   80.781583][ T5852] veth0_macvtap: entered promiscuous mode
[   80.794667][ T5849] veth1_macvtap: entered promiscuous mode
[   80.804450][ T5851] veth1_macvtap: entered promiscuous mode
[   80.826591][ T5852] veth1_macvtap: entered promiscuous mode
[   80.861010][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.871204][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.876795][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.891108][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.903695][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.932913][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.943997][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.955033][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.967186][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.979221][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.987016][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.001023][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.011189][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.025232][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.035684][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.047415][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.058600][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.067618][ T5853] veth0_macvtap: entered promiscuous mode
[   81.076694][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.089336][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.104262][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.134996][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.145929][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.159479][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.171264][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.182843][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.193100][ T5853] veth1_macvtap: entered promiscuous mode
[   81.210542][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.214185][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.221026][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.245263][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.254421][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.265044][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.274499][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.283698][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.293198][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.309499][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.320489][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.330997][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.342993][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.354037][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.366130][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.377228][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.388833][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.397716][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.406797][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.415977][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.562129][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.573350][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.586974][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.599041][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.609005][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.619668][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.629629][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.640744][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.652494][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.707261][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.718728][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.730426][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.741051][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.751842][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.765080][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.776106][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.786911][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.797963][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.820561][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.833146][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.843846][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.852974][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.888470][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.898783][ T5884] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.906092][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.952704][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.973477][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.974831][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.987759][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.069150][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.087925][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.104612][ T5884] usb 2-1: Using ep0 maxpacket: 8
[   82.126210][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.130245][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   82.145876][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.163066][ T5837] Bluetooth: hci4: command tx timeout
[   82.182717][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.196791][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.206261][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   82.227348][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 288
[   82.238717][ T5837] Bluetooth: hci3: command tx timeout
[   82.239854][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   82.244185][ T5837] Bluetooth: hci0: command tx timeout
[   82.264721][ T5844] Bluetooth: hci1: command tx timeout
[   82.271435][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   82.319145][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.320191][ T5837] Bluetooth: hci2: command tx timeout
[   82.358474][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.393330][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.468641][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.511934][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.648631][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.697963][ T5884] usb 2-1: GET_CAPABILITIES returned 0
[   82.709121][ T5905] netlink: 'syz.4.5': attribute type 4 has an invalid length.
[   82.722489][ T5884] usbtmc 2-1:16.0: can't read capabilities
[   82.838537][ T5896] usb 4-1: Using ep0 maxpacket: 8
[   82.854072][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   82.877216][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.918519][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   82.960468][ T5886] usb 2-1: USB disconnect, device number 2
[   82.972845][ T5896] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[   82.993485][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.031546][ T5896] usb 4-1: config 0 descriptor??
[   83.099714][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.499621][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0
[   83.525395][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0
[   83.623119][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0
[   83.638314][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0
[   83.689655][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0
[   83.791604][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0
[   83.831661][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised
[   83.859570][ T5896] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero RNG initialised
[   83.878363][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.049813][ T5885] usb 4-1: USB disconnect, device number 2
[   84.092828][ T5927] sctp: [Deprecated]: syz.0.9 (pid 5927) Use of int in maxseg socket option.
[   84.092828][ T5927] Use struct sctp_assoc_value instead
[   84.219846][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   84.238249][ T5837] Bluetooth: hci4: command tx timeout
[   84.268914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.318566][ T5844] Bluetooth: hci1: command tx timeout
[   84.318599][ T5835] Bluetooth: hci3: command tx timeout
[   84.324807][ T5837] Bluetooth: hci0: command tx timeout
[   84.380677][ T5834] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   84.398514][ T5837] Bluetooth: hci2: command tx timeout
[   84.408613][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   84.427597][ T5834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   84.458125][ T5834] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.476666][ T5834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.514739][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.585527][ T5834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   84.601863][   T10] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[   84.624384][ T5834] usb 5-1: invalid MIDI out EP 0
[   84.637909][   T10] usb 2-1: config 0 has no interface number 0
[   84.707854][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[   84.736238][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.788133][   T10] usb 2-1: Product: syz
[   84.792405][   T10] usb 2-1: Manufacturer: syz
[   84.827061][   T10] usb 2-1: SerialNumber: syz
[   84.845292][   T10] usb 2-1: config 0 descriptor??
[   84.856843][ T5834] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[   84.866518][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.953691][   T10] ftdi_sio 2-1:0.23: FTDI USB Serial Device converter detected
[   84.966532][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   84.987179][ T5834] usb 5-1: USB disconnect, device number 2
[   84.999348][   T10] usb 2-1: Detected SIO
[   85.058136][   T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   85.269421][    T9] usb 2-1: USB disconnect, device number 3
[   85.288570][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.308454][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   85.331728][    T9] ftdi_sio 2-1:0.23: device disconnected
[   85.388593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.425116][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.600773][ T5896] usb 1-1: Using ep0 maxpacket: 16
[   85.619561][ T5896] usb 1-1: config 6 has an invalid interface number: 170 but max is 0
[   85.635063][ T5896] usb 1-1: config 6 has no interface number 0
[   85.643925][ T5896] usb 1-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f
[   85.675832][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.695153][ T5896] usb 1-1: Product: syz
[   85.704967][ T5896] usb 1-1: Manufacturer: syz
[   85.718190][ T5896] usb 1-1: SerialNumber: syz
[   85.728147][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.839504][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.878305][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.887324][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.896157][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.930522][   T26] usb 3-1: too many configurations: 9, using maximum allowed: 8
[   85.973829][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.999997][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   86.000134][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.009523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.034958][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.035743][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.048938][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.069466][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.131850][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.154167][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.209240][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.218997][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.230940][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.239386][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.260307][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.271958][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.289201][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.299405][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.365502][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.407183][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.528482][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.618215][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.638547][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.649658][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.678174][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.697033][   T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   86.706943][   T26] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   86.738067][   T26] usb 3-1: config 0 interface 0 has no altsetting 0
[   86.781192][   T26] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   86.813125][   T26] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   86.849281][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   86.914268][   T26] usb 3-1: Product: syz
[   86.936711][   T26] usb 3-1: Manufacturer: syz
[   86.958056][   T26] usb 3-1: SerialNumber: syz
[   86.989345][ T5896] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611
[   87.014339][   T26] usb 3-1: config 0 descriptor??
[   87.032143][ T5896] gspca_sn9c20x: Write register 1000 failed -71
[   87.044410][   T26] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[   87.082843][ T5896] gspca_sn9c20x: Device initialization failed
[   87.191295][ T5896] gspca_sn9c20x 1-1:6.170: probe with driver gspca_sn9c20x failed with error -71
[   87.293497][  T976] cfg80211: failed to load regulatory.db
[   87.384843][ T5896] usb 1-1: USB disconnect, device number 2
[   87.808650][ T5884] usb 3-1: USB disconnect, device number 2
[   87.829716][ T5884] yurex 3-1:0.0: USB YUREX #0 now disconnected
[   87.990401][ T5978] netlink: 'syz.0.21': attribute type 4 has an invalid length.
[   88.339692][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.534417][ T5884] usb 3-1: config index 0 descriptor too short (expected 36, got 27)
[   88.568206][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   88.621736][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   88.674258][ T5884] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[   88.717413][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.789080][ T5884] usb 3-1: config 0 descriptor??
[   88.835586][ T5884] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   89.204901][  T976] usb 3-1: USB disconnect, device number 3
[   89.967068][ T5998] ucma_write: process 17 (syz.1.25) changed security contexts after opening file descriptor, this is not allowed.
[   90.678551][ T6008] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[   90.809774][ T6008] fuse: Bad value for 'fd'
[   91.239559][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'.
[   91.978297][ T5896] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   92.225340][ T5896] usb 3-1: Using ep0 maxpacket: 32
[   92.249646][ T5896] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   92.286368][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.358335][ T5896] usb 3-1: config 0 descriptor??
[   92.739502][  T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.130372][  T976] usb 1-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[   93.141303][  T976] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[   93.213594][ T5896] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[   93.235615][ T5896] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[   93.251447][  T976] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[   93.259214][ T5896] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[   93.274809][  T976] usb 1-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0
[   93.299691][  T976] usb 1-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   93.335746][  T976] usb 1-1: config 48 interface 0 has no altsetting 0
[   93.347892][  T976] usb 1-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[   93.358131][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.374126][  T976] usb 1-1: Product: syz
[   93.394015][  T976] usb 1-1: Manufacturer: syz
[   93.404255][  T976] usb 1-1: SerialNumber: syz
[   93.495487][ T5837] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   93.502392][ T5837] Bluetooth: Wrong link type (-22)
[   93.568184][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   93.655364][  T976] usb 1-1: USB disconnect, device number 3
[   93.729480][ T5884] usb 5-1: Using ep0 maxpacket: 32
[   93.770439][ T5884] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[   93.791738][ T5884] usb 5-1: config 0 has no interface number 0
[   93.814835][ T5884] usb 5-1: config 0 interface 12 has no altsetting 0
[   93.831208][ T5884] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   93.844670][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.853423][ T5884] usb 5-1: Product: syz
[   93.857783][ T5884] usb 5-1: Manufacturer: syz
[   93.873663][ T5884] usb 5-1: SerialNumber: syz
[   93.885244][ T5884] usb 5-1: config 0 descriptor??
[   93.943904][ T6046] FAULT_INJECTION: forcing a failure.
[   93.943904][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   93.957451][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.2.39 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[   93.957482][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   93.957494][ T6046] Call Trace:
[   93.957501][ T6046]  <TASK>
[   93.957508][ T6046]  dump_stack_lvl+0x241/0x360
[   93.957539][ T6046]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.957560][ T6046]  ? __pfx__printk+0x10/0x10
[   93.957582][ T6046]  ? __pfx_lock_release+0x10/0x10
[   93.957619][ T6046]  should_fail_ex+0x40a/0x550
[   93.957651][ T6046]  _copy_from_user+0x2d/0xb0
[   93.957677][ T6046]  copy_msghdr_from_user+0xae/0x680
[   93.957703][ T6046]  ? __pfx___might_resched+0x10/0x10
[   93.957731][ T6046]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   93.957762][ T6046]  ? __sys_sendmmsg+0x392/0x720
[   93.957781][ T6046]  ? __might_fault+0xaa/0x120
[   93.957805][ T6046]  __sys_sendmmsg+0x32b/0x720
[   93.957837][ T6046]  ? __pfx___sys_sendmmsg+0x10/0x10
[   93.957870][ T6046]  ? __pfx_lock_release+0x10/0x10
[   93.957893][ T6046]  ? kstrtouint_from_user+0x128/0x190
[   93.957939][ T6046]  ? ksys_write+0x22a/0x2b0
[   93.957959][ T6046]  ? __pfx_lock_release+0x10/0x10
[   93.957990][ T6046]  ? sb_end_write+0xe9/0x1c0
[   93.958014][ T6046]  ? vfs_write+0x7fa/0xd10
[   93.958044][ T6046]  ? __mutex_unlock_slowpath+0x227/0x800
[   93.958099][ T6046]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   93.958129][ T6046]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   93.958157][ T6046]  ? do_syscall_64+0x100/0x230
[   93.958189][ T6046]  __x64_sys_sendmmsg+0xa0/0xb0
[   93.958212][ T6046]  do_syscall_64+0xf3/0x230
[   93.958239][ T6046]  ? clear_bhb_loop+0x35/0x90
[   93.958268][ T6046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.958292][ T6046] RIP: 0033:0x7f060a58d169
[   93.958310][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.958325][ T6046] RSP: 002b:00007f060b310038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   93.958346][ T6046] RAX: ffffffffffffffda RBX: 00007f060a7a6080 RCX: 00007f060a58d169
[   93.958359][ T6046] RDX: 0000000004000095 RSI: 0000400000005240 RDI: 0000000000000004
[   93.958372][ T6046] RBP: 00007f060b310090 R08: 0000000000000000 R09: 0000000000000000
[   93.958384][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   93.958394][ T6046] R13: 0000000000000000 R14: 00007f060a7a6080 R15: 00007f060a8cfa28
[   93.958423][ T6046]  </TASK>
[   94.216391][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'.
[   94.634739][ T5884] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[   94.648608][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.656693][ T5884] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[   94.664912][ T5884] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   94.673762][ T5884] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[   94.688520][ T5884] usb 5-1: USB disconnect, device number 3
[   94.858234][ T5834] usb 1-1: Using ep0 maxpacket: 8
[   94.866926][ T5834] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   94.879090][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   94.889746][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 288
[   94.901521][ T5834] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.914923][ T5834] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   94.924264][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.968299][   T26] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   95.121754][   T26] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[   95.130353][   T26] usb 2-1: config 8 has no interface number 0
[   95.136734][   T26] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   95.138660][ T5834] usb 1-1: GET_CAPABILITIES returned 0
[   95.148326][   T26] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0
[   95.171862][ T5834] usbtmc 1-1:16.0: can't read capabilities
[   95.174851][   T26] usb 2-1: config 8 interface 177 has no altsetting 0
[   95.185407][   T26] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[   95.202997][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.233080][ T6051] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   95.367634][ T6049] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71
[   95.402200][ T5834] usb 1-1: USB disconnect, device number 4
[   95.457451][   T26] usb 2-1: string descriptor 0 read error: -71
[   95.472128][   T26] ir_toy 2-1:8.177: required endpoints not found
[   95.496923][   T26] usb 2-1: USB disconnect, device number 4
[   95.728370][  T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   95.858371][  T976] usb 5-1: device descriptor read/64, error -71
[   96.030671][   T30] audit: type=1326 audit(1742387027.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.054162][   T30] audit: type=1326 audit(1742387027.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.086539][   T30] audit: type=1326 audit(1742387027.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.116729][   T30] audit: type=1326 audit(1742387027.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.119384][  T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   96.152162][   T30] audit: type=1326 audit(1742387027.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.176952][   T30] audit: type=1326 audit(1742387027.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.202321][   T30] audit: type=1326 audit(1742387027.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100b98d169 code=0x7ffc0000
[   96.226937][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.319911][  T976] usb 5-1: device descriptor read/64, error -71
[   96.378887][ T5834] usb 1-1: device descriptor read/64, error -71
[   96.402638][ T6075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.50'.
[   96.412053][ T6075] Zero length message leads to an empty skb
[   96.430162][  T976] usb usb5-port1: attempt power cycle
[   96.618087][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.748357][ T5834] usb 1-1: device descriptor read/64, error -71
[   96.809009][  T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   96.839003][  T976] usb 5-1: device descriptor read/8, error -71
[   96.871849][ T5834] usb usb1-port1: attempt power cycle
[   97.098428][  T976] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   97.140108][  T976] usb 5-1: device descriptor read/8, error -71
[   97.221477][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   97.249688][  T976] usb usb5-port1: unable to enumerate USB device
[   97.257136][ T5834] usb 1-1: device descriptor read/8, error -71
[   97.498202][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   97.521487][ T5834] usb 1-1: device descriptor read/8, error -71
[   97.628458][ T5834] usb usb1-port1: unable to enumerate USB device
[   98.782997][ T5837] Bluetooth: hci1: unexpected cc 0x2024 length: 2 > 1
[   98.795526][ T6084] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET)
[   99.108205][   T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   99.268193][   T26] usb 5-1: Using ep0 maxpacket: 32
[   99.295686][   T26] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   99.304916][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.314723][   T26] usb 5-1: config 0 descriptor??
[   99.530309][   T26] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   99.542006][   T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   99.552202][   T26] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   99.560808][   T26] usb 5-1: media controller created
[   99.578158][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.149687][   T26] az6027: usb out operation failed. (-71)
[  100.155776][   T26] stb0899_attach: Driver disabled by Kconfig
[  100.164760][   T26] az6027: no front-end attached
[  100.164760][   T26] 
[  100.173289][   T26] az6027: usb out operation failed. (-71)
[  100.180127][   T26] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  100.189724][   T26] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  100.204385][   T26] dvb-usb: schedule remote query interval to 400 msecs.
[  100.212638][   T26] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  100.223987][   T26] usb 5-1: USB disconnect, device number 8
[  100.275571][   T26] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  100.968256][  T976] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  101.128377][  T976] usb 5-1: Using ep0 maxpacket: 8
[  101.135330][  T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  101.147217][  T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  101.157457][  T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 288
[  101.167610][  T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.180798][  T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.190357][  T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.407347][  T976] usb 5-1: GET_CAPABILITIES returned 0
[  101.412999][  T976] usbtmc 5-1:16.0: can't read capabilities
[  101.614604][ T6092] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71
[  101.627742][  T976] usb 5-1: USB disconnect, device number 9
[  102.186705][ T6094] netlink: 64 bytes leftover after parsing attributes in process `syz.4.57'.
[  105.498272][  T976] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  105.658191][  T976] usb 5-1: Using ep0 maxpacket: 32
[  105.681798][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.690749][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.707573][  T976] usb 5-1: unable to get BOS descriptor or descriptor too short
[  105.717292][  T976] usb 5-1: unable to read config index 0 descriptor/start: -71
[  105.725589][  T976] usb 5-1: can't read configurations, error -71
[  106.293308][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.309336][ T6100] bond_slave_1: entered promiscuous mode
[  106.429868][ T5884] bond_slave_1: left promiscuous mode
[  107.535092][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  107.545607][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  107.554601][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  107.562880][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  107.570989][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  107.579628][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.710044][ T6106] chnl_net:caif_netlink_parms(): no params data found
[  107.775530][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.782869][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.790505][ T6106] bridge_slave_0: entered allmulticast mode
[  107.797914][ T6106] bridge_slave_0: entered promiscuous mode
[  107.806024][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.814539][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.822601][ T6106] bridge_slave_1: entered allmulticast mode
[  107.830474][ T6106] bridge_slave_1: entered promiscuous mode
[  107.858388][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.870701][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.899109][ T6106] team0: Port device team_slave_0 added
[  107.906407][ T6106] team0: Port device team_slave_1 added
[  107.926502][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.934489][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.962367][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.974673][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.981998][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.008823][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.049592][ T6106] hsr_slave_0: entered promiscuous mode
[  108.056031][ T6106] hsr_slave_1: entered promiscuous mode
[  108.064200][ T6106] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.072776][ T6106] Cannot create hsr debugfs directory
[  108.193311][ T6106] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  108.205746][ T6106] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  108.215184][ T6106] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  108.225496][ T6106] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.252295][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.259619][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.267610][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.274786][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.334274][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.352954][  T148] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.363525][  T148] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.387547][ T6106] 8021q: adding VLAN 0 to HW filter on device team0
[  108.415918][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.423197][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.436776][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.443973][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.514881][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.553011][ T6106] veth0_vlan: entered promiscuous mode
[  108.567954][ T6106] veth1_vlan: entered promiscuous mode
[  108.597410][ T6106] veth0_macvtap: entered promiscuous mode
[  108.606134][ T6106] veth1_macvtap: entered promiscuous mode
[  108.625860][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.638141][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.648544][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.659320][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.669449][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.680542][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.691585][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.703289][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.714219][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.725156][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.737372][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.751009][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.762556][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.773024][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.785070][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.803123][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.813863][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.823987][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.834734][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.845296][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.855862][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.867434][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.882710][ T6106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.892258][ T6106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.902084][ T6106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.911181][ T6106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.984511][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.994800][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.024845][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.033019][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.424519][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  109.434530][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  109.444772][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  109.454383][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  109.462250][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  109.471101][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  109.598167][ T5837] Bluetooth: hci5: command tx timeout
[  109.630897][ T6122] chnl_net:caif_netlink_parms(): no params data found
[  109.693966][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.702210][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.709801][ T6122] bridge_slave_0: entered allmulticast mode
[  109.717465][ T6122] bridge_slave_0: entered promiscuous mode
[  109.726287][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.734199][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.741658][ T6122] bridge_slave_1: entered allmulticast mode
[  109.749101][ T6122] bridge_slave_1: entered promiscuous mode
[  109.791453][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.804014][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.833409][ T6122] team0: Port device team_slave_0 added
[  109.844747][ T6122] team0: Port device team_slave_1 added
[  109.869363][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.876361][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.904233][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.918847][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.926035][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.952557][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.052594][ T6122] hsr_slave_0: entered promiscuous mode
[  110.060522][ T6122] hsr_slave_1: entered promiscuous mode
[  110.066633][ T6122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.076668][ T6122] Cannot create hsr debugfs directory
[  110.207308][ T6122] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  110.217428][ T6122] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  110.229995][ T6122] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  110.241128][ T6122] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  110.273499][   T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  110.310765][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.341647][ T6122] 8021q: adding VLAN 0 to HW filter on device team0
[  110.359673][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.366792][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.380731][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.388238][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.440151][   T10] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[  110.457156][   T10] usb 6-1: config 0 has no interface number 0
[  110.458575][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.469931][   T10] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[  110.502489][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.511775][   T10] usb 6-1: Product: syz
[  110.512353][ T6122] veth0_vlan: entered promiscuous mode
[  110.518676][   T10] usb 6-1: Manufacturer: syz
[  110.533896][   T10] usb 6-1: SerialNumber: syz
[  110.549292][   T10] usb 6-1: config 0 descriptor??
[  110.556087][ T6122] veth1_vlan: entered promiscuous mode
[  110.560819][   T10] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected
[  110.574369][   T10] usb 6-1: Detected SIO
[  110.582079][   T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  110.613687][ T6122] veth0_macvtap: entered promiscuous mode
[  110.645055][ T6122] veth1_macvtap: entered promiscuous mode
[  110.675522][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.686869][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.696908][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.709050][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.719397][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.732183][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.742346][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.753282][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.764827][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.778092][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.788561][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.799800][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.816124][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.827451][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.840170][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.850688][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.861922][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.872667][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.884440][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.894956][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.906061][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.916699][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.929466][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.939914][ T6122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.950986][ T6122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.969392][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.984562][ T5884] usb 6-1: USB disconnect, device number 2
[  110.984796][ T6122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.000683][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  111.010475][ T6122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.010515][ T6122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.010542][ T6122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.075412][ T5884] ftdi_sio 6-1:0.23: device disconnected
[  111.141385][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.152211][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.181815][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.192062][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.519124][ T5837] Bluetooth: hci6: command tx timeout
[  111.679005][ T5837] Bluetooth: hci5: command tx timeout
[  111.906136][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.914876][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.924602][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.934489][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.942226][ T5835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  111.954760][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.968154][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  112.135435][ T5893] usb 6-1: Using ep0 maxpacket: 32
[  112.146646][ T5893] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  112.188116][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.228917][ T5893] usb 6-1: config 0 descriptor??
[  112.247696][ T6143] chnl_net:caif_netlink_parms(): no params data found
[  112.448386][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  112.457538][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.480210][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.487511][ T6143] bridge_slave_0: entered allmulticast mode
[  112.571519][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.589395][ T6143] bridge_slave_0: entered promiscuous mode
[  112.597065][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  112.608802][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.616248][ T5893] usb 6-1: media controller created
[  112.622784][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.654396][ T6143] bridge_slave_1: entered allmulticast mode
[  112.664939][ T6143] bridge_slave_1: entered promiscuous mode
[  112.673627][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  112.846888][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.876040][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.996102][ T6143] team0: Port device team_slave_0 added
[  113.008862][ T6143] team0: Port device team_slave_1 added
[  113.042679][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.079779][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.158401][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.171807][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.179899][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.223725][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.236712][ T5893] az6027: usb out operation failed. (-71)
[  113.242710][ T5893] stb0899_attach: Driver disabled by Kconfig
[  113.253583][ T5893] az6027: no front-end attached
[  113.253583][ T5893] 
[  113.262978][ T5893] az6027: usb out operation failed. (-71)
[  113.277552][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  113.309609][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6
[  113.350860][ T5893] dvb-usb: schedule remote query interval to 400 msecs.
[  113.360856][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  113.373650][ T6143] hsr_slave_0: entered promiscuous mode
[  113.388325][ T6143] hsr_slave_1: entered promiscuous mode
[  113.396830][ T5893] usb 6-1: USB disconnect, device number 3
[  113.403656][ T6143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.425509][ T6143] Cannot create hsr debugfs directory
[  113.475456][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  113.600324][ T5837] Bluetooth: hci6: command tx timeout
[  113.705722][ T6143] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  113.721910][ T6143] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  113.758311][ T5837] Bluetooth: hci5: command tx timeout
[  113.765419][ T6143] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  113.818331][ T6143] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  114.001128][ T5837] Bluetooth: hci7: command tx timeout
[  114.113381][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.184078][ T6143] 8021q: adding VLAN 0 to HW filter on device team0
[  114.267292][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.274805][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.304067][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.311384][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.403270][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.463618][ T6143] veth0_vlan: entered promiscuous mode
[  114.568167][ T5893] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  114.630255][ T6143] veth1_vlan: entered promiscuous mode
[  114.722776][ T6143] veth0_macvtap: entered promiscuous mode
[  114.748226][ T5893] usb 7-1: Using ep0 maxpacket: 16
[  114.755364][ T5893] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.788846][ T5893] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  114.802567][ T6143] veth1_macvtap: entered promiscuous mode
[  114.843279][ T5893] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  114.864278][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.906667][ T5893] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.918030][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.938065][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  114.968129][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.979266][ T5893] usb 7-1: SerialNumber: syz
[  115.012036][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.014370][ T5893] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  115.038233][ T5893] cdc_acm 7-1:1.0: This needs exactly 3 endpoints
[  115.054187][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.055209][ T5893] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22
[  115.100031][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.118818][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  115.119918][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.140571][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  115.146167][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.159918][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  115.160761][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.188246][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  115.189005][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.206930][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.217662][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.232020][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.238196][ T5835] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  115.242654][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.262034][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.271492][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  115.338999][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.378097][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.404735][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.424776][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.440846][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.474872][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.495616][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.508742][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.529852][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.551790][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.568167][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.588425][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.608961][ T6143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.632203][ T6143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.645822][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.679061][ T5835] Bluetooth: hci6: command tx timeout
[  115.691715][ T6143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.692784][   T10] usb 7-1: USB disconnect, device number 2
[  115.721437][ T6143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.746048][ T6143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.756805][ T6143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.838302][ T5835] Bluetooth: hci5: command tx timeout
[  115.956389][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.995303][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.076406][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.085758][ T5835] Bluetooth: hci7: command tx timeout
[  116.128227][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.145305][ T6171] chnl_net:caif_netlink_parms(): no params data found
[  116.425554][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.438282][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.445666][ T6171] bridge_slave_0: entered allmulticast mode
[  116.453225][ T6171] bridge_slave_0: entered promiscuous mode
[  116.470548][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.486679][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.494366][ T6171] bridge_slave_1: entered allmulticast mode
[  116.502048][ T6171] bridge_slave_1: entered promiscuous mode
[  116.535948][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.549072][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.596347][ T6171] team0: Port device team_slave_0 added
[  116.605533][ T6171] team0: Port device team_slave_1 added
[  116.639495][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  116.652656][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.675640][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.708356][   T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  116.713473][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.745016][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.752402][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.779649][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.811794][ T5884] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  116.828160][ T5884] usb 7-1: config 0 has no interface number 0
[  116.851009][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  116.868652][   T26] usb 8-1: Using ep0 maxpacket: 32
[  116.874543][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.887102][   T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.907759][ T5884] usb 7-1: Product: syz
[  116.914516][ T6171] hsr_slave_0: entered promiscuous mode
[  116.920717][   T26] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  116.930866][ T5884] usb 7-1: Manufacturer: syz
[  116.935607][ T5884] usb 7-1: SerialNumber: syz
[  116.947060][ T6171] hsr_slave_1: entered promiscuous mode
[  116.956712][ T5884] usb 7-1: config 0 descriptor??
[  116.965006][   T26] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  116.976436][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.985003][   T26] usb 8-1: Product: syz
[  116.985051][ T6171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.990919][   T26] usb 8-1: Manufacturer: syz
[  117.002375][   T26] usb 8-1: SerialNumber: syz
[  117.010826][   T26] usb 8-1: config 0 descriptor??
[  117.017060][ T6171] Cannot create hsr debugfs directory
[  117.208577][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  117.216847][ T6171] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  117.227515][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.247535][ T6171] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  117.248959][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.277379][ T6171] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  117.283180][ T5884] usb 7-1: Found UVC 0.08 device syz (046d:0823)
[  117.297773][ T5884] usb 7-1: No valid video chain found.
[  117.309491][ T5884] usb 7-1: USB disconnect, device number 3
[  117.323005][ T6171] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  117.360115][ T5835] Bluetooth: hci8: command tx timeout
[  117.363053][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.373360][ T6171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.380967][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.381497][    T9] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[  117.388169][ T6171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.404831][    T9] usb 6-1: config 0 has no interface number 0
[  117.423346][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.432019][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.437441][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[  117.449471][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.457635][    T9] usb 6-1: Product: syz
[  117.462062][    T9] usb 6-1: Manufacturer: syz
[  117.466725][    T9] usb 6-1: SerialNumber: syz
[  117.473898][    T9] usb 6-1: config 0 descriptor??
[  117.484407][    T9] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected
[  117.499289][    T9] usb 6-1: Detected SIO
[  117.505223][    T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  117.585254][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.611873][ T6171] 8021q: adding VLAN 0 to HW filter on device team0
[  117.627086][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.634340][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.650652][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.657905][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.721849][ T6171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.744200][    T9] usb 6-1: USB disconnect, device number 4
[  117.759247][ T5835] Bluetooth: hci6: command tx timeout
[  117.773723][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  117.802608][    T9] ftdi_sio 6-1:0.23: device disconnected
[  117.811381][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.881517][ T6171] veth0_vlan: entered promiscuous mode
[  117.900605][ T6171] veth1_vlan: entered promiscuous mode
[  117.941977][ T6171] veth0_macvtap: entered promiscuous mode
[  117.966411][ T6171] veth1_macvtap: entered promiscuous mode
[  117.997842][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.014523][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.048663][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.065304][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.077383][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.088689][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.099997][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.111213][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.121116][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.131981][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.141967][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.152930][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.159730][ T5835] Bluetooth: hci7: command tx timeout
[  118.163351][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.180325][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.190803][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.204752][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.216580][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.233914][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.246467][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.256530][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.267184][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.277090][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.287776][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.297859][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.310808][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.318385][ T5884] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  118.321152][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.340505][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.350485][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.361517][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.384529][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.403845][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.427868][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.440613][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.456453][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.479792][ T6171] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.488913][ T5884] usb 7-1: Using ep0 maxpacket: 32
[  118.495852][ T6171] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.508916][ T5884] usb 7-1: config 3 has an invalid interface number: 171 but max is 0
[  118.524197][ T5884] usb 7-1: config 3 has no interface number 0
[  118.530926][ T6171] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.542285][ T5884] usb 7-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0
[  118.553382][ T6171] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.592093][ T5884] usb 7-1: config 3 interface 171 has no altsetting 0
[  118.617521][ T5884] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  118.655260][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  118.685609][ T5884] usb 7-1: Product: syz
[  118.696838][ T5884] usb 7-1: Manufacturer: syz
[  118.710297][ T5884] usb 7-1: SerialNumber: syz
[  118.976641][ T5835] Bluetooth: hci6: unexpected cc 0x2024 length: 2 > 1
[  119.014434][ T5884] as10x_usb: device has been detected
[  119.043838][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.073213][ T5884] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  119.103677][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.190249][ T5884] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  119.227838][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.259831][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.319466][ T5884] as10x_usb: error during firmware upload part1
[  119.365544][ T5884] Registered device Sky IT Digital Key (green led)
[  119.369907][   T26] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  119.397511][ T5884] usb 7-1: USB disconnect, device number 4
[  119.460884][ T5835] Bluetooth: hci8: command tx timeout
[  119.554653][ T5884] Unregistered device Sky IT Digital Key (green led)
[  119.574307][ T5884] as10x_usb: device has been disconnected
[  119.637228][   T26] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  119.698327][   T48] usb 8-1: USB disconnect, device number 2
[  119.739151][   T26] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  119.855692][   T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  119.933210][   T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  120.032171][   T26] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  120.158340][   T26] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  120.218582][   T26] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  120.237290][ T6207] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.273831][   T26] usb 6-1: Product: syz
[  120.298225][ T5835] Bluetooth: hci7: command tx timeout
[  120.308168][   T26] usb 6-1: Manufacturer: syz
[  120.330409][ T6198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  120.395401][   T26] cdc_wdm 6-1:1.0: skipping garbage
[  120.430595][ T6208] bond_slave_1: entered promiscuous mode
[  120.436532][   T26] cdc_wdm 6-1:1.0: skipping garbage
[  120.477679][   T26] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  120.525984][   T26] cdc_wdm 6-1:1.0: Unknown control protocol
[  120.541944][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.601775][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.732215][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.732510][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.735733][ T5884] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  120.747986][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.748107][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.748749][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.748772][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.748966][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.748987][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.749175][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.749195][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.749382][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.749401][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.749588][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.749606][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.749797][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.749815][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.750001][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.750020][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.750208][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.750226][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.750422][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  120.750441][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  120.750572][   T48] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  120.898484][   T48] usb 8-1: Using ep0 maxpacket: 16
[  120.898663][ T5884] usb 7-1: Using ep0 maxpacket: 8
[  120.903698][   T48] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  120.903731][   T48] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  120.903823][   T48] usb 8-1: config 0 has no interface number 0
[  120.904073][ T5884] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.904216][ T5884] usb 7-1: config 1 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  120.904247][ T5884] usb 7-1: config 1 interface 0 has no altsetting 0
[  120.908873][ T5884] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  120.908905][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.908927][ T5884] usb 7-1: Product: syz
[  120.908944][ T5884] usb 7-1: Manufacturer: syz
[  120.909023][ T5884] usb 7-1: SerialNumber: syz
[  120.916082][   T48] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  120.916116][   T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.916138][   T48] usb 8-1: Product: syz
[  120.916155][   T48] usb 8-1: Manufacturer: syz
[  120.916234][   T48] usb 8-1: SerialNumber: syz
[  120.921337][   T48] usb 8-1: config 0 descriptor??
[  120.926437][ T5884] usb 7-1: bad CDC descriptors
[  120.959803][ T5884] usbtest 7-1:1.0: couldn't get endpoints, -22
[  120.959973][ T5884] usbtest 7-1:1.0: probe with driver usbtest failed with error -22
[  121.050449][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  121.050509][ T5884] usb 6-1: USB disconnect, device number 5
[  121.144830][   T48] usb 8-1: Found UVC 0.00 device syz (046d:08f3)
[  121.144871][   T48] usb 8-1: No valid video chain found.
[  121.159793][   T48] usb 8-1: USB disconnect, device number 3
[  121.186060][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.81'.
[  121.298422][ T5884] usb 7-1: USB disconnect, device number 5
[  121.526921][ T5835] Bluetooth: hci8: command tx timeout
[  122.164182][ T6219] netlink: 5 bytes leftover after parsing attributes in process `syz.7.84'.
[  122.171544][ T6220] netlink: 5 bytes leftover after parsing attributes in process `syz.7.84'.
[  122.569722][ T6223] IPVS: length: 66 != 8
[  122.832517][ T5888] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  123.015298][ T5888] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[  123.015333][ T5888] usb 6-1: config 0 has no interface number 0
[  123.026151][ T5888] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b
[  123.026189][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.026211][ T5888] usb 6-1: Product: syz
[  123.026229][ T5888] usb 6-1: Manufacturer: syz
[  123.026246][ T5888] usb 6-1: SerialNumber: syz
[  123.034208][ T5888] usb 6-1: config 0 descriptor??
[  123.043615][ T5888] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected
[  123.044391][ T5888] usb 6-1: Detected SIO
[  123.059622][ T5888] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  123.366522][ T5888] usb 6-1: USB disconnect, device number 6
[  123.369637][ T5888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  123.370033][ T5888] ftdi_sio 6-1:0.23: device disconnected
[  123.459014][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  123.469823][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  123.471673][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  123.472921][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  123.474207][ T5837] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  123.474550][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  123.600628][ T5837] Bluetooth: hci8: command tx timeout
[  123.887123][ T6208] tty tty36: ldisc open failed (-12), clearing slot 35
[  123.919507][ T6205] bond_slave_1: left promiscuous mode
[  124.367690][ T6226] chnl_net:caif_netlink_parms(): no params data found
[  124.595384][ T5837] Bluetooth: Unknown BR/EDR signaling command 0x0d
[  124.602930][ T5837] Bluetooth: Wrong link type (-22)
[  124.717443][ T6241] input: syz0 as /devices/virtual/input/input7
[  124.774795][ T6242] netlink: 'syz.7.91': attribute type 1 has an invalid length.
[  124.821215][ T6234] bridge0: port 3(vlan2) entered blocking state
[  124.871621][ T6234] bridge0: port 3(vlan2) entered disabled state
[  124.920648][ T6234] vlan2: entered allmulticast mode
[  124.957523][ T6234] bridge0: entered allmulticast mode
[  125.015057][ T6234] vlan2: left allmulticast mode
[  125.055804][ T6234] bridge0: left allmulticast mode
[  125.520755][ T5837] Bluetooth: hci9: command tx timeout
[  125.574241][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.620777][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.686052][ T6226] bridge_slave_0: entered allmulticast mode
[  125.718278][ T5884] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  125.747890][ T6226] bridge_slave_0: entered promiscuous mode
[  125.799221][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.857345][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.907160][ T6226] bridge_slave_1: entered allmulticast mode
[  125.943681][ T5884] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  125.963662][ T6226] bridge_slave_1: entered promiscuous mode
[  125.973659][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.034020][ T5884] usb 7-1: Product: syz
[  126.057005][ T5884] usb 7-1: Manufacturer: syz
[  126.086922][ T5884] usb 7-1: SerialNumber: syz
[  126.124029][ T5884] usb 7-1: config 0 descriptor??
[  126.151639][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  126.162901][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.255627][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.374402][ T5888] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  126.420227][ T5888] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  126.490207][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  126.537161][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  126.604806][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  126.640883][ T5884] airspy 7-1:0.0: Board ID: 00
[  126.645757][ T5884] airspy 7-1:0.0: Firmware version: 
[  126.668578][ T5888] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  126.709791][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  126.739522][ T5888] usb 6-1: Product: syz
[  126.758150][ T5888] usb 6-1: Manufacturer: syz
[  126.777720][ T6254] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  126.826114][ T5888] cdc_wdm 6-1:1.0: skipping garbage
[  126.846463][ T5888] cdc_wdm 6-1:1.0: skipping garbage
[  126.874441][ T5888] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  126.903601][ T5888] cdc_wdm 6-1:1.0: Unknown control protocol
[  126.917995][    C0] sched: DL replenish lagged too much
[  127.077416][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.124449][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.166407][    C1] wdm_int_callback: 1572 callbacks suppressed
[  127.166435][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.179275][    C1] wdm_int_callback: 1572 callbacks suppressed
[  127.179295][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.191768][    C1] vkms_vblank_simulate: vblank timer overrun
[  127.198332][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.205066][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.212654][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.219404][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.226421][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.233074][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.239451][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.246091][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.252453][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.259101][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.265629][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.272282][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.278664][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.285310][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.291947][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.298678][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.305463][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  127.312179][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  127.553281][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.609404][ T5837] Bluetooth: hci9: command tx timeout
[  127.662059][   T48] usb 6-1: USB disconnect, device number 7
[  127.668033][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  127.691620][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.712105][ T6261] cdc_wdm 6-1:1.0: Tx URB error: -19
[  127.985298][ T5884] airspy 7-1:0.0: Registered as swradio24
[  128.024952][ T5884] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  128.136026][ T6226] team0: Port device team_slave_0 added
[  128.230587][ T6226] team0: Port device team_slave_1 added
[  128.264417][ T5884] usb 7-1: USB disconnect, device number 6
[  128.508529][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.558273][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.778137][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.883726][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.941131][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.129490][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.169336][   T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  129.369626][   T26] usb 6-1: Using ep0 maxpacket: 32
[  129.409230][   T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.456309][   T26] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  129.489149][ T5884] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  129.521284][ T6226] hsr_slave_0: entered promiscuous mode
[  129.548472][   T26] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  129.557720][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.599876][ T6226] hsr_slave_1: entered promiscuous mode
[  129.640495][   T26] usb 6-1: Product: syz
[  129.644742][   T26] usb 6-1: Manufacturer: syz
[  129.652044][ T6226] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.680955][ T5837] Bluetooth: hci9: command tx timeout
[  129.711210][ T6226] Cannot create hsr debugfs directory
[  129.720774][   T26] usb 6-1: SerialNumber: syz
[  129.749735][ T5884] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  129.806475][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.826128][   T26] usb 6-1: config 0 descriptor??
[  129.832082][ T6269] mmap: syz.7.97 (6269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  129.878266][ T5884] usb 7-1: config 0 descriptor??
[  129.954727][ T5884] pwc: Samsung MPC-C10 USB webcam detected.
[  130.197250][ T5884] pwc: send_video_command error -71
[  130.239521][ T5884] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  130.270997][ T5884] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  130.333126][ T5884] usb 7-1: USB disconnect, device number 7
[  130.788358][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  130.803766][ T6226] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  130.852127][ T6226] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  130.883426][ T6226] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  130.943852][ T6226] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  130.987001][ T5884] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  131.015504][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.056736][ T5884] usb 7-1: config 0 descriptor??
[  131.094602][ T5884] pwc: Samsung MPC-C10 USB webcam detected.
[  131.238710][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.332039][ T6226] 8021q: adding VLAN 0 to HW filter on device team0
[  131.377087][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.384479][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.460545][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.467848][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.489359][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[  131.503741][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[  131.740683][ T5884] pwc: recv_control_msg error -71 req 02 val 2c00
[  131.768432][ T5837] Bluetooth: hci9: command tx timeout
[  131.775751][ T5884] pwc: recv_control_msg error -71 req 04 val 1000
[  131.808145][ T5884] pwc: recv_control_msg error -71 req 04 val 1300
[  131.835362][ T5884] pwc: recv_control_msg error -71 req 04 val 1400
[  131.851733][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.878757][ T5884] pwc: recv_control_msg error -71 req 02 val 2000
[  131.895644][ T5884] pwc: recv_control_msg error -71 req 02 val 2100
[  131.936614][ T5884] pwc: recv_control_msg error -71 req 02 val 2200
[  131.989094][ T5884] pwc: recv_control_msg error -71 req 06 val 0600
[  132.024693][ T5884] pwc: recv_control_msg error -71 req 04 val 1500
[  132.032350][   T26] usb 6-1: USB disconnect, device number 8
[  132.041641][ T6226] veth0_vlan: entered promiscuous mode
[  132.095140][ T5884] pwc: recv_control_msg error -71 req 02 val 2500
[  132.134106][ T5884] pwc: recv_control_msg error -71 req 02 val 2400
[  132.184621][ T5884] pwc: recv_control_msg error -71 req 02 val 2600
[  132.196868][ T6226] veth1_vlan: entered promiscuous mode
[  132.228524][ T5884] pwc: recv_control_msg error -71 req 02 val 2900
[  132.278908][ T5884] pwc: recv_control_msg error -71 req 02 val 2800
[  132.352944][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[  132.378397][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[  132.423364][ T5884] pwc: Registered as video103.
[  132.440330][ T6226] veth0_macvtap: entered promiscuous mode
[  132.488751][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[  132.510562][ T6226] veth1_macvtap: entered promiscuous mode
[  132.566977][ T5884] usb 7-1: USB disconnect, device number 8
[  132.603305][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.614518][ T5893] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  132.719941][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.768614][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.828074][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  132.833443][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.859352][ T5893] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  132.916026][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.944177][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.990369][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  133.004285][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.050709][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.074179][ T5893] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  133.097988][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.118295][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.131303][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.155795][ T5893] usb 6-1: config 0 descriptor??
[  133.175146][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.200113][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.237627][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.264205][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.291601][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.324752][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.349460][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.375981][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  133.386562][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.417412][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.448797][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.475269][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.572762][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.604621][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.630630][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  133.654951][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.669684][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  133.681466][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  133.698575][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.708985][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  133.716437][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  133.738975][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.771786][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0
[  133.788917][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.823449][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.854739][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised
[  133.863368][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  133.889191][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.908167][ T5893] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero RNG initialised
[  133.927308][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.986823][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.022269][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.033598][ T5884] usb 7-1: device descriptor read/64, error -71
[  134.065611][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.097712][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.128301][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.150311][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.176597][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.215811][ T6226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.240851][ T6226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.265118][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.312728][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  134.324201][ T6226] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.364941][ T6226] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.389916][ T6226] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.415847][ T6226] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.468314][ T5884] usb 7-1: device descriptor read/64, error -71
[  134.474703][ T5837] Bluetooth: hci0: link tx timeout
[  134.482671][ T5837] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.555210][ T5893] usb 6-1: USB disconnect, device number 9
[  134.600115][ T5884] usb usb7-port1: attempt power cycle
[  134.771958][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.811541][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.882716][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.909496][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.001791][ T5884] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  135.039329][ T5884] usb 7-1: device descriptor read/8, error -71
[  135.299440][ T5884] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  135.360260][ T5884] usb 7-1: device descriptor read/8, error -71
[  135.505691][ T5884] usb usb7-port1: unable to enumerate USB device
[  135.650335][ T5884] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  135.834756][ T5884] usb 10-1: Using ep0 maxpacket: 16
[  135.852637][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.890542][ T5884] usb 10-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  135.928177][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.970616][ T5884] usb 10-1: config 0 descriptor??
[  136.573175][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  136.666708][ T5884] aquacomputer_d5next 0003:0C70:F003.0003: unknown main item tag 0x6
[  136.749702][ T5884] aquacomputer_d5next 0003:0C70:F003.0003: item fetching failed at offset 4/5
[  136.832725][ T5884] aquacomputer_d5next 0003:0C70:F003.0003: probe with driver aquacomputer_d5next failed with error -22
[  136.983877][ T5884] usb 10-1: USB disconnect, device number 2
[  137.975107][ T6313] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  138.050969][ T6313] fuse: Bad value for 'fd'
[  138.161581][ T6317] bond_slave_1: entered promiscuous mode
[  138.468226][   T48] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  138.664444][   T48] usb 7-1: Using ep0 maxpacket: 32
[  138.729464][   T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.790158][   T48] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.888909][   T48] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  138.931403][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.030248][   T48] usb 7-1: config 0 descriptor??
[  139.071664][   T48] hub 7-1:0.0: bad descriptor, ignoring hub
[  139.152294][   T48] hub 7-1:0.0: probe with driver hub failed with error -5
[  139.230114][   T48] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  139.274760][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.374974][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.593088][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.644443][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.752356][ T6317] bond_slave_1: left promiscuous mode
[  139.763740][   T26] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  139.879196][ T5893] usb 7-1: USB disconnect, device number 13
[  139.887720][   T48] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  140.014409][   T26] usb 10-1: Using ep0 maxpacket: 32
[  140.040311][   T26] usb 10-1: config 0 has an invalid interface number: 30 but max is 0
[  140.070128][   T26] usb 10-1: config 0 has no interface number 0
[  140.076494][   T26] usb 10-1: config 0 interface 30 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  140.107434][   T26] usb 10-1: config 0 interface 30 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.120165][   T48] usb 6-1: Using ep0 maxpacket: 32
[  140.150875][   T48] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  140.162413][   T26] usb 10-1: config 0 interface 30 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8
[  140.179656][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.205713][   T26] usb 10-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  140.228245][   T48] usb 6-1: config 0 descriptor??
[  140.235345][   T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.268170][   T26] usb 10-1: Product: syz
[  140.286017][   T26] usb 10-1: Manufacturer: syz
[  140.318708][   T26] usb 10-1: SerialNumber: syz
[  140.357005][   T26] usb 10-1: config 0 descriptor??
[  140.414678][ T6328] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  140.453155][ T6328] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  140.523376][   T48] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  140.556443][   T26] quatech2 10-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  140.610810][   T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  140.660184][   T48] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  140.740288][   T26] usb 10-1: qt2_attach - failed to power on unit: -71
[  140.748986][   T48] usb 6-1: media controller created
[  140.773104][   T26] quatech2 10-1:0.30: probe with driver quatech2 failed with error -71
[  140.855623][   T26] usb 10-1: USB disconnect, device number 3
[  140.873259][   T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.238421][ T5893] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  141.418207][ T5893] usb 7-1: Using ep0 maxpacket: 32
[  141.446777][ T5893] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  141.496830][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.517260][   T48] az6027: usb out operation failed. (-71)
[  141.517307][   T48] stb0899_attach: Driver disabled by Kconfig
[  141.517320][   T48] az6027: no front-end attached
[  141.517320][   T48] 
[  141.538641][ T5893] usb 7-1: config 0 descriptor??
[  141.540432][   T48] az6027: usb out operation failed. (-71)
[  141.540548][   T48] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  141.541893][   T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  141.569659][   T48] dvb-usb: schedule remote query interval to 400 msecs.
[  141.569691][   T48] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  141.637285][   T48] usb 6-1: USB disconnect, device number 10
[  141.841448][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  142.010056][   T48] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  142.117036][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.9.125'.
[  142.728130][ T5888] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  142.914992][ T5888] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  142.986394][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.057100][ T5888] usb 10-1: config 0 descriptor??
[  143.094859][ T5888] cp210x 10-1:0.0: cp210x converter detected
[  143.243152][ T6356] could not allocate digest TFM handle ghash-clmulni
[  143.328787][ T5888] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32
[  143.353716][ T5888] cp210x 10-1:0.0: querying part number failed
[  143.379534][ T5888] usb 10-1: cp210x converter now attached to ttyUSB0
[  143.828120][ T5888] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  144.038399][ T5888] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  144.068420][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.102402][ T5888] usb 9-1: config 0 descriptor??
[  144.124393][ T5888] cp210x 9-1:0.0: cp210x converter detected
[  144.379790][ T6366] netlink: 260 bytes leftover after parsing attributes in process `syz.8.131'.
[  144.703406][ T5888] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  144.974599][ T5888] usb 9-1: cp210x converter now attached to ttyUSB1
[  145.028358][   T48] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  145.177293][ T5888] usb 9-1: USB disconnect, device number 2
[  145.210361][ T5888] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  145.236197][   T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.276161][   T48] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  145.294298][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.319665][   T48] usb 6-1: Product: syz
[  145.330015][   T48] usb 6-1: Manufacturer: syz
[  145.348281][   T48] usb 6-1: SerialNumber: syz
[  145.364235][   T48] usb 6-1: config 0 descriptor??
[  145.390616][   T48] ims_pcu 6-1:0.0: Missing CDC union descriptor
[  145.407580][   T48] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22
[  145.506028][ T5888] cp210x 9-1:0.0: device disconnected
[  145.514952][   T48] usb 10-1: USB disconnect, device number 4
[  145.615608][   T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  145.678919][   T48] cp210x 10-1:0.0: device disconnected
[  145.813400][   T26] usb 6-1: USB disconnect, device number 11
[  146.039067][ T5835] Bluetooth: hci7: unexpected cc 0x2024 length: 2 > 1
[  146.368160][   T48] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  146.480920][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.136'.
[  146.558455][   T48] usb 10-1: Using ep0 maxpacket: 8
[  146.589839][   T48] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  146.651549][   T48] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  146.718329][   T48] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 288
[  146.779991][   T48] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.887048][   T48] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  146.944086][   T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.288236][ T6389] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0
[  147.298075][   T48] usb 10-1: usb_control_msg returned -71
[  147.303903][   T48] usbtmc 10-1:16.0: can't read capabilities
[  147.398292][   T48] usb 10-1: USB disconnect, device number 5
[  147.531525][ T6199] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  147.734405][ T6199] usb 6-1: Using ep0 maxpacket: 8
[  147.744826][ T6199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  147.765741][ T6394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1924324333 (3848648666 ns) > initial count (1312047296 ns). Using initial count to start timer.
[  147.792152][ T6199] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.836430][ T6199] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  147.868530][ T6199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.911188][ T6199] usb 6-1: config 0 descriptor??
[  148.370583][ T6199] nintendo 0003:057E:200E.0004: unknown main item tag 0x0
[  148.412240][ T6199] nintendo 0003:057E:200E.0004: item fetching failed at offset 4/5
[  148.443385][ T6199] nintendo 0003:057E:200E.0004: HID parse failed
[  148.476349][ T6199] nintendo 0003:057E:200E.0004: probe - fail = -22
[  148.512512][ T6199] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -22
[  148.702592][ T6199] usb 6-1: USB disconnect, device number 12
[  148.768382][ T5888] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  148.928104][   T48] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  148.992117][ T5888] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  149.014004][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.060373][ T5888] usb 10-1: config 0 descriptor??
[  149.129329][   T48] usb 9-1: Using ep0 maxpacket: 16
[  149.138338][ T5888] cp210x 10-1:0.0: cp210x converter detected
[  149.198788][   T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.258217][   T48] usb 9-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  149.329881][ T5888] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32
[  149.338274][   T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.407722][ T5888] cp210x 10-1:0.0: querying part number failed
[  149.419121][   T48] usb 9-1: config 0 descriptor??
[  149.476392][ T5888] usb 10-1: cp210x converter now attached to ttyUSB0
[  149.487362][ T6412] FAULT_INJECTION: forcing a failure.
[  149.487362][ T6412] name failslab, interval 1, probability 0, space 0, times 1
[  149.608229][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.7.146 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0
[  149.608263][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  149.608274][ T6412] Call Trace:
[  149.608281][ T6412]  <TASK>
[  149.608289][ T6412]  dump_stack_lvl+0x241/0x360
[  149.608323][ T6412]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.608345][ T6412]  ? __pfx__printk+0x10/0x10
[  149.608380][ T6412]  should_fail_ex+0x40a/0x550
[  149.608415][ T6412]  should_failslab+0xac/0x100
[  149.608443][ T6412]  ? skb_clone+0x20c/0x390
[  149.608465][ T6412]  kmem_cache_alloc_noprof+0x70/0x380
[  149.608498][ T6412]  skb_clone+0x20c/0x390
[  149.608523][ T6412]  __netlink_deliver_tap+0x3c4/0x7f0
[  149.608559][ T6412]  ? netlink_deliver_tap+0x2e/0x1b0
[  149.608580][ T6412]  netlink_deliver_tap+0x19d/0x1b0
[  149.608605][ T6412]  netlink_unicast+0x7c4/0x990
[  149.608636][ T6412]  ? __pfx_netlink_unicast+0x10/0x10
[  149.608655][ T6412]  ? __virt_addr_valid+0x45f/0x530
[  149.608675][ T6412]  ? __phys_addr_symbol+0x2f/0x70
[  149.608693][ T6412]  ? __check_object_size+0x47a/0x730
[  149.608723][ T6412]  netlink_sendmsg+0x8de/0xcb0
[  149.608760][ T6412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.608789][ T6412]  ? aa_sock_msg_perm+0x91/0x160
[  149.608825][ T6412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.608848][ T6412]  __sock_sendmsg+0x221/0x270
[  149.608878][ T6412]  ____sys_sendmsg+0x53a/0x860
[  149.608920][ T6412]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.608939][ T6412]  ? __fget_files+0x2a/0x410
[  149.608970][ T6412]  ? __fget_files+0x2a/0x410
[  149.609009][ T6412]  __sys_sendmsg+0x269/0x350
[  149.609036][ T6412]  ? __pfx___sys_sendmsg+0x10/0x10
[  149.609072][ T6412]  ? do_sys_openat2+0x17a/0x1d0
[  149.609130][ T6412]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  149.609159][ T6412]  ? do_syscall_64+0x100/0x230
[  149.609192][ T6412]  ? do_syscall_64+0xb6/0x230
[  149.609224][ T6412]  do_syscall_64+0xf3/0x230
[  149.609258][ T6412]  ? clear_bhb_loop+0x35/0x90
[  149.609288][ T6412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.609312][ T6412] RIP: 0033:0x7fbb0e78d169
[  149.609331][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.609349][ T6412] RSP: 002b:00007fbb0f59b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.609373][ T6412] RAX: ffffffffffffffda RBX: 00007fbb0e9a5fa0 RCX: 00007fbb0e78d169
[  149.609388][ T6412] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000005
[  149.609402][ T6412] RBP: 00007fbb0f59b090 R08: 0000000000000000 R09: 0000000000000000
[  149.609414][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.609426][ T6412] R13: 0000000000000000 R14: 00007fbb0e9a5fa0 R15: 00007fbb0eacfa28
[  149.609459][ T6412]  </TASK>
[  150.567484][ T5888] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  150.739102][   T48] aquacomputer_d5next 0003:0C70:F003.0005: unknown main item tag 0x6
[  150.811042][ T5888] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  150.823461][   T48] aquacomputer_d5next 0003:0C70:F003.0005: item fetching failed at offset 4/5
[  150.859613][ T5888] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  150.897803][   T48] aquacomputer_d5next 0003:0C70:F003.0005: probe with driver aquacomputer_d5next failed with error -22
[  150.930881][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.148'.
[  150.950604][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  151.009493][ T6199] usb 9-1: USB disconnect, device number 3
[  151.015685][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  151.056843][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  151.140807][ T5888] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  151.165957][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  151.251375][ T5888] usb 6-1: Product: syz
[  151.302719][ T5888] usb 6-1: Manufacturer: syz
[  151.328676][ T6414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  151.343471][ T5888] cdc_wdm 6-1:1.0: skipping garbage
[  151.377071][ T5888] cdc_wdm 6-1:1.0: skipping garbage
[  151.440709][ T5888] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  151.479757][ T5888] cdc_wdm 6-1:1.0: Unknown control protocol
[  151.548413][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.606813][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.748011][    C1] wdm_int_callback: 1764 callbacks suppressed
[  151.748040][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.760805][    C1] wdm_int_callback: 1764 callbacks suppressed
[  151.760828][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.773718][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.780462][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.788924][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.795627][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.805557][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.812236][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.818727][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.825396][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.831895][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.838525][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.844817][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.851444][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.857733][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.864364][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.870743][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.877458][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.883782][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  151.890431][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  151.947845][ T6199] usb 10-1: USB disconnect, device number 6
[  152.033297][ T6199] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  152.135363][ T6199] cp210x 10-1:0.0: device disconnected
[  152.245508][ T5888] usb 6-1: USB disconnect, device number 13
[  152.245574][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  152.586956][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.154'.
[  152.617055][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.9.154'.
[  152.799286][ T6440] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  153.117297][ T6445] sctp: [Deprecated]: syz.9.159 (pid 6445) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.117297][ T6445] Use struct sctp_sack_info instead
[  153.247602][ T6449] sctp: [Deprecated]: syz.9.159 (pid 6449) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.247602][ T6449] Use struct sctp_sack_info instead
[  153.738321][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  153.848557][ T5893] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  153.878484][ T5896] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  153.905122][ T5893] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  153.914647][ T5888] usb 6-1: Using ep0 maxpacket: 16
[  153.946879][ T5896] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  153.956826][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.007286][ T5888] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  154.030507][ T5893] usb 7-1: USB disconnect, device number 14
[  154.058551][ T5896] usb 3-1: USB disconnect, device number 4
[  154.085276][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.146483][ T5888] usb 6-1: config 0 descriptor??
[  154.388634][ T5893] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  154.766819][ T5896] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  155.251097][ T5896] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  155.376406][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.552505][ T5888] aquacomputer_d5next 0003:0C70:F003.0006: unknown main item tag 0x6
[  155.580298][ T5896] usb 10-1: config 0 descriptor??
[  155.669901][ T5896] cp210x 10-1:0.0: cp210x converter detected
[  155.704815][ T5888] aquacomputer_d5next 0003:0C70:F003.0006: item fetching failed at offset 4/5
[  155.838820][ T5888] aquacomputer_d5next 0003:0C70:F003.0006: probe with driver aquacomputer_d5next failed with error -22
[  155.961907][ T5896] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -121
[  156.052364][ T5896] cp210x 10-1:0.0: querying part number failed
[  156.066989][ T5888] usb 6-1: USB disconnect, device number 14
[  156.160281][ T5896] usb 10-1: cp210x converter now attached to ttyUSB0
[  156.449384][ T5896] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  156.771105][ T5896] usb 7-1: unable to get BOS descriptor or descriptor too short
[  156.866453][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.931321][ T5896] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  157.054177][ T5896] usb 7-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  157.115837][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0
[  157.166940][ T5896] usb 7-1: config 1 interface 0 has no altsetting 1
[  157.192756][ T5896] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  157.218107][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.237785][ T5896] usb 7-1: Product: syz
[  157.261351][ T5896] usb 7-1: Manufacturer: syz
[  157.292970][ T5896] usb 7-1: SerialNumber: syz
[  157.333071][ T5893] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  157.441435][   T48] usb 10-1: USB disconnect, device number 7
[  157.496775][   T48] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  157.536540][ T5896] smsusb:smsusb_probe: board id=8, interface number 0
[  157.559532][   T48] cp210x 10-1:0.0: device disconnected
[  157.565430][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  157.585264][ T5896] usb 7-1: selecting invalid altsetting 0
[  157.626543][ T5893] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  157.646840][ T5896] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[  157.685480][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.697000][ T5896] smsusb 7-1:1.0: probe with driver smsusb failed with error -22
[  157.755883][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  157.771073][ T5896] usb 7-1: USB disconnect, device number 16
[  157.809200][ T5893] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  157.850584][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.881018][ T5893] usb 6-1: config 0 descriptor??
[  158.048405][   T48] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  158.246674][   T48] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  158.314230][   T48] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  158.352716][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0
[  158.375939][   T48] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  158.398003][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0
[  158.421209][   T48] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  158.462498][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0
[  158.484057][ T6469] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  158.505273][   T48] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  158.517889][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0
[  158.581780][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0
[  158.610227][   T48] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  158.655673][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0
[  158.679764][   T48] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  158.724143][   T48] usb 10-1: Product: syz
[  158.741134][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: U2F Zero LED initialised
[  158.779176][   T48] usb 10-1: Manufacturer: syz
[  158.825495][   T48] cdc_wdm 10-1:1.0: skipping garbage
[  158.831236][ T5893] hid-u2fzero 0003:10C4:8ACF.0007: U2F Zero RNG initialised
[  158.871660][   T48] cdc_wdm 10-1:1.0: skipping garbage
[  158.918975][   T48] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  158.948429][   T48] cdc_wdm 10-1:1.0: Unknown control protocol
[  166.341005][ T5835] Bluetooth: hci8: link tx timeout
[  166.347646][ T5835] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.307920][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  271.314924][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5210/1:b..l
[  271.323172][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=15549, q=944 ncpus=2)
[  271.330913][    C0] task:udevd           state:R  running task     stack:21568 pid:5210  tgid:5210  ppid:1      task_flags:0x400140 flags:0x00000002
[  271.345484][    C0] Call Trace:
[  271.348786][    C0]  <TASK>
[  271.351756][    C0]  __schedule+0x190e/0x4c90
[  271.356309][    C0]  ? validate_chain+0x11e/0x5920
[  271.361295][    C0]  ? __pfx___schedule+0x10/0x10
[  271.366187][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.372261][    C0]  ? preempt_schedule_irq+0xf0/0x1c0
[  271.377563][    C0]  preempt_schedule_irq+0xfb/0x1c0
[  271.382703][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  271.388484][    C0]  irqentry_exit+0x5e/0x90
[  271.392920][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.398902][    C0] RIP: 0010:lock_release+0x658/0xa30
[  271.404330][    C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 f5 1e 8c 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25
[  271.424259][    C0] RSP: 0018:ffffc90003357480 EFLAGS: 00000206
[  271.430556][    C0] RAX: 0000000000000001 RBX: 1ffff9200066aea2 RCX: ffffc90003357503
[  271.438628][    C0] RDX: 0000000000000002 RSI: ffffffff8c2ac600 RDI: ffffffff8c8100a0
[  271.446640][    C0] RBP: ffffc900033575b0 R08: ffffffff903cfa77 R09: 1ffffffff2079f4e
[  271.454820][    C0] R10: dffffc0000000000 R11: fffffbfff2079f4f R12: 1ffff9200066ae9c
[  271.462839][    C0] R13: 0000000000000246 R14: ffffc90003357510 R15: dffffc0000000000
[  271.471131][    C0]  ? __pfx_save_stack+0x10/0x10
[  271.476010][    C0]  ? page_ext_put+0x97/0xc0
[  271.480514][    C0]  ? __slab_free+0x290/0x380
[  271.485105][    C0]  ? __pfx_lock_release+0x10/0x10
[  271.490140][    C0]  ? __kmalloc_noprof+0x236/0x4c0
[  271.495334][    C0]  ? tomoyo_path_perm+0x2c0/0x610
[  271.500637][    C0]  ? vfs_statx_path+0x23/0x2b0
[  271.505522][    C0]  ? vfs_statx+0x135/0x1f0
[  271.509956][    C0]  ? vfs_fstatat+0xda/0x150
[  271.514463][    C0]  ? do_syscall_64+0xf3/0x230
[  271.519171][    C0]  page_ext_put+0xa3/0xc0
[  271.523533][    C0]  __reset_page_owner+0x2de/0x430
[  271.528577][    C0]  free_frozen_pages+0xe0d/0x10e0
[  271.533641][    C0]  __put_partials+0x160/0x1c0
[  271.538356][    C0]  put_cpu_partial+0x17c/0x250
[  271.543142][    C0]  ? put_cpu_partial+0x70/0x250
[  271.548035][    C0]  __slab_free+0x290/0x380
[  271.552476][    C0]  ? __phys_addr+0xba/0x170
[  271.557104][    C0]  qlist_free_all+0x9a/0x140
[  271.561909][    C0]  kasan_quarantine_reduce+0x14f/0x170
[  271.567596][    C0]  __kasan_slab_alloc+0x23/0x80
[  271.572739][    C0]  __kmalloc_noprof+0x236/0x4c0
[  271.578048][    C0]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  271.583775][    C0]  tomoyo_realpath_from_path+0xcf/0x5e0
[  271.589775][    C0]  tomoyo_path_perm+0x2c0/0x610
[  271.594762][    C0]  ? tomoyo_path_perm+0x28e/0x610
[  271.599834][    C0]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  271.605536][    C0]  ? filename_lookup+0x470/0x670
[  271.610540][    C0]  ? __might_fault+0xaa/0x120
[  271.615277][    C0]  security_inode_getattr+0x130/0x330
[  271.620756][    C0]  vfs_statx_path+0x23/0x2b0
[  271.625382][    C0]  vfs_statx+0x135/0x1f0
[  271.629680][    C0]  ? __pfx_vfs_statx+0x10/0x10
[  271.634455][    C0]  ? strncpy_from_user+0x146/0x270
[  271.639610][    C0]  ? getname_flags+0x1e3/0x540
[  271.644407][    C0]  vfs_fstatat+0xda/0x150
[  271.648828][    C0]  __x64_sys_newfstatat+0x11d/0x1a0
[  271.654126][    C0]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  271.659875][    C0]  ? __rseq_handle_notify_resume+0x34d/0x14e0
[  271.666100][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.672463][    C0]  ? do_syscall_64+0x100/0x230
[  271.677300][    C0]  ? do_syscall_64+0xb6/0x230
[  271.681986][    C0]  do_syscall_64+0xf3/0x230
[  271.686492][    C0]  ? clear_bhb_loop+0x35/0x90
[  271.691172][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.697077][    C0] RIP: 0033:0x7f359bd9a5f4
[  271.701542][    C0] RSP: 002b:00007ffc1d1af568 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  271.709976][    C0] RAX: ffffffffffffffda RBX: 000055e0dd64e6d0 RCX: 00007f359bd9a5f4
[  271.717965][    C0] RDX: 00007ffc1d1af578 RSI: 000055e0dd63c7ff RDI: 00000000ffffff9c
[  271.726072][    C0] RBP: 000055e10babd448 R08: 00062305ed946d00 R09: 7fffffffffffffff
[  271.734084][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.742125][    C0] R13: 0000000000000001 R14: 00062305ed946d00 R15: 000055e0dd642dca
[  271.750139][    C0]  </TASK>
[  271.753177][    C0] rcu: rcu_preempt kthread starved for 10418 jiffies! g15549 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  271.764392][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  271.774451][    C0] rcu: RCU grace-period kthread stack dump:
[  271.780358][    C0] task:rcu_preempt     state:R  running task     stack:26104 pid:18    tgid:18    ppid:2      task_flags:0x208040 flags:0x00004000
[  271.793963][    C0] Call Trace:
[  271.797268][    C0]  <TASK>
[  271.800220][    C0]  __schedule+0x190e/0x4c90
[  271.804834][    C0]  ? __pfx___schedule+0x10/0x10
[  271.809697][    C0]  ? __pfx_lock_release+0x10/0x10
[  271.814741][    C0]  ? __pfx___mod_timer+0x10/0x10
[  271.819685][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.826011][    C0]  ? schedule+0x90/0x320
[  271.830274][    C0]  schedule+0x14b/0x320
[  271.834470][    C0]  schedule_timeout+0x15a/0x290
[  271.839363][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  271.845212][    C0]  ? __pfx_process_timeout+0x10/0x10
[  271.850697][    C0]  ? prepare_to_swait_event+0x330/0x350
[  271.856330][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  271.861217][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  271.866438][    C0]  ? rcu_gp_init+0x1256/0x1630
[  271.871292][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  271.876247][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  271.882398][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  271.887679][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  271.893575][    C0]  ? finish_swait+0xd4/0x1e0
[  271.898262][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.903475][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  271.908079][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.913280][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  271.919208][    C0]  ? __kthread_parkme+0x169/0x1d0
[  271.924272][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.929574][    C0]  kthread+0x7a9/0x920
[  271.933652][    C0]  ? __pfx_kthread+0x10/0x10
[  271.938342][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.943645][    C0]  ? __pfx_kthread+0x10/0x10
[  271.948268][    C0]  ? __pfx_kthread+0x10/0x10
[  271.952902][    C0]  ? __pfx_kthread+0x10/0x10
[  271.957533][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.962859][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  271.968133][    C0]  ? __pfx_kthread+0x10/0x10
[  271.972856][    C0]  ret_from_fork+0x4b/0x80
[  271.977386][    C0]  ? __pfx_kthread+0x10/0x10
[  271.982008][    C0]  ret_from_fork_asm+0x1a/0x30
[  271.986796][    C0]  </TASK>
[  271.989821][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  271.996136][    C0] Sending NMI from CPU 0 to CPUs 1:
[  272.001352][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30
[  272.048481][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  272.054872][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  272.812196][ T5835] Bluetooth: hci8: command 0x0406 tx timeout
[  272.854652][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  272.898390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  272.984899][ T5889] usb 6-1: USB disconnect, device number 15
[  275.291629][ T5842] Bluetooth: hci7: command 0x0406 tx timeout
[  275.297744][ T5842] Bluetooth: hci9: command 0x0406 tx timeout
[  275.304012][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  275.310244][ T5846] Bluetooth: hci6: command 0x0406 tx timeout
[  279.728063][ T5893] usb 10-1: USB disconnect, device number 8