last executing test programs:

3m46.345314805s ago: executing program 0 (id=825):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r1, 0x851, 0x1)
syz_open_dev$evdev(0x0, 0x7, 0x200000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2003})
timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x1}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000300))
ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000280))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$kcm(0x10, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)

3m45.413589044s ago: executing program 0 (id=828):
memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x82e, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)

3m44.370163809s ago: executing program 0 (id=829):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3m37.599395716s ago: executing program 0 (id=842):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000001240), 0x0)
write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)

3m36.161552672s ago: executing program 0 (id=846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000841}, 0x0)

3m31.608222573s ago: executing program 0 (id=850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

3m16.333482898s ago: executing program 32 (id=850):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x9, 0x20000000, 0xb, 0x7}}, @TCA_DEF_DATA={0xa, 0x3, 'basic\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5)

21.04859587s ago: executing program 2 (id=1192):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fsopen(0x0, 0x1)
fchdir(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="009b7dc25fe9dfd8ef1200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="f5c993fa3aff7f00d0020000aef0000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000)

19.724557729s ago: executing program 2 (id=1197):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700000000000000f4ffffffffffff"], 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_setup(0x1d48, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
signalfd(r1, &(0x7f0000000040)={[0xff]}, 0x8)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0)

18.361444541s ago: executing program 2 (id=1199):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000700000000000000f4ffffffffffffff46a2640000"], 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_setup(0x1d48, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000007c0), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d6", 0xa}], 0x1}, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, 0x0, 0x0)
syz_usb_disconnect(r1)

17.957599123s ago: executing program 4 (id=1201):
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e", 0x1a}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e0", 0x3f}], 0x5}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

14.140963424s ago: executing program 4 (id=1204):
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
syz_emit_ethernet(0x14f, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd6f14e4fa01152ffefe8000000000000000000000000000aafe88"], 0x0)

13.857164319s ago: executing program 4 (id=1206):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

13.533337716s ago: executing program 1 (id=1208):
r0 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x2, 0x2, 0x7}]})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ec0)=@ipv4_newroute={0x50, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x4, 0x4}}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_UID={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x28052c7e}]}, 0x50}}, 0x60800)
socket$unix(0x1, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}})
close(r3)
inotify_init1(0x800)
fcntl$setstatus(r3, 0x4, 0x2c00)
inotify_add_watch(r3, &(0x7f00000000c0)='./control\x00', 0x40000c17)
rmdir(&(0x7f0000000100)='./control\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0)

13.46124819s ago: executing program 4 (id=1209):
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0)

11.295537604s ago: executing program 2 (id=1211):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f00000016c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0xf2, 0x73, 0x0, @empty, @local}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)

11.104429134s ago: executing program 4 (id=1212):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x103000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x10c2, &(0x7f00000004c0)=ANY=[], 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8.698281371s ago: executing program 2 (id=1214):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x80, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
readv(r2, &(0x7f0000001240), 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)

8.093141653s ago: executing program 3 (id=1215):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e9", 0x85}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c031", 0x16}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489", 0xa4}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.38769308s ago: executing program 3 (id=1217):
socket(0x11, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r2, 0x0, 0x0)
sync()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000a0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

7.309268904s ago: executing program 5 (id=1218):
socket$kcm(0x2, 0xa, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff})
preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x9, 0xe000000)
r2 = dup(r0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r6 = dup(r4)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6})
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, 0x25, r2}, 0x94)

7.124083924s ago: executing program 5 (id=1219):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.885971307s ago: executing program 5 (id=1220):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000100)=0x2c0000)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x4, 0x0, 0xe2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x10, 0x700, 0xb4c7, 0x1}})
r6 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "2643dce015fda4df0f646eb478223fd5306ad932a4f9b3b64846c90e9cf83929d66eb19fdb43ff9b894e1ae5078798b0dfc10757a909a1268cb190dcb9c1274a", 0x21}, 0x48, 0xfffffffffffffffc)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

4.708982581s ago: executing program 3 (id=1221):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0xfffffffffffffc01, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000940)={{0x80000000, 0x0, 0x1, [0xf4b3, 0x80000000]}, {0x80000000, 0x0, 0x6, [0x2, 0xd]}, 0x2, [0x4, 0x8]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x9, 0x8d, 0x9bb, {{0x10, 0x4, 0x3, 0x37, 0x40, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x18, 0x5d, 0x0, 0x0, [0x1, 0x4, 0x1000, 0x2, 0x5]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x78, [@multicast2]}, @end, @timestamp_addr={0x44, 0x4, 0xa5, 0x1, 0x6}]}}}}})
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff14}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f02b, 0x1})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r5, r5, 0x0, 0x40008)
getpid()
socket$alg(0x26, 0x5, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

4.513252921s ago: executing program 5 (id=1222):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, 0x0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}], 0x1}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}})
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7f6ed6ed", @ANYRES16=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x20000002)
mlock(&(0x7f0000655000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3.987673029s ago: executing program 3 (id=1223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fsopen(0x0, 0x1)
fchdir(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="009b7dc25fe9dfd8ef1200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="f5c993fa3aff7f00d0020000aef0000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000)

2.483374439s ago: executing program 5 (id=1224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = semget$private(0x0, 0x5, 0xac)
semctl$SETALL(r5, 0x0, 0x9, 0x0)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x1)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020}, 0x2020)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.213102863s ago: executing program 1 (id=1225):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50)

1.989221775s ago: executing program 1 (id=1226):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/mnt\x00')
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0)

1.868839921s ago: executing program 3 (id=1227):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e9", 0x85}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c031", 0x16}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489", 0xa4}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.853324542s ago: executing program 1 (id=1228):
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e", 0x1a}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e0", 0x3f}], 0x5}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.452357753s ago: executing program 1 (id=1229):
socket$kcm(0x2, 0xa, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$swradio(&(0x7f0000000500), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff})
preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x9, 0xe000000)
r2 = dup(r0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r6 = dup(r4)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6})
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, 0x25, r2}, 0x94)

1.360710828s ago: executing program 3 (id=1230):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0})

1.303200791s ago: executing program 4 (id=1231):
socket(0x11, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r2, 0x0, 0x0)
sync()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000a0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1.000173657s ago: executing program 1 (id=1232):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000004500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000100)=0x2c0000)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x4, 0x0, 0xe2, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x10, 0x700, 0xb4c7, 0x1}})
r6 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "2643dce015fda4df0f646eb478223fd5306ad932a4f9b3b64846c90e9cf83929d66eb19fdb43ff9b894e1ae5078798b0dfc10757a909a1268cb190dcb9c1274a", 0x21}, 0x48, 0xfffffffffffffffc)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

32.342728ms ago: executing program 5 (id=1233):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0xa, 0x5, 0x0)
sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x17)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000)
r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@setlink={0x48, 0x13, 0x1, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x20, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7e, 0xf71}}]}]}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080))
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r8, 0x8080583a, 0x0)

0s ago: executing program 2 (id=1234):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, 0x0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}], 0x1}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xfffffffd, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}})
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7f6ed6ed", @ANYRES16=0x0, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x20000002)
mlock(&(0x7f0000655000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

kernel console output (not intermixed with test programs):

idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  175.869356][ T4468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.881143][ T4468] usb 5-1: config 0 descriptor??
[  176.419419][ T4468] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  176.500489][ T4468] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  176.604234][ T4468] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected
[  176.799987][ T4468] usb 5-1: USB disconnect, device number 6
[  176.860673][ T4468] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected
[  177.494035][ T5043] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.502920][ T5043] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.512205][ T5043] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.521065][ T5043] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.710310][ T5043] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.719601][ T5043] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.728632][ T5043] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.737646][ T5043] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.641998][ T5037] fido_id[5037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  184.381102][ T4326] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  184.506794][ T5091] netlink: 'syz.0.195': attribute type 10 has an invalid length.
[  184.515391][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.195'.
[  185.485868][ T5093] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  185.834120][ T4326] usb 5-1: Using ep0 maxpacket: 8
[  187.455700][ T4326] usb 5-1: device descriptor read/all, error -71
[  188.790507][ T5117] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.799660][ T5117] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.809022][ T5117] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.817916][ T5117] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.852594][ T5117] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.861870][ T5117] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.871241][ T5117] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.880511][ T5117] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.281221][ T5145] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  194.547557][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  194.555102][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  195.224054][ T4357] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  196.024078][ T4357] usb 1-1: Using ep0 maxpacket: 8
[  196.037077][ T4357] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.057487][ T4357] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  196.079291][ T4357] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.101852][ T4357] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.307119][ T4357] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.317206][ T4357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.487688][  T125] libceph: connect (1)[c::]:6789 error -101
[  196.502996][  T125] libceph: mon0 (1)[c::]:6789 connect error
[  196.521528][ T5159] ceph: No mds server is up or the cluster is laggy
[  197.274284][ T5157] No buffer was provided with the request
[  198.266291][ T4357] usb 1-1: GET_CAPABILITIES returned 0
[  198.271864][ T4357] usbtmc 1-1:16.0: can't read capabilities
[  198.954981][ T4314] libceph: connect (1)[c::]:6789 error -101
[  198.961124][ T4314] libceph: mon0 (1)[c::]:6789 connect error
[  198.985728][  T125] usb 1-1: USB disconnect, device number 8
[  199.137166][ T5170] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.146131][ T5170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.155044][ T5170] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.163830][ T5170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.212620][ T5170] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.221859][ T5170] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.230979][ T5170] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.239983][ T5170] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.495717][  T125] libceph: connect (1)[c::]:6789 error -101
[  199.501935][  T125] libceph: mon0 (1)[c::]:6789 connect error
[  203.257054][ T5186] netlink: 'syz.0.220': attribute type 10 has an invalid length.
[  203.265102][ T5186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'.
[  206.709478][ T5196] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  207.914168][ T4712] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  208.114180][ T4712] usb 2-1: Using ep0 maxpacket: 32
[  208.160769][ T4712] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  208.174255][ T4712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.204118][ T4712] usb 2-1: Product: syz
[  208.210209][ T4712] usb 2-1: Manufacturer: syz
[  208.215606][ T4712] usb 2-1: SerialNumber: syz
[  208.239625][ T4712] usb 2-1: config 0 descriptor??
[  208.304373][ T4271] Bluetooth: hci1: command 0x0406 tx timeout
[  208.310572][ T4271] Bluetooth: hci2: command 0x0406 tx timeout
[  208.316876][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  208.316904][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  208.322930][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  208.875826][ T4712] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  208.885543][ T5217] capability: warning: `syz.4.230' uses deprecated v2 capabilities in a way that may be insecure
[  208.937402][ T4712] peak_usb 2-1:0.0 can0: sending command failure: -22
[  208.963029][ T4712] peak_usb 2-1:0.0 can0: sending command failure: -22
[  209.337312][ T4712] peak_usb: probe of 2-1:0.0 failed with error -22
[  209.372421][ T4712] usb 2-1: USB disconnect, device number 4
[  209.670984][ T5224] tmpfs: Unknown parameter 'quota'
[  213.012960][ T5241] netlink: 'syz.1.235': attribute type 10 has an invalid length.
[  213.021126][ T5241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.235'.
[  213.193070][ T5242] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  215.877780][ T5248] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  216.995680][ T4284] Bluetooth: hci2: ISO packet for unknown connection handle 1861
[  217.004767][ T5250] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[  217.159541][ T5250] 8021q: adding VLAN 0 to HW filter on device bond1
[  217.280092][ T5249] delete_channel: no stack
[  222.042420][ T5299] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[  222.050430][ T5299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'.
[  223.355072][ T1191] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  223.684162][ T1191] usb 2-1: Using ep0 maxpacket: 32
[  223.697650][ T1191] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  223.844099][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.852507][ T1191] usb 2-1: Product: syz
[  223.857547][ T1191] usb 2-1: Manufacturer: syz
[  223.862390][ T1191] usb 2-1: SerialNumber: syz
[  225.245166][ T1191] usb 2-1: config 0 descriptor??
[  225.289695][ T5302] sctp: failed to load transform for md5: -2
[  225.855881][ T5325] syz.4.257 uses old SIOCAX25GETINFO
[  226.236493][ T1191] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  226.279029][ T1191] peak_usb 2-1:0.0 can0: sending command failure: -22
[  226.305852][ T1191] peak_usb 2-1:0.0 can0: sending command failure: -22
[  226.404310][ T1191] peak_usb: probe of 2-1:0.0 failed with error -22
[  226.445869][ T4314] usb 2-1: USB disconnect, device number 5
[  226.923728][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  226.932273][ T5328] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[  227.571178][ T5328] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.766189][ T5327] delete_channel: no stack
[  228.406825][ T5340] Can't find ip_set type has
[  231.715607][ T5372] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.724899][ T5372] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.733675][ T5372] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.742533][ T5372] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.770656][ T5372] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.780058][ T5372] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.789118][ T5372] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.798176][ T5372] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.507310][ T5381] Can't find ip_set type has
[  235.614944][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  235.630019][ T5404] netlink: 'syz.2.278': attribute type 1 has an invalid length.
[  235.742199][ T5404] 8021q: adding VLAN 0 to HW filter on device bond2
[  235.965596][ T5403] delete_channel: no stack
[  237.283504][ T5420] Can't find ip_set type has
[  237.534204][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  237.894335][ T4315] usb 5-1: Using ep0 maxpacket: 16
[  237.907980][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.960676][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.978378][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'.
[  237.987674][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'.
[  238.019003][ T5430] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.027887][ T5430] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.036830][ T5430] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.045824][ T5430] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.138974][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  238.362903][ T4315] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  238.451538][ T4315] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  238.524516][ T4315] usb 5-1: Manufacturer: syz
[  238.650042][ T4315] usb 5-1: config 0 descriptor??
[  239.829936][ T5425] capability: warning: `syz.2.284' uses 32-bit capabilities (legacy support in use)
[  241.618762][ T4326] usb 5-1: USB disconnect, device number 9
[  242.114211][ T5125] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  242.305886][ T5125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.324695][ T4284] Bluetooth: hci2: ISO packet for unknown connection handle 1861
[  242.335033][ T5453] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[  242.345755][ T5125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.355843][ T5125] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  242.365210][ T5125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.375184][ T5125] usb 4-1: config 0 descriptor??
[  242.399397][ T5453] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.493322][ T5452] delete_channel: no stack
[  242.790296][ T5125] usbhid 4-1:0.0: can't add hid device: -71
[  242.802057][ T5125] usbhid: probe of 4-1:0.0 failed with error -71
[  242.830713][ T5125] usb 4-1: USB disconnect, device number 6
[  242.844249][ T4315] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  243.036309][ T4315] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  243.074157][ T4315] usb 3-1: config 0 has no interface number 0
[  243.189912][ T4315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.254445][ T4315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.299068][ T4315] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  243.328931][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.363875][ T4315] usb 3-1: config 0 descriptor??
[  243.835669][ T4315] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0
[  243.871790][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'.
[  243.880839][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'.
[  243.907553][ T5469] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.916534][ T5469] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.925378][ T5469] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.934272][ T5469] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.663500][ T4315] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0
[  245.708076][ T4315] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1
[  245.971824][ T4315] hid_prodikeys: hid-prodikeys: failed to find output report
[  245.971824][ T4315] 
[  246.309423][ T4315] usb 3-1: USB disconnect, device number 18
[  247.287946][ T5482] fido_id[5482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  248.082798][ T4284] Bluetooth: hci4: ISO packet for unknown connection handle 1861
[  248.095546][ T5497] netlink: 'syz.4.307': attribute type 1 has an invalid length.
[  248.135931][ T5497] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.159331][ T5494] delete_channel: no stack
[  249.957707][ T5523] overlayfs: failed to clone upperpath
[  250.127653][ T4316] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  250.443451][ T4315] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  250.465734][ T4316] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  250.512750][ T4316] usb 5-1: config 0 has no interface number 0
[  250.602081][ T4316] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.706510][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.767147][ T4316] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.798648][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.901251][ T4316] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  250.921780][ T4315] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  250.974830][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.985302][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.023414][ T4316] usb 5-1: config 0 descriptor??
[  251.039767][ T4315] usb 2-1: config 0 descriptor??
[  251.413339][ T5538] netlink: 'syz.2.319': attribute type 10 has an invalid length.
[  251.421438][ T5538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.319'.
[  251.430674][ T5538] device team0 entered promiscuous mode
[  251.437165][ T5538] device team_slave_0 entered promiscuous mode
[  251.443753][ T5538] device team_slave_1 entered promiscuous mode
[  251.452186][ T5538] bridge0: port 3(team0) entered blocking state
[  251.458819][ T5538] bridge0: port 3(team0) entered disabled state
[  251.476529][ T5538] bridge0: port 3(team0) entered blocking state
[  251.483651][ T5538] bridge0: port 3(team0) entered forwarding state
[  252.327628][ T4316] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  252.339473][ T4316] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  252.347348][ T4315] usbhid 2-1:0.0: can't add hid device: -71
[  252.354263][ T4315] usbhid: probe of 2-1:0.0 failed with error -71
[  252.362605][ T4316] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1
[  252.483696][ T4315] usb 2-1: USB disconnect, device number 6
[  252.901668][ T4316] hid_prodikeys: hid-prodikeys: failed to find output report
[  252.901668][ T4316] 
[  253.034468][ T4316] usb 5-1: USB disconnect, device number 10
[  253.123084][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  253.133772][ T5546] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[  253.165321][ T5546] 8021q: adding VLAN 0 to HW filter on device bond3
[  253.190504][ T5545] delete_channel: no stack
[  253.291984][ T5547] fido_id[5547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  254.169620][ T5562] fuse: Invalid rootmode
[  255.114579][   T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  255.406529][   T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  255.417694][   T27] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  255.448919][   T27] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  255.459281][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.472630][   T27] usb 3-1: Product: syz
[  255.498267][   T27] usb 3-1: Manufacturer: syz
[  255.503542][   T27] usb 3-1: SerialNumber: syz
[  255.515700][   T27] usb 3-1: config 0 descriptor??
[  255.521319][ T5573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  255.529271][ T5573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  255.539783][   T27] usb 3-1: ucan: probing device on interface #0
[  255.546673][   T27] usb 3-1: ucan: invalid EP count (1)
[  255.553090][   T27] usb 3-1: ucan: probe failed; try to update the device firmware
[  255.992378][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  256.089333][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  256.149492][ T5583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.335'.
[  257.355753][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  257.368964][ T5602] netlink: 'syz.3.341': attribute type 1 has an invalid length.
[  257.388898][ T5602] 8021q: adding VLAN 0 to HW filter on device bond1
[  257.423398][ T5601] delete_channel: no stack
[  258.085547][ T5584] usb 3-1: USB disconnect, device number 19
[  258.264569][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'.
[  258.273644][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'.
[  258.299552][ T5613] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.308508][ T5613] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.317384][ T5613] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.326192][ T5613] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.026333][ T4284] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  261.035765][ T4284] Bluetooth: hci2: Injecting HCI hardware error event
[  261.052947][ T4271] Bluetooth: hci2: hardware error 0x00
[  263.136337][    T7] libceph: connect (1)[c::]:6789 error -101
[  263.142478][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  263.271889][ T4284] Bluetooth: hci0: ISO packet for unknown connection handle 1861
[  263.281834][ T5646] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[  263.310629][ T5646] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.344769][ T5643] delete_channel: no stack
[  263.362834][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.385295][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.404805][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.413035][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.430827][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.454483][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.473104][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.484514][    T7] libceph: connect (1)[c::]:6789 error -101
[  263.491781][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  263.504794][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.525445][ T5653] netlink: 'syz.4.360': attribute type 3 has an invalid length.
[  263.750424][ T4271] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  263.907470][ T5639] ceph: No mds server is up or the cluster is laggy
[  264.047381][ T5661] xt_connbytes: Forcing CT accounting to be enabled
[  264.608908][ T5663] fuse: Invalid rootmode
[  264.758957][ T4315] libceph: connect (1)[c::]:6789 error -101
[  264.793279][ T4315] libceph: mon0 (1)[c::]:6789 connect error
[  265.288504][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[  265.297628][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[  266.144186][ T4271] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  266.153144][ T4271] Bluetooth: hci4: Injecting HCI hardware error event
[  266.162730][ T4284] Bluetooth: hci4: hardware error 0x00
[  269.363137][ T5695] comedi comedi1: no devices specified
[  269.399244][ T4271] Bluetooth: hci0: ISO packet for unknown connection handle 1861
[  269.407984][ T5694] validate_nla: 44 callbacks suppressed
[  269.407997][ T5694] netlink: 'syz.1.373': attribute type 1 has an invalid length.
[  269.433149][ T5694] 8021q: adding VLAN 0 to HW filter on device bond2
[  269.441394][ T4284] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  269.485404][ T5692] delete_channel: no stack
[  271.069650][ T5713] fuse: Bad value for 'rootmode'
[  271.558762][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[  271.568306][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'.
[  275.677913][ T5726] xt_connbytes: Forcing CT accounting to be enabled
[  276.845504][ T5744] netlink: 'syz.0.388': attribute type 1 has an invalid length.
[  276.884629][ T5744] 8021q: adding VLAN 0 to HW filter on device bond3
[  276.938351][ T5743] delete_channel: no stack
[  277.084151][ T4315] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  277.277394][ T4315] usb 4-1: Using ep0 maxpacket: 16
[  277.288043][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.370416][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.434133][ T4315] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  277.446141][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.454309][ T4326] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  277.515100][ T4315] usb 4-1: config 0 descriptor??
[  277.645438][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.677102][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.711503][ T4326] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  277.761857][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.835276][ T4326] usb 3-1: config 0 descriptor??
[  277.960847][ T4315] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0
[  277.979828][ T4315] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0
[  277.994092][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  278.026823][ T4315] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0
[  278.041067][ T4315] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0
[  278.060052][ T4315] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x0
[  278.080902][ T4315] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  278.199563][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  278.252706][   T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  278.258804][    T7] usb 4-1: USB disconnect, device number 7
[  278.271342][ T4326] usbhid 3-1:0.0: can't add hid device: -71
[  278.282995][ T4326] usbhid: probe of 3-1:0.0 failed with error -71
[  278.340106][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.349804][ T4326] usb 3-1: USB disconnect, device number 20
[  278.391469][   T27] usb 1-1: config 0 descriptor??
[  278.609460][ T5761] fido_id[5761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  278.794889][ T5768] fuse: Bad value for 'rootmode'
[  279.614772][   T27] ath6kl: Failed to submit usb control message: -110
[  279.622177][   T27] ath6kl: unable to send the bmi data to the device: -110
[  279.635502][   T27] ath6kl: Unable to send get target info: -110
[  279.654854][   T27] ath6kl: Failed to init ath6kl core: -110
[  281.007815][   T27] ath6kl_usb: probe of 1-1:0.0 failed with error -110
[  281.090613][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'.
[  281.100728][ T5782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  283.587256][ T5790] device bridge1 entered promiscuous mode
[  284.237424][  T125] usb 1-1: USB disconnect, device number 9
[  284.350641][ T5794] xt_connbytes: Forcing CT accounting to be enabled
[  285.011411][ T5793] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  285.033354][ T5793] 8021q: adding VLAN 0 to HW filter on device bond4
[  285.066261][ T5792] delete_channel: no stack
[  285.795263][ T5810] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[  285.824208][ T5810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.407'.
[  285.987924][ T5817] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  287.076998][ T5827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'.
[  288.233123][   T27] libceph: connect (1)[c::]:6789 error -101
[  288.241879][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  288.262662][ T5829] ceph: No mds server is up or the cluster is laggy
[  288.557364][ T4315] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  288.766234][ T4315] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  288.775950][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.804497][ T4315] usb 5-1: config 0 has no interface number 0
[  288.831351][ T4315] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  288.868537][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.921706][ T4315] usb 5-1: config 0 descriptor??
[  289.530312][ T4281] usb 5-1: USB disconnect, device number 11
[  290.089939][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  290.106004][ T5856] netlink: 'syz.3.420': attribute type 1 has an invalid length.
[  290.140302][ T5856] 8021q: adding VLAN 0 to HW filter on device bond2
[  290.189861][ T5854] delete_channel: no stack
[  291.029847][ T5871] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  292.494033][ T4326] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  292.703978][ T4326] usb 2-1: Using ep0 maxpacket: 32
[  292.714662][ T4326] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  292.763241][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.783087][ T4326] usb 2-1: Product: syz
[  292.803297][ T4326] usb 2-1: Manufacturer: syz
[  292.822945][ T4326] usb 2-1: SerialNumber: syz
[  292.851151][ T4326] usb 2-1: config 0 descriptor??
[  293.271639][ T4326] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-32
[  293.302960][ T4326] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32)
[  293.394693][ T4326] peak_usb: probe of 2-1:0.0 failed with error -32
[  293.422303][ T4326] usb 2-1: USB disconnect, device number 7
[  293.454048][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  293.469191][ T5897] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[  293.502271][ T5897] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.527964][ T5896] delete_channel: no stack
[  293.796137][ T5905] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  295.630535][ T5922] input: syz1 as /devices/virtual/input/input12
[  296.053283][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  296.233565][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  296.263533][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  297.740964][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  297.795027][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  297.840488][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  297.874704][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  297.897466][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  298.023705][ T5946] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  298.776441][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  298.881492][ T5931] netlink: 'syz.2.446': attribute type 3 has an invalid length.
[  298.970841][ T5948] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.992947][ T5947] delete_channel: no stack
[  302.275921][ T5990] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  303.822016][ T6005] validate_nla: 45 callbacks suppressed
[  303.822034][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.840978][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.852372][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  303.862739][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.888588][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.910648][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.925653][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.934395][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.944600][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.954547][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  303.962541][ T6005] netlink: 'syz.3.464': attribute type 3 has an invalid length.
[  304.044085][ T5125] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  304.087211][ T6007] 8021q: adding VLAN 0 to HW filter on device bond5
[  304.100269][ T6006] delete_channel: no stack
[  304.245852][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.288087][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.313386][ T5125] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  304.343350][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.390777][ T5125] usb 2-1: config 0 descriptor??
[  304.820671][ T5125] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  304.843364][ T5125] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  304.926335][ T5125] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected
[  305.086121][ T4315] usb 2-1: USB disconnect, device number 8
[  305.105591][ T4315] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected
[  305.274424][ T6035] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  306.128682][ T6030] fido_id[6030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  308.692736][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  308.764433][ T6067] 8021q: adding VLAN 0 to HW filter on device bond6
[  308.797986][ T6066] delete_channel: no stack
[  308.848785][ T6070] Bluetooth: MGMT ver 1.22
[  310.177534][ T6088] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  312.890755][ T6104] QAT: failed to copy from user cfg_data.
[  313.897154][ T6122] input: syz1 as /devices/virtual/input/input13
[  315.340005][ T6132] misc userio: No port type given on /dev/userio
[  315.352218][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  315.364680][ T6129] validate_nla: 46 callbacks suppressed
[  315.364703][ T6129] netlink: 'syz.3.499': attribute type 1 has an invalid length.
[  315.395101][ T6129] 8021q: adding VLAN 0 to HW filter on device bond3
[  315.410544][ T6128] delete_channel: no stack
[  315.721740][ T4314] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  315.883198][ T6137] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  316.731010][ T4314] usb 3-1: device descriptor read/64, error -71
[  317.004282][ T4314] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  317.165070][ T4314] usb 3-1: device descriptor read/64, error -71
[  317.285308][ T4314] usb usb3-port1: attempt power cycle
[  317.444393][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  317.450795][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  317.804515][ T4314] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  317.846315][ T4314] usb 3-1: device descriptor read/8, error -71
[  317.915699][ T4712] libceph: connect (1)[c::]:6789 error -101
[  317.935518][ T4712] libceph: mon0 (1)[c::]:6789 connect error
[  318.164017][ T4314] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  318.201970][ T6165] ceph: No mds server is up or the cluster is laggy
[  318.213329][ T4712] libceph: connect (1)[c::]:6789 error -101
[  318.230342][ T4712] libceph: mon0 (1)[c::]:6789 connect error
[  318.236174][ T4314] usb 3-1: device descriptor read/8, error -71
[  318.415313][ T6171] input: syz1 as /devices/virtual/input/input14
[  318.516421][ T4314] usb usb3-port1: unable to enumerate USB device
[  318.894383][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 1861
[  318.903849][ T6177] netlink: 'syz.2.513': attribute type 1 has an invalid length.
[  319.045511][ T6177] 8021q: adding VLAN 0 to HW filter on device bond7
[  319.278050][ T6176] delete_channel: no stack
[  320.484983][ T6191] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  322.114029][ T4315] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  323.124330][ T4315] usb 1-1: Using ep0 maxpacket: 8
[  323.146144][ T4315] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  323.164379][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.181484][ T4315] usb 1-1: Product: syz
[  323.190805][ T4315] usb 1-1: Manufacturer: syz
[  323.201414][ T4315] usb 1-1: SerialNumber: syz
[  323.282586][ T4315] usb 1-1: config 0 descriptor??
[  323.331516][ T4315] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  323.727989][ T4315] radio-usb-si4713: probe of 1-1:0.0 failed with error -71
[  323.746420][ T4315] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  324.329988][ T4315] usb 1-1: USB disconnect, device number 10
[  324.616234][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  324.629840][ T6226] netlink: 'syz.3.528': attribute type 1 has an invalid length.
[  324.677999][ T6226] 8021q: adding VLAN 0 to HW filter on device bond4
[  324.716259][ T6225] delete_channel: no stack
[  325.178918][ T6236] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  329.094203][ T4314] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  329.325799][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.355206][ T4314] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  329.370030][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.399472][ T4314] usb 2-1: config 0 descriptor??
[  329.734145][ T4314] pwc: Askey VC010 type 2 USB webcam detected.
[  329.740803][ T4314] pwc: send_video_command error -71
[  329.746236][ T4314] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  329.785954][ T4314] Philips webcam: probe of 2-1:0.0 failed with error -71
[  330.044555][ T4314] usb 2-1: USB disconnect, device number 9
[  330.474264][ T6276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  330.481893][ T6276] UDF-fs: Scanning with blocksize 512 failed
[  330.488430][ T6276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  330.496033][ T6276] UDF-fs: Scanning with blocksize 1024 failed
[  330.502394][ T6276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  330.510094][ T6276] UDF-fs: Scanning with blocksize 2048 failed
[  330.516569][ T6276] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  330.524149][ T6276] UDF-fs: Scanning with blocksize 4096 failed
[  330.919608][ T6281] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  331.344175][ T4314] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  331.794045][ T4314] usb 5-1: device descriptor read/64, error -71
[  332.073992][ T4314] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  332.233999][ T4314] usb 5-1: device descriptor read/64, error -71
[  332.366864][ T4314] usb usb5-port1: attempt power cycle
[  332.790242][ T4314] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  335.729313][ T4314] usb 5-1: device descriptor read/8, error -71
[  336.083239][ T6310] binder_alloc: 6308: binder_alloc_buf, no vma
[  337.728876][ T6321] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  337.918293][ T6314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  337.925881][ T6314] UDF-fs: Scanning with blocksize 512 failed
[  337.932301][ T6314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  337.940560][ T6314] UDF-fs: Scanning with blocksize 1024 failed
[  337.946979][ T6314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  337.954569][ T6314] UDF-fs: Scanning with blocksize 2048 failed
[  337.961159][ T6314] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  337.968777][ T6314] UDF-fs: Scanning with blocksize 4096 failed
[  340.634483][ T6353] device bridge1 entered promiscuous mode
[  341.824240][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  342.144192][   T14] usb 4-1: device descriptor read/64, error -71
[  343.104016][   T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  343.274740][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  343.282481][ T6369] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  343.489049][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.564277][   T27] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  343.706447][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.956057][   T27] usb 2-1: config 0 descriptor??
[  344.992255][   T27] pwc: Askey VC010 type 2 USB webcam detected.
[  345.190900][   T27] pwc: send_video_command error -71
[  345.203419][   T27] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  345.252749][   T27] Philips webcam: probe of 2-1:0.0 failed with error -71
[  345.285475][   T27] usb 2-1: USB disconnect, device number 10
[  346.295419][ T6401] device bridge2 entered promiscuous mode
[  347.296094][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'.
[  347.310571][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[  347.798145][ T6409] input: syz1 as /devices/virtual/input/input16
[  350.374063][ T5125] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  350.432121][ T6422] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  351.404004][ T5125] usb 2-1: device descriptor read/64, error -71
[  353.091892][ T5125] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  353.700494][ T6448] device bridge1 entered promiscuous mode
[  354.754013][ T5125] usb 2-1: device descriptor read/64, error -71
[  354.884250][ T5125] usb usb2-port1: attempt power cycle
[  355.313953][ T5125] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  355.354639][ T5125] usb 2-1: Using ep0 maxpacket: 32
[  355.361689][ T5125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.390717][ T5125] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.422327][ T5125] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.452010][ T5125] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  355.489979][ T5125] usb 2-1: config 0 interface 0 has no altsetting 0
[  355.509429][ T5125] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  355.536013][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.562966][ T5125] usb 2-1: config 0 descriptor??
[  355.725370][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'.
[  355.734643][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'.
[  356.022799][ T5125] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  356.075054][ T5125] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  356.122642][ T5125] hid-thrustmaster 0003:044F:B65D.000A: item fetching failed at offset 3/5
[  356.184362][ T5125] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22
[  356.193060][ T5125] hid-thrustmaster: probe of 0003:044F:B65D.000A failed with error -22
[  356.280247][ T5125] usb 2-1: USB disconnect, device number 13
[  356.354197][ T5543] udevd[5543]: setting mode of /dev/bus/usb/002/013 to 020664 failed: No such file or directory
[  356.398394][ T5543] udevd[5543]: setting owner of /dev/bus/usb/002/013 to uid=0, gid=0 failed: No such file or directory
[  357.339796][ T6470] fuse: Unknown parameter 'user_id00000000000000000000'
[  357.597198][ T6471] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  358.254652][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  358.263720][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[  358.289525][ T6474] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.298434][ T6474] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.307413][ T6474] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.316291][ T6474] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.245012][ T4313] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  360.424140][ T4313] usb 5-1: device descriptor read/64, error -71
[  360.694656][ T4313] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  360.884237][ T4313] usb 5-1: device descriptor read/64, error -71
[  361.035759][ T4313] usb usb5-port1: attempt power cycle
[  361.444075][ T4313] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  361.494372][ T4313] usb 5-1: device descriptor read/8, error -71
[  361.784038][ T4313] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  361.846086][ T4313] usb 5-1: device descriptor read/8, error -71
[  362.044623][ T4313] usb usb5-port1: unable to enumerate USB device
[  363.792732][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'.
[  363.801970][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[  364.203350][ T6512] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  366.480159][   T26] audit: type=1326 audit(1777026503.529:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.0.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8edd19cdd9 code=0x0
[  369.654041][ T4313] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  369.995675][ T4313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.034555][ T4313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.054007][ T4313] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  370.074354][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.108389][ T4313] usb 4-1: config 0 descriptor??
[  370.893173][ T6559] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  371.054066][ T4281] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  371.280735][ T4281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  371.366307][ T4281] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  371.498516][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.670408][ T4281] usb 2-1: config 0 descriptor??
[  373.375859][   T26] audit: type=1326 audit(1777026510.439:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.4.620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe31639cdd9 code=0x0
[  373.384299][ T4281] ath6kl: Failed to submit usb control message: -110
[  373.443683][ T4281] ath6kl: unable to send the bmi data to the device: -110
[  373.462180][ T4281] ath6kl: Unable to send get target info: -110
[  373.509737][ T4281] ath6kl: Failed to init ath6kl core: -110
[  373.742718][ T4317] usb 4-1: USB disconnect, device number 10
[  373.752167][ T4281] ath6kl_usb: probe of 2-1:0.0 failed with error -110
[  374.346713][ T5472] usb 2-1: USB disconnect, device number 14
[  375.384057][ T4284] Bluetooth: hci1: hcon ffff888023526000 sent 1 < count 2
[  375.391454][ T4284] Bluetooth: hci1: hcon ffff888023526000 sent 0 < count 9
[  375.399356][ T4284] Bluetooth: hci1: hcon ffff88801ff9a000 sent 1 < count 9
[  375.959353][ T6607] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  376.900046][ T6614] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  379.254760][   T26] audit: type=1326 audit(1777026516.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.2.632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b019cdd9 code=0x0
[  379.280334][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  379.286858][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  379.513926][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'.
[  379.523054][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'.
[  380.816490][ T6638] binder: 6637:6638 ioctl c0306201 0 returned -14
[  381.112186][ T4284] Bluetooth: hci1: hcon ffff888023526000 sent 0 < count 2
[  381.119605][ T4284] Bluetooth: hci1: hcon ffff888023526000 sent 0 < count 9
[  381.127176][ T4284] Bluetooth: hci1: hcon ffff88801ff9a000 sent 0 < count 9
[  381.144191][ T4315] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  381.346923][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  381.409697][ T4315] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  381.444411][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.456920][ T4315] usb 2-1: config 0 descriptor??
[  381.866107][ T6653] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  382.123901][ T6654] input: syz1 as /devices/virtual/input/input20
[  382.560598][ T4315] ath6kl: Failed to submit usb control message: -110
[  382.577774][ T4315] ath6kl: unable to send the bmi data to the device: -110
[  382.598626][ T4315] ath6kl: Unable to send get target info: -110
[  382.621032][ T4315] ath6kl: Failed to init ath6kl core: -110
[  382.682705][ T4315] ath6kl_usb: probe of 2-1:0.0 failed with error -110
[  382.715494][ T4315] usb 2-1: USB disconnect, device number 15
[  384.773708][   T26] audit: type=1326 audit(1777026521.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6666 comm="syz.3.646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa2b9cdd9 code=0x0
[  387.163077][ T6698] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  390.235800][ T6728] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  391.554204][ T4315] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  391.894438][ T4315] usb 3-1: Using ep0 maxpacket: 32
[  391.903206][ T4315] usb 3-1: no configurations
[  391.960256][ T4315] usb 3-1: can't read configurations, error -22
[  392.101494][ T6753] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  392.362886][ T4315] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  392.554279][ T4315] usb 3-1: Using ep0 maxpacket: 32
[  392.560463][ T4315] usb 3-1: no configurations
[  392.572748][ T4315] usb 3-1: can't read configurations, error -22
[  392.594150][ T4315] usb usb3-port1: attempt power cycle
[  393.044129][ T4315] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  393.086749][ T4315] usb 3-1: Using ep0 maxpacket: 32
[  393.144107][   T27] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  393.980334][ T4315] usb 3-1: no configurations
[  393.985229][ T4315] usb 3-1: can't read configurations, error -22
[  394.144149][ T4315] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  394.174327][   T27] usb 5-1: Using ep0 maxpacket: 32
[  394.184879][ T4315] usb 3-1: Using ep0 maxpacket: 32
[  394.192399][ T4315] usb 3-1: no configurations
[  394.200470][   T27] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  394.759223][ T4315] usb 3-1: can't read configurations, error -22
[  394.766176][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.795183][   T27] usb 5-1: config 0 descriptor??
[  394.801799][ T4315] usb usb3-port1: unable to enumerate USB device
[  394.856022][   T27] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  394.919435][ T6765] Can't find ip_set type has
[  395.934426][   T27] gspca_vc032x: reg_w err -110
[  395.939533][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.189918][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.255028][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.308427][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.371668][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.420615][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.486229][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.563075][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.645501][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.716828][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.792256][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.903724][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  397.974196][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.060156][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.117447][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.122848][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.188834][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.220488][   T27] gspca_vc032x: I2c Bus Busy Wait 00
[  398.254553][   T27] gspca_vc032x: Unknown sensor...
[  398.296037][   T27] vc032x: probe of 5-1:0.0 failed with error -22
[  398.843032][   T27] usb 5-1: USB disconnect, device number 20
[  401.574946][ T6807] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  403.605950][ T6829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  403.626403][ T6829] UDF-fs: Scanning with blocksize 512 failed
[  403.644538][ T6829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  403.662869][ T6829] UDF-fs: Scanning with blocksize 1024 failed
[  403.684558][ T6829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  403.713284][ T6829] UDF-fs: Scanning with blocksize 2048 failed
[  403.750379][ T6829] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  403.760192][ T6829] UDF-fs: Scanning with blocksize 4096 failed
[  407.867265][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.698'.
[  407.884494][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  409.871585][   T26] audit: type=1326 audit(1777026546.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.1.701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb93539cdd9 code=0x0
[  410.855228][ T4314] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  411.186036][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.203982][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  411.221473][ T6882] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  411.240284][ T6882] UDF-fs: Scanning with blocksize 512 failed
[  411.244112][ T4314] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  411.281462][ T6882] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  411.293925][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.303266][ T6882] UDF-fs: Scanning with blocksize 1024 failed
[  411.321971][ T4314] usb 1-1: config 0 descriptor??
[  411.354837][ T6882] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  411.375920][ T4314] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  411.400973][ T6882] UDF-fs: Scanning with blocksize 2048 failed
[  411.429755][ T6882] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  411.448192][ T6882] UDF-fs: Scanning with blocksize 4096 failed
[  412.028683][ T6893] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  413.563047][   T27] usb 1-1: USB disconnect, device number 11
[  414.779204][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'.
[  414.789543][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'.
[  415.633332][ T6932] device syzkaller0 entered promiscuous mode
[  415.875361][ T6936] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  416.124500][ T6936] UDF-fs: Scanning with blocksize 512 failed
[  416.157469][ T6936] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  416.184067][ T6936] UDF-fs: Scanning with blocksize 1024 failed
[  416.606227][ T6936] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  416.624469][ T6936] UDF-fs: Scanning with blocksize 2048 failed
[  416.650761][ T6936] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  416.737847][ T6936] UDF-fs: Scanning with blocksize 4096 failed
[  419.534056][ T5125] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  419.728048][ T5125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.738587][ T5125] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.749040][    C0] vkms_vblank_simulate: vblank timer overrun
[  419.758035][ T5125] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  419.774934][ T5125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.792141][ T5125] usb 3-1: config 0 descriptor??
[  419.815586][ T5125] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  422.726867][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.727'.
[  422.737441][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  423.084918][ T5472] usb 3-1: USB disconnect, device number 29
[  423.212061][ T6989] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  425.278829][   T26] audit: type=1326 audit(1777026562.339:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8edd19cdd9 code=0x0
[  428.765202][ T4315] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  429.499660][ T7045] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  429.547982][ T7045] UDF-fs: Scanning with blocksize 512 failed
[  429.576804][ T4315] usb 3-1: unable to get BOS descriptor or descriptor too short
[  429.588959][ T7045] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  429.624196][ T4315] usb 3-1: unable to read config index 0 descriptor/start: -71
[  429.645462][ T4315] usb 3-1: can't read configurations, error -71
[  429.677223][ T7045] UDF-fs: Scanning with blocksize 1024 failed
[  429.704359][ T7045] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  429.854005][ T7045] UDF-fs: Scanning with blocksize 2048 failed
[  429.886171][ T7045] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  429.923927][ T7045] UDF-fs: Scanning with blocksize 4096 failed
[  430.033574][ T7054] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  433.770884][ T7092] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  433.913141][ T7094] device syzkaller0 entered promiscuous mode
[  433.924559][ T5472] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  434.140774][ T5472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  434.170201][ T5472] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  434.187151][ T5472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.118850][ T5472] usb 2-1: config 0 descriptor??
[  436.235116][ T5472] ath6kl: Failed to submit usb control message: -110
[  436.251348][ T5472] ath6kl: unable to send the bmi data to the device: -110
[  436.319590][ T5472] ath6kl: Unable to send get target info: -110
[  436.378376][ T5472] ath6kl: Failed to init ath6kl core: -110
[  436.455545][ T5472] ath6kl_usb: probe of 2-1:0.0 failed with error -110
[  436.673356][ T7116] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  436.737915][ T4281] usb 2-1: USB disconnect, device number 16
[  440.307449][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  440.314104][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  445.506507][ T7105] device bridge2 entered promiscuous mode
[  445.644150][ T7148] netlink: 'syz.4.766': attribute type 1 has an invalid length.
[  445.800547][ T7148] delete_channel: no stack
[  446.070560][ T7168] input: syz1 as /devices/virtual/input/input26
[  447.068830][ T7173] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  447.543883][ T4315] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  448.202362][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  448.216128][ T4315] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  448.226041][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.239433][ T4315] usb 3-1: config 0 descriptor??
[  448.249074][ T4315] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  449.154037][ T4314] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  449.405812][ T7202] device syzkaller0 entered promiscuous mode
[  450.859521][ T4314] usb 4-1: unable to get BOS descriptor or descriptor too short
[  451.891604][ T4314] usb 4-1: unable to read config index 0 descriptor/start: -71
[  452.179990][   T22] usb 3-1: USB disconnect, device number 32
[  452.498512][ T4314] usb 4-1: can't read configurations, error -71
[  454.589783][ T7223] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  457.093176][ T7205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.101970][ T7205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.110813][ T7205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.119578][ T7205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.152046][ T7205] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.161819][ T7205] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.171049][ T7205] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  457.180086][ T7205] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  458.390545][ T7253] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  458.475769][ T5472] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  458.951378][ T5472] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  459.044779][ T5472] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  459.074117][ T5472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.098753][ T5472] usb 2-1: config 0 descriptor??
[  459.118144][ T5472] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  459.811541][ T7267] device syzkaller0 entered promiscuous mode
[  461.279597][ T4281] usb 2-1: USB disconnect, device number 17
[  465.958462][ T7287] device bridge2 entered promiscuous mode
[  467.372218][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  467.380994][ T7303] UDF-fs: Scanning with blocksize 512 failed
[  467.387679][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  467.395291][ T7303] UDF-fs: Scanning with blocksize 1024 failed
[  467.401993][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  467.409595][ T7303] UDF-fs: Scanning with blocksize 2048 failed
[  467.416166][ T7303] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  467.423847][ T7303] UDF-fs: Scanning with blocksize 4096 failed
[  467.552223][ T7304] xt_connbytes: Forcing CT accounting to be enabled
[  469.873661][ T7328] device bridge3 entered promiscuous mode
[  474.191709][ T7339] device syzkaller0 entered promiscuous mode
[  474.907356][ T7353] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  474.915691][ T7353] UDF-fs: Scanning with blocksize 512 failed
[  474.968039][  T125] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  475.018972][ T7353] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  475.053987][ T7353] UDF-fs: Scanning with blocksize 1024 failed
[  475.078481][ T7353] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  475.101304][ T7353] UDF-fs: Scanning with blocksize 2048 failed
[  475.116596][ T7353] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  475.131099][ T7353] UDF-fs: Scanning with blocksize 4096 failed
[  475.396474][  T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.741246][  T125] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  475.772180][  T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.829529][  T125] usb 4-1: config 0 descriptor??
[  475.849990][  T125] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  476.923919][  T125] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  477.160870][  T125] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32
[  477.196562][  T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.229114][  T125] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 255
[  477.249035][  T125] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  477.262425][  T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.296757][  T125] usb 2-1: config 0 descriptor??
[  477.527431][ T4317] usb 2-1: USB disconnect, device number 18
[  477.714300][  T125] usb 4-1: USB disconnect, device number 13
[  478.901844][ T7383] fuse: Unknown parameter 'fd0x0000000000000007'
[  484.744263][ T7420] device bridge1 entered promiscuous mode
[  485.075507][ T7418] input: syz1 as /devices/virtual/input/input27
[  486.134920][ T7432] Can't find ip_set type has
[  486.402224][ T7431] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[  486.799923][ T7444] fuse: Unknown parameter 'fd0x0000000000000007'
[  487.668784][ T7431] 8021q: adding VLAN 0 to HW filter on device bond3
[  489.867967][ T7426] delete_channel: no stack
[  489.967443][ T7456] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  489.976033][ T7456] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  489.984770][ T7456] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  493.012242][ T7458] device syzkaller0 entered promiscuous mode
[  493.806487][ T5472] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  494.454341][   T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  494.654089][   T14] usb 4-1: Using ep0 maxpacket: 32
[  494.680127][   T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  494.702141][ T5472] usb 5-1: unable to get BOS descriptor or descriptor too short
[  494.870297][ T5472] usb 5-1: unable to read config index 0 descriptor/start: -71
[  494.897941][ T5472] usb 5-1: can't read configurations, error -71
[  494.906734][   T14] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  494.926232][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.935396][   T14] usb 4-1: Product: syz
[  494.940245][   T14] usb 4-1: Manufacturer: syz
[  494.946143][   T14] usb 4-1: SerialNumber: syz
[  494.969097][   T14] usb 4-1: config 0 descriptor??
[  496.626575][ T4468] kworker/dying (4468) used greatest stack depth: 18800 bytes left
[  496.997817][ T4317] usb 4-1: USB disconnect, device number 14
[  497.774304][ T7500] Cannot find del_set index 2 as target
[  498.183979][   T14] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  498.438001][   T14] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  498.465051][   T14] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.486487][   T14] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.519412][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  498.526703][   T14] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  498.536526][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.565195][   T14] usb 5-1: config 0 descriptor??
[  498.649263][ T7516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  498.657176][ T7516] UDF-fs: Scanning with blocksize 512 failed
[  498.670338][ T7516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  498.678227][ T7516] UDF-fs: Scanning with blocksize 1024 failed
[  498.696527][ T7516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  498.704765][ T7516] UDF-fs: Scanning with blocksize 2048 failed
[  498.714215][ T7516] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  498.722251][ T7516] UDF-fs: Scanning with blocksize 4096 failed
[  499.198347][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 69
[  499.705454][   T14] usbhid 5-1:0.0: can't add hid device: -71
[  501.271693][   T14] usbhid: probe of 5-1:0.0 failed with error -71
[  501.371954][   T14] usb 5-1: USB disconnect, device number 23
[  501.759698][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  501.772568][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  505.462615][ T4271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  505.474161][ T4271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  505.487410][ T4271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  505.503150][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  505.522592][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  505.537388][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  505.751252][ T7517] netlink: 'syz.3.864': attribute type 1 has an invalid length.
[  505.884335][ T7517] delete_channel: no stack
[  506.967750][ T4314] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  507.204431][ T4314] usb 5-1: Using ep0 maxpacket: 32
[  507.218429][ T4314] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  507.286049][ T4314] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  507.351437][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.381713][ T4314] usb 5-1: Product: syz
[  507.401055][ T4314] usb 5-1: Manufacturer: syz
[  507.416548][ T4315] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  507.454611][ T4314] usb 5-1: SerialNumber: syz
[  507.675233][ T4276] Bluetooth: hci5: command 0x0409 tx timeout
[  508.199307][ T4314] usb 5-1: config 0 descriptor??
[  508.356847][ T7530] chnl_net:caif_netlink_parms(): no params data found
[  508.664183][ T4338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.904434][ T4338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.003718][ T4276] Bluetooth: hci0: hcon ffff888023622000 sent 1 < count 2
[  509.011777][ T4276] Bluetooth: hci0: hcon ffff888023622000 sent 0 < count 9
[  509.019661][ T4276] Bluetooth: hci0: hcon ffff88801ea80000 sent 1 < count 9
[  509.128229][ T4338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.216186][ T7530] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.223467][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.242097][ T7530] device bridge_slave_0 entered promiscuous mode
[  509.352282][ T4338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.405565][ T7530] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.425508][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.447344][ T7530] device bridge_slave_1 entered promiscuous mode
[  509.550823][   T22] usb 5-1: USB disconnect, device number 24
[  509.673447][ T7530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.734692][ T7530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.743942][ T4276] Bluetooth: hci5: command 0x041b tx timeout
[  511.823915][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  512.330942][ T7530] team0: Port device team_slave_0 added
[  512.455959][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.879'.
[  512.661559][ T7530] team0: Port device team_slave_1 added
[  512.947820][ T4284] Bluetooth: hci0: ISO packet for unknown connection handle 69
[  513.264112][ T4315] usb 4-1: unable to get BOS descriptor or descriptor too short
[  513.904048][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  515.164987][ T4315] usb 4-1: unable to read config index 0 descriptor/start: -32
[  515.172669][ T4315] usb 4-1: chopping to 0 config(s)
[  515.275906][ T4315] usb 4-1: can't read configurations, error -32
[  515.290135][ T7594] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  515.474275][ T4315] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  515.514995][ T7594] 8021q: adding VLAN 0 to HW filter on device bond4
[  515.600434][ T7592] delete_channel: no stack
[  517.453910][  T125] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  517.543450][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.557448][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.630779][ T7530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.660886][  T125] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  517.677177][  T125] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  518.293888][  T125] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  518.302970][  T125] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.325721][  T125] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  518.339395][  T125] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  518.368140][  T125] usb 3-1: Product: syz
[  518.374203][  T125] usb 3-1: Manufacturer: syz
[  518.411829][  T125] cdc_wdm 3-1:1.0: skipping garbage
[  518.433925][  T125] cdc_wdm 3-1:1.0: skipping garbage
[  518.504018][  T125] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  518.510056][  T125] cdc_wdm 3-1:1.0: Unknown control protocol
[  518.592531][ T7530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.603020][ T7530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.673550][ T7630] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  518.696578][ T7530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.787332][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  518.794311][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  518.805132][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  518.811808][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  518.823996][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  518.830729][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  518.837233][ T4315] usb 3-1: USB disconnect, device number 33
[  518.890318][ T7612] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  518.898622][ T7612] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  518.907214][ T7612] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  518.985812][ T7530] device hsr_slave_0 entered promiscuous mode
[  519.010730][ T7530] device hsr_slave_1 entered promiscuous mode
[  519.034458][ T7530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.094593][ T7530] Cannot create hsr debugfs directory
[  521.224946][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'.
[  524.270874][ T7654] netlink: 'syz.4.892': attribute type 1 has an invalid length.
[  525.927513][ T7654] 8021q: adding VLAN 0 to HW filter on device bond3
[  526.009616][ T7652] delete_channel: no stack
[  528.062329][ T7682] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  528.859561][ T7530] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  528.921584][ T7530] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  528.989889][ T7530] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  529.034904][ T7530] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  529.363113][ T4338] device hsr_slave_0 left promiscuous mode
[  529.411264][ T4338] device hsr_slave_1 left promiscuous mode
[  529.425015][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.443101][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.474834][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.482443][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.526053][ T4338] bridge0: port 3(team0) entered disabled state
[  529.554065][  T125] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  529.589208][ T4338] device bridge_slave_1 left promiscuous mode
[  529.609638][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.639095][ T4338] device bridge_slave_0 left promiscuous mode
[  529.658175][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.765797][  T125] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  529.807323][  T125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.863031][  T125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  529.885552][  T125] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.923640][ T4338] device veth1_macvtap left promiscuous mode
[  529.931680][  T125] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  529.950169][ T4338] device veth0_macvtap left promiscuous mode
[  529.960802][ T4338] device veth1_vlan left promiscuous mode
[  529.972978][  T125] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  529.983284][ T4338] device veth0_vlan left promiscuous mode
[  529.997345][  T125] usb 4-1: Product: syz
[  530.007770][  T125] usb 4-1: Manufacturer: syz
[  530.038110][  T125] cdc_wdm 4-1:1.0: skipping garbage
[  530.061550][  T125] cdc_wdm 4-1:1.0: skipping garbage
[  530.088676][  T125] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  530.103963][  T125] cdc_wdm 4-1:1.0: Unknown control protocol
[  530.346131][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  530.352934][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  530.356287][   T22] usb 4-1: USB disconnect, device number 17
[  530.359037][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  530.885653][ T7720] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  530.893234][ T7720] UDF-fs: Scanning with blocksize 512 failed
[  530.899736][ T7720] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  530.907252][ T7720] UDF-fs: Scanning with blocksize 1024 failed
[  530.913653][ T7720] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  530.921295][ T7720] UDF-fs: Scanning with blocksize 2048 failed
[  530.927735][ T7720] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  530.935323][ T7720] UDF-fs: Scanning with blocksize 4096 failed
[  531.416211][ T4284] Bluetooth: hci0: ISO packet for unknown connection handle 1861
[  532.576580][ T4338] bond4 (unregistering): Released all slaves
[  534.319916][ T4338] bond3 (unregistering): Released all slaves
[  534.458141][ T7736] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.908'.
[  534.629706][ T4338] bond2 (unregistering): Released all slaves
[  534.754632][ T4338] bond1 (unregistering): Released all slaves
[  535.248840][ T4338] device team_slave_1 left promiscuous mode
[  535.266402][ T4338] team0 (unregistering): Port device team_slave_1 removed
[  535.313065][ T4338] device team_slave_0 left promiscuous mode
[  535.320161][ T4338] team0 (unregistering): Port device team_slave_0 removed
[  535.370293][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.421471][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.788544][ T4338] bond0 (unregistering): Released all slaves
[  535.897648][ T7696] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  535.906163][ T7696] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  535.914680][ T7696] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  536.138618][ T7731] delete_channel: no stack
[  536.467123][ T7530] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.784008][ T7752] hpfs: Bad magic ... probably not HPFS
[  539.543760][   T26] audit: type=1326 audit(1777026676.599:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.2.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b019cdd9 code=0x0
[  540.047298][ T7530] 8021q: adding VLAN 0 to HW filter on device team0
[  540.218341][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  540.254770][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  540.317170][ T7762] input: syz1 as /devices/virtual/input/input28
[  540.356195][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  540.390129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  540.481563][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.489839][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.541962][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  540.606575][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  540.653111][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  540.718394][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.725690][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.779071][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  540.842995][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  540.889024][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  541.092588][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  541.184769][ T7778] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  541.205534][ T7778] cramfs: wrong magic
[  541.479375][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  541.944535][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  541.977229][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  542.019231][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  542.055958][ T7151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  542.266181][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  542.316577][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  542.434894][ T7530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  543.661097][ T4284] Bluetooth: hci0: ISO packet for unknown connection handle 1861
[  544.960177][ T7782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.641575][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.662133][ T7799] delete_channel: no stack
[  546.689203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.760366][ T7530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.907050][ T7812] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.921'.
[  547.104061][ T4313] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  547.306317][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  547.344978][ T4313] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  547.388867][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.614734][ T4313] usb 2-1: config 0 descriptor??
[  547.655501][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'.
[  548.704534][ T4313] ath6kl: Failed to submit usb control message: -110
[  548.718321][ T4313] ath6kl: unable to send the bmi data to the device: -110
[  548.753050][ T4313] ath6kl: Unable to send get target info: -110
[  548.783332][ T4313] ath6kl: Failed to init ath6kl core: -110
[  548.863592][ T4313] ath6kl_usb: probe of 2-1:0.0 failed with error -110
[  549.036751][ T4313] usb 2-1: USB disconnect, device number 19
[  549.141943][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  549.155768][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  549.213197][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  549.233292][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  549.250254][ T7530] device veth0_vlan entered promiscuous mode
[  549.263705][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  549.277839][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  549.298401][ T7530] device veth1_vlan entered promiscuous mode
[  549.557281][ T7530] device veth0_macvtap entered promiscuous mode
[  549.577631][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  549.588717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  549.606173][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  549.625213][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  549.640420][ T7530] device veth1_macvtap entered promiscuous mode
[  549.658447][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  549.693696][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.733372][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.786491][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.828231][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.848135][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.884007][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.904152][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.937227][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.064203][ T4326] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  550.159002][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.241907][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  550.310596][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  550.437919][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  550.535367][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.632602][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.551045][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.664979][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.880113][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.023220][ T7530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  552.183152][ T7530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  552.380053][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.386359][ T7530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  552.558653][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  552.669759][ T6237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  552.883610][ T7530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  552.901611][ T7875] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.933'.
[  552.941501][ T7865] delete_channel: no stack
[  552.949245][ T7530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  552.958800][ T7530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  552.968360][ T7530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.100041][ T4326] usb 3-1: string descriptor 0 read error: -71
[  553.121136][ T4326] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  553.171038][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.224904][ T4326] usb 3-1: config 0 descriptor??
[  553.233969][ T4326] usb 3-1: can't set config #0, error -71
[  553.276229][ T4326] usb 3-1: USB disconnect, device number 34
[  553.843981][ T7880] input: syz1 as /devices/virtual/input/input29
[  553.889754][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.963383][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.973960][ T7186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  554.009728][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.018488][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.056324][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  554.144423][    T7] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  554.338595][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.369365][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.409770][    T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  554.425173][ T4284] Bluetooth: hci0: hcon ffff888023622000 sent 0 < count 2
[  554.432476][ T4284] Bluetooth: hci0: hcon ffff888023622000 sent 0 < count 9
[  554.439822][ T4284] Bluetooth: hci0: hcon ffff88801ea80000 sent 0 < count 9
[  554.483415][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.564340][    T7] usb 3-1: config 0 descriptor??
[  556.188774][    T7] usbhid 3-1:0.0: can't add hid device: -32
[  556.306861][    T7] usbhid: probe of 3-1:0.0 failed with error -32
[  556.454521][    T7] usb 3-1: USB disconnect, device number 35
[  558.475001][ T7929] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.946'.
[  558.569143][ T7934] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  558.580548][ T7934] cramfs: wrong magic
[  559.392255][ T7937] input: syz1 as /devices/virtual/input/input30
[  560.008606][ T4276] Bluetooth: hci0: hcon ffff888023622000 sent 0 < count 2
[  560.015946][ T4276] Bluetooth: hci0: hcon ffff888023622000 sent 0 < count 9
[  560.023458][ T4276] Bluetooth: hci0: hcon ffff88801ea80000 sent 0 < count 9
[  562.401123][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'.
[  563.187354][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  563.193936][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  565.946910][ T7983] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.962'.
[  566.994328][ T7995] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  567.007048][ T7995] cramfs: wrong magic
[  568.106532][ T8008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  568.114328][ T8008] UDF-fs: Scanning with blocksize 512 failed
[  568.130713][ T8008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  568.142769][ T8008] UDF-fs: Scanning with blocksize 1024 failed
[  568.163558][ T8008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  568.171797][ T8008] UDF-fs: Scanning with blocksize 2048 failed
[  568.182686][ T8008] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  568.191819][ T8008] UDF-fs: Scanning with blocksize 4096 failed
[  571.210777][ T8018] input: syz1 as /devices/virtual/input/input31
[  571.957013][ T8045] device bridge2 entered promiscuous mode
[  573.835371][ T8053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'.
[  574.173881][ T8056] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  574.185834][ T8056] cramfs: wrong magic
[  576.508513][ T8061] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  576.516149][ T8061] UDF-fs: Scanning with blocksize 512 failed
[  576.522739][ T8061] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  576.530484][ T8061] UDF-fs: Scanning with blocksize 1024 failed
[  576.537163][ T8061] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  576.544844][ T8061] UDF-fs: Scanning with blocksize 2048 failed
[  576.551511][ T8061] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  576.559276][ T8061] UDF-fs: Scanning with blocksize 4096 failed
[  579.856816][ T8093] tmpfs: Unknown parameter 'usrquota'
[  581.304088][    T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  581.403866][ T4315] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  581.595603][    T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  581.616065][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.709973][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  581.788155][ T4315] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  581.811570][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  581.823284][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.835896][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  581.952617][ T4315] usb 6-1: config 0 descriptor??
[  581.989445][ T4315] pwc: Askey VC010 type 2 USB webcam detected.
[  582.454655][    T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  582.524400][    T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  582.568597][    T7] usb 2-1: Product: syz
[  582.589663][    T7] usb 2-1: Manufacturer: syz
[  582.641815][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  582.683985][    T7] cdc_wdm 2-1:1.0: skipping garbage
[  582.709741][ T4315] pwc: recv_control_msg error -32 req 02 val 2b00
[  582.728574][    T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  582.736998][ T4315] pwc: recv_control_msg error -32 req 02 val 2700
[  582.758120][    T7] cdc_wdm 2-1:1.0: Unknown control protocol
[  582.767742][ T4315] pwc: recv_control_msg error -32 req 02 val 2c00
[  582.839202][ T8103] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  582.847544][ T8103] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  582.856114][ T8103] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  582.878639][ T4315] pwc: recv_control_msg error -32 req 04 val 1000
[  582.888501][ T4315] pwc: recv_control_msg error -32 req 04 val 1300
[  582.899837][ T4315] pwc: recv_control_msg error -32 req 04 val 1400
[  582.907709][ T4315] pwc: recv_control_msg error -32 req 02 val 2000
[  582.951692][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  582.958456][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  582.964980][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  582.971630][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  582.988445][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  582.995147][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  583.003939][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  583.010643][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  583.017550][    T7] usb 2-1: USB disconnect, device number 20
[  583.024551][ T4315] pwc: recv_control_msg error -32 req 02 val 2100
[  583.255605][ T4315] pwc: recv_control_msg error -71 req 02 val 2500
[  583.271675][ T4315] pwc: recv_control_msg error -71 req 02 val 2400
[  583.633740][ T4315] pwc: recv_control_msg error -71 req 02 val 2600
[  583.881672][ T4315] pwc: recv_control_msg error -71 req 02 val 2900
[  583.919988][ T4315] pwc: recv_control_msg error -71 req 02 val 2800
[  583.963968][ T4315] pwc: recv_control_msg error -71 req 04 val 1100
[  584.011129][ T4315] pwc: recv_control_msg error -71 req 04 val 1200
[  584.146546][ T4315] pwc: Registered as video103.
[  584.168913][ T4315] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32
[  584.311312][ T4315] usb 6-1: USB disconnect, device number 2
[  584.450813][ T8139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  584.458634][ T8139] UDF-fs: Scanning with blocksize 512 failed
[  584.465823][ T8139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  584.534256][ T8139] UDF-fs: Scanning with blocksize 1024 failed
[  584.542119][ T8139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  584.569986][ T8139] UDF-fs: Scanning with blocksize 2048 failed
[  584.638510][ T8139] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  584.677453][ T8139] UDF-fs: Scanning with blocksize 4096 failed
[  587.554056][ T4357] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  587.733926][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'.
[  587.780113][ T4357] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  588.345263][ T4357] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  589.338294][ T4357] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  589.427268][ T4357] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.598795][ T4357] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  589.683831][ T4315] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  589.709587][ T4357] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  589.814395][ T4357] usb 6-1: Product: syz
[  589.866561][ T4357] usb 6-1: Manufacturer: syz
[  590.448449][ T4357] usb 6-1: can't set config #1, error -71
[  590.553520][ T4357] usb 6-1: USB disconnect, device number 3
[  592.414774][ T4315] usb 4-1: device descriptor read/all, error -71
[  592.882457][ T8207] device bridge1 entered promiscuous mode
[  592.933038][ T4317] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  594.312875][ T4317] usb 6-1: unable to get BOS descriptor or descriptor too short
[  594.341455][ T4317] usb 6-1: unable to read config index 0 descriptor/start: -71
[  594.363985][ T4317] usb 6-1: can't read configurations, error -71
[  595.713923][ T4357] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  595.789949][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'.
[  595.919426][ T4357] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  596.014465][ T4357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.326260][ T4357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  596.535087][ T4357] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.738557][ T4357] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  596.877287][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  597.003959][ T4357] usb 3-1: Product: syz
[  597.078188][ T4357] usb 3-1: Manufacturer: syz
[  597.383261][ T4357] cdc_wdm 3-1:1.0: skipping garbage
[  597.496055][ T4357] cdc_wdm 3-1:1.0: skipping garbage
[  598.559633][ T8249] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  599.609415][ T8249] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  599.777596][ T8249] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  600.293926][ T4315] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  600.469980][ T4357] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  600.478555][ T4357] cdc_wdm 3-1:1.0: Unknown control protocol
[  600.496986][ T4315] usb 5-1: Using ep0 maxpacket: 8
[  600.506516][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  600.514821][ T4357] usb 3-1: USB disconnect, device number 36
[  600.632665][ T4315] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  600.686960][ T4315] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  600.722742][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.750388][ T4315] usb 5-1: Product: syz
[  600.763855][ T4315] usb 5-1: Manufacturer: syz
[  600.774586][ T4315] usb 5-1: SerialNumber: syz
[  600.800118][ T4315] usb 5-1: config 0 descriptor??
[  600.832790][ T8275] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  601.259791][ T5472] usb 5-1: USB disconnect, device number 25
[  602.834475][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'.
[  606.224563][ T4315] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  606.426521][ T4315] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  606.468240][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.543365][ T4315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  606.593905][ T4315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.701691][ T4315] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  606.739366][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  606.762171][ T4315] usb 3-1: Product: syz
[  606.779431][ T4315] usb 3-1: Manufacturer: syz
[  607.689830][ T4315] cdc_wdm 3-1:1.0: skipping garbage
[  607.710500][ T4315] cdc_wdm 3-1:1.0: skipping garbage
[  607.720880][ T4315] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  607.740954][ T4315] cdc_wdm 3-1:1.0: Unknown control protocol
[  608.103405][ T8347] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  608.567413][ T8347] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  608.885441][ T8347] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  608.982884][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  608.989590][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  609.000784][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  609.007488][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  609.019581][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  609.026272][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  609.036331][ T5472] usb 3-1: USB disconnect, device number 37
[  612.403873][ T5472] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  612.621269][ T4313] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  612.723547][ T5472] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.516355][ T5472] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  613.530737][ T5472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.539368][ T5472] usb 4-1: Product: syz
[  613.543604][ T5472] usb 4-1: Manufacturer: syz
[  613.548737][ T5472] usb 4-1: SerialNumber: syz
[  613.555865][ T5472] usb 4-1: config 0 descriptor??
[  613.695827][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  613.726009][ T4313] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  614.531864][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.543547][ T4313] usb 2-1: config 0 descriptor??
[  614.578312][ T5472] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected
[  614.613480][ T5472] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82
[  614.758211][ T5472] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  614.766544][ T5472] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  614.886944][ T5472] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  614.900364][ T5472] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  614.980261][ T5472] usb 4-1: USB disconnect, device number 20
[  614.991207][ T5472] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  615.002588][ T5472] keyspan 4-1:0.0: device disconnected
[  615.077534][ T4313] ath6kl: Failed to submit usb control message: -71
[  615.087906][ T4313] ath6kl: unable to send the bmi data to the device: -71
[  615.831390][ T4313] ath6kl: Unable to send get target info: -71
[  616.003914][ T4313] ath6kl: Failed to init ath6kl core: -71
[  616.148326][ T4313] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  616.208985][ T4313] usb 2-1: USB disconnect, device number 21
[  616.586150][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1074'.
[  616.644021][ T4313] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  616.693863][ T4281] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  616.891427][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.000097][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.119061][ T4313] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  617.246408][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.394858][ T4313] usb 2-1: config 0 descriptor??
[  619.669722][ T4313] usbhid 2-1:0.0: can't add hid device: -71
[  619.682329][ T4313] usbhid: probe of 2-1:0.0 failed with error -71
[  619.719468][ T4313] usb 2-1: USB disconnect, device number 22
[  619.837240][ T8443] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  619.846673][ T8443] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  619.858793][ T8443] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  621.042667][ T4317] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  621.092071][ T4281] usb 4-1: device descriptor read/all, error -71
[  621.151146][ T4317] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  622.296685][ T8445] fido_id[8445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  622.450396][ T8465] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  622.458949][ T8465] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  622.467614][ T8465] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  622.485139][ T8459] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  622.492722][ T8459] UDF-fs: Scanning with blocksize 512 failed
[  622.499365][ T8459] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  622.506881][ T8459] UDF-fs: Scanning with blocksize 1024 failed
[  622.513389][ T8459] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  622.520913][ T8459] UDF-fs: Scanning with blocksize 2048 failed
[  622.527294][ T8459] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  622.534870][ T8459] UDF-fs: Scanning with blocksize 4096 failed
[  623.191434][ T8469] tipc: Started in network mode
[  623.204630][ T8469] tipc: Node identity 3e302f30fe6e, cluster identity 4711
[  623.286326][ T8469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  623.336856][ T8471] device syzkaller0 entered promiscuous mode
[  623.404154][ T8474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  623.623461][ T8469] tipc: Resetting bearer <eth:syzkaller0>
[  624.627467][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  624.633978][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  624.654234][ T8468] tipc: Resetting bearer <eth:syzkaller0>
[  625.544975][ T8468] tipc: Disabling bearer <eth:syzkaller0>
[  625.645977][  T125] tipc: Node number set to 3227397936
[  626.163357][ T8505] device syzkaller0 entered promiscuous mode
[  626.399390][  T125] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  627.715505][ T4317] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  627.947121][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  627.979205][ T4317] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  628.101657][ T4317] usb 4-1: config 0 has no interface number 0
[  628.235115][ T4317] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  628.430180][ T4317] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  628.453555][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.467445][ T4317] usb 4-1: Product: syz
[  628.471775][ T4317] usb 4-1: Manufacturer: syz
[  628.481225][ T4317] usb 4-1: SerialNumber: syz
[  628.554629][ T8527] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  628.563139][ T8527] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  628.571882][ T8527] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  628.607054][ T4317] usb 4-1: config 0 descriptor??
[  628.677088][ T8514] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  629.114525][ T8514] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  629.511892][  T125] usb 5-1: unable to get BOS descriptor or descriptor too short
[  629.653778][  T125] usb 5-1: unable to read config index 0 descriptor/start: -71
[  630.062998][  T125] usb 5-1: can't read configurations, error -71
[  632.084349][ T4276] Bluetooth: hci5: command 0x0406 tx timeout
[  632.168600][ T4317] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  632.169862][ T8551] input: syz1 as /devices/virtual/input/input33
[  632.195551][ T4317] asix: probe of 4-1:0.188 failed with error -71
[  632.210166][ T4317] usb 4-1: USB disconnect, device number 23
[  632.637465][ T8557] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1102'.
[  633.172858][ T8563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'.
[  634.103945][ T8582] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  634.112479][ T8582] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  634.121147][ T8582] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  635.234057][ T4314] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  635.611127][ T8600] device bridge1 entered promiscuous mode
[  636.299648][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  636.329149][ T4314] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  636.361732][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.407597][ T4314] usb 3-1: config 0 descriptor??
[  637.304346][ T4314] ath6kl: Failed to submit usb control message: -71
[  637.317212][ T4314] ath6kl: unable to send the bmi data to the device: -71
[  637.376033][ T4314] ath6kl: Unable to send get target info: -71
[  637.389471][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'.
[  637.399740][ T4314] ath6kl: Failed to init ath6kl core: -71
[  640.062855][ T4314] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  640.094103][ T4314] usb 3-1: USB disconnect, device number 38
[  640.260746][ T8624] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c)
[  640.467934][ T8632] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1118'.
[  640.621463][ T8635] ax25_connect(): syz.4.1120 uses autobind, please contact jreuter@yaina.de
[  641.053011][ T8624] ax25_connect(): syz.4.1120 uses autobind, please contact jreuter@yaina.de
[  641.573165][ T8654] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  641.583104][ T8654] cramfs: wrong magic
[  642.587497][ T8668] device bridge2 entered promiscuous mode
[  643.616175][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1126'.
[  646.336438][ T8683] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  646.401930][ T8683] UDF-fs: Scanning with blocksize 512 failed
[  646.438608][ T8683] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  646.607802][ T8683] UDF-fs: Scanning with blocksize 1024 failed
[  647.480306][ T8683] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  647.563939][ T8683] UDF-fs: Scanning with blocksize 2048 failed
[  647.671390][ T8683] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  647.679812][ T8683] UDF-fs: Scanning with blocksize 4096 failed
[  647.910447][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1135'.
[  648.716508][ T8718] device bridge3 entered promiscuous mode
[  649.742185][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'.
[  653.833920][ T4313] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  653.953152][ T8747] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  653.962145][ T8747] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  653.970937][ T8747] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  654.039484][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  654.099066][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'.
[  654.142521][ T4313] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  654.258876][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.494063][ T4313] usb 2-1: config 0 descriptor??
[  654.879464][ T4313] ath6kl: Failed to submit usb control message: -71
[  654.934134][ T4313] ath6kl: unable to send the bmi data to the device: -71
[  654.992092][ T4313] ath6kl: Unable to send get target info: -71
[  655.177962][ T4313] ath6kl: Failed to init ath6kl core: -71
[  655.196203][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'.
[  655.277296][ T8764] device bridge4 entered promiscuous mode
[  655.560530][ T4313] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  655.722726][ T4313] usb 2-1: USB disconnect, device number 23
[  656.078871][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  658.457801][ T8763] delete_channel: no stack
[  658.643994][ T4314] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  658.737789][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1156'.
[  660.588030][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.670018][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.760762][ T4314] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  660.877512][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.037820][ T4314] usb 3-1: config 0 descriptor??
[  661.764448][ T4313] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  662.080008][ T4313] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  662.121067][ T4313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  662.149817][ T4314] usb 3-1: can't set config #0, error -71
[  662.186954][ T4314] usb 3-1: USB disconnect, device number 39
[  662.233135][ T4313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  662.288528][ T4313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.320201][ T4313] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  662.333874][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  662.350221][ T4313] usb 4-1: Product: syz
[  662.355697][ T4313] usb 4-1: Manufacturer: syz
[  662.384673][ T4313] cdc_wdm 4-1:1.0: skipping garbage
[  662.437734][ T4313] cdc_wdm 4-1:1.0: skipping garbage
[  662.463027][ T4313] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  662.479758][ T4313] cdc_wdm 4-1:1.0: Unknown control protocol
[  662.496146][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'.
[  662.644725][ T8802] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  662.654255][ T8802] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  662.662967][ T8802] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  662.800446][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  662.807162][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  662.816949][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  662.823862][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  662.833956][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  662.840651][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  662.847298][ T4317] usb 4-1: USB disconnect, device number 24
[  667.035249][ T8825] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  667.057920][ T8825] cramfs: wrong magic
[  668.413186][ T4276] Bluetooth: hci3: hcon ffff88814d352000 sent 1 < count 2
[  668.573323][ T4276] Bluetooth: hci0: ISO packet for unknown connection handle 1861
[  671.068681][ T8833] delete_channel: no stack
[  672.738618][ T1191] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  673.134116][   T26] audit: type=1326 audit(1777026810.149:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.5.1180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5e539cdd9 code=0x0
[  674.526651][ T1191] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  674.543547][ T1191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  674.596000][ T1191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  674.646383][ T1191] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.704307][ T1191] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  674.746059][ T1191] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  674.772974][ T1191] usb 5-1: Product: syz
[  674.787796][ T1191] usb 5-1: Manufacturer: syz
[  674.812254][ T1191] cdc_wdm 5-1:1.0: skipping garbage
[  674.834857][ T1191] cdc_wdm 5-1:1.0: skipping garbage
[  674.986197][ T1191] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  674.992211][ T1191] cdc_wdm 5-1:1.0: Unknown control protocol
[  675.721071][ T8891] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  675.729724][ T8891] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  675.738376][ T8891] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  676.029471][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  676.036198][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  676.964684][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  676.971387][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  676.979165][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  676.985833][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  677.552574][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  677.559301][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  677.566727][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  677.573412][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  677.595993][ T4357] usb 5-1: USB disconnect, device number 28
[  678.518708][   T26] audit: type=1326 audit(1777026815.579:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  679.652313][   T26] audit: type=1326 audit(1777026815.579:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  679.802417][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  679.874600][   T26] audit: type=1326 audit(1777026815.579:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  679.977658][ T8909] delete_channel: no stack
[  680.015036][   T26] audit: type=1326 audit(1777026815.579:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  680.107374][   T26] audit: type=1326 audit(1777026815.579:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  680.152041][ T8921] fuse: Unknown parameter 'use00000000000000000000'
[  680.201609][   T26] audit: type=1326 audit(1777026815.599:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  680.295596][   T26] audit: type=1326 audit(1777026815.599:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  680.402894][   T26] audit: type=1326 audit(1777026815.599:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  681.118202][   T26] audit: type=1326 audit(1777026815.599:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8897 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc5e539cdd9 code=0x7ffc0000
[  681.534152][ T4313] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  681.785496][ T4313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.812521][ T4313] usb 4-1: config 0 has no interfaces?
[  681.869724][ T8947] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  681.878328][ T8947] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  681.887119][ T8947] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  682.778629][ T4313] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  682.806914][ T4313] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  682.862597][ T4313] usb 4-1: Product: syz
[  682.889953][ T4313] usb 4-1: config 0 descriptor??
[  683.503954][ T4313] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  683.695697][ T4313] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  683.716291][ T4313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  683.783614][ T4313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  683.832512][ T4313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  683.868207][ T4313] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  683.898222][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  683.942418][ T4313] usb 3-1: Product: syz
[  683.962524][ T4313] usb 3-1: Manufacturer: syz
[  684.023158][ T4313] cdc_wdm 3-1:1.0: skipping garbage
[  684.044798][ T4313] cdc_wdm 3-1:1.0: skipping garbage
[  684.070921][ T4313] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  684.088840][ T4313] cdc_wdm 3-1:1.0: Unknown control protocol
[  684.470082][ T8974] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  684.478625][ T8974] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  684.487207][ T8974] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  684.827849][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  684.834552][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  684.844524][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  684.851221][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  684.873880][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  684.880677][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  684.888572][   T27] usb 3-1: USB disconnect, device number 40
[  684.895119][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  684.895149][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  684.895169][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  686.077739][ T1269] ieee802154 phy0 wpan0: encryption failed: -22
[  686.084228][ T1269] ieee802154 phy1 wpan1: encryption failed: -22
[  686.520786][ T4281] usb 4-1: USB disconnect, device number 25
[  687.655580][ T4276] Bluetooth: hci5: ISO packet for unknown connection handle 1861
[  687.665696][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1205'.
[  689.760757][ T8991] delete_channel: no stack
[  689.931046][ T8998] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  689.938701][ T8998] UDF-fs: Scanning with blocksize 512 failed
[  689.945251][ T8998] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  689.952779][ T8998] UDF-fs: Scanning with blocksize 1024 failed
[  689.959950][ T8998] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  689.967664][ T8998] UDF-fs: Scanning with blocksize 2048 failed
[  689.974317][ T8998] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  689.981811][ T8998] UDF-fs: Scanning with blocksize 4096 failed
[  690.134409][ T9006] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  690.142440][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 1861
[  690.465149][ T9006] 8021q: adding VLAN 0 to HW filter on device bond5
[  690.892578][ T9004] delete_channel: no stack
[  693.719712][ T9029] input: syz1 as /devices/virtual/input/input34
[  697.086508][ T9060] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1221'.
[  697.126813][ T9063] device bridge2 entered promiscuous mode
[  701.263968][ T4313] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  701.664849][    C1] ------------[ cut here ]------------
[  701.670744][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600
[  701.680638][    C1] Modules linked in:
[  701.684634][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  701.691720][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  701.701919][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  701.708354][    C1] Code: 24 4c 89 e7 e8 7e 06 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 66 d1 f7 0f 0b e9 f6 f7 ff ff e8 6d 66 d1 f7 <0f> 0b e9 48 fb ff ff e8 61 66 d1 f7 48 c7 c7 50 f1 fa 8d 4c 89 e6
[  701.728099][    C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246
[  701.734294][    C1] RAX: ffffffff89b10ee3 RBX: ffffffff89b0fce6 RCX: ffff88813fef1dc0
[  701.742324][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  701.750377][    C1] RBP: 0000000000000000 R08: ffff88813fef1dc0 R09: 0000000000000003
[  701.758426][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888074512228
[  701.766482][    C1] R13: dffffc0000000000 R14: ffff888074512760 R15: ffff888058755c24
[  701.774530][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  701.783599][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  701.790350][    C1] CR2: 0000001b2f424220 CR3: 000000007ca60000 CR4: 00000000003506e0
[  701.798407][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  701.806467][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  701.814519][    C1] Call Trace:
[  701.817863][    C1]  <IRQ>
[  701.820762][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  701.826415][    C1]  ieee80211_beacon_get_tim+0x63/0x4e0
[  701.831956][    C1]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  701.837620][    C1]  ? read_lock_is_recursive+0x10/0x10
[  701.843111][    C1]  __iterate_interfaces+0x243/0x500
[  701.848421][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  701.854803][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  701.862075][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  701.868420][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  701.875563][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  701.880834][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  701.886129][    C1]  ? hw_scan_work+0xf50/0xf50
[  701.890883][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  701.896079][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  701.902243][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  701.907465][    C1]  handle_softirqs+0x2a1/0x930
[  701.912292][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  701.917230][    C1]  ? do_softirq+0x210/0x210
[  701.922235][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  701.927565][    C1]  __irq_exit_rcu+0x13b/0x230
[  701.932313][    C1]  ? irq_exit_rcu+0x20/0x20
[  701.936917][    C1]  irq_exit_rcu+0x5/0x20
[  701.941218][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  701.946950][    C1]  </IRQ>
[  701.949921][    C1]  <TASK>
[  701.952890][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  701.958957][    C1] RIP: 0010:finish_task_switch+0x26a/0x8f0
[  701.964862][    C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 5c de 08 e8 4b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  701.984558][    C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286
[  701.990687][    C1] RAX: 206840baebf2de00 RBX: 0000000000000000 RCX: 206840baebf2de00
[  701.998742][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0
[  702.006798][    C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560
[  702.014859][    C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff88813fef1dc0
[  702.022890][    C1] R13: dffffc0000000000 R14: ffff88802ae7d940 R15: ffff8880b8f3b5d0
[  702.030966][    C1]  ? finish_task_switch+0x265/0x8f0
[  702.036294][    C1]  __schedule+0x11d9/0x40e0
[  702.040888][    C1]  ? __sched_text_start+0x8/0x8
[  702.045830][    C1]  ? flush_smp_call_function_queue+0x127/0x350
[  702.052046][    C1]  ? generic_smp_call_function_single_interrupt+0x120/0x120
[  702.059422][    C1]  ? tick_nohz_restart_sched_tick+0x1f0/0x1f0
[  702.065588][    C1]  schedule_idle+0x4a/0x90
[  702.070064][    C1]  do_idle+0x635/0x680
[  702.074224][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  702.079478][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  702.084757][    C1]  ? asm_sysvec_error_interrupt+0x10/0x20
[  702.090539][    C1]  ? schedule_idle+0x57/0x90
[  702.095248][    C1]  cpu_startup_entry+0x3f/0x60
[  702.100095][    C1]  start_secondary+0xe4/0xf0
[  702.104782][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  702.110760][    C1]  </TASK>
[  702.113893][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  702.121232][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  702.128311][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  702.138415][    C1] Call Trace:
[  702.141748][    C1]  <IRQ>
[  702.144631][    C1]  dump_stack_lvl+0x188/0x24e
[  702.149381][    C1]  ? memcpy+0x3c/0x60
[  702.153425][    C1]  ? show_regs_print_info+0x12/0x12
[  702.158694][    C1]  ? load_image+0x400/0x400
[  702.163263][    C1]  panic+0x2e5/0x730
[  702.167215][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  702.171791][    C1]  ? secondary_startup_64_no_verify+0xcf/0xdb
[  702.177923][    C1]  __warn+0x2f8/0x4f0
[  702.182012][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  702.187899][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  702.193684][    C1]  report_bug+0x2ba/0x4f0
[  702.198101][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  702.203935][    C1]  handle_bug+0x3a/0x70
[  702.208199][    C1]  exc_invalid_op+0x16/0x40
[  702.212767][    C1]  asm_exc_invalid_op+0x16/0x20
[  702.217674][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  702.224060][    C1] Code: 24 4c 89 e7 e8 7e 06 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 66 d1 f7 0f 0b e9 f6 f7 ff ff e8 6d 66 d1 f7 <0f> 0b e9 48 fb ff ff e8 61 66 d1 f7 48 c7 c7 50 f1 fa 8d 4c 89 e6
[  702.243720][    C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246
[  702.249837][    C1] RAX: ffffffff89b10ee3 RBX: ffffffff89b0fce6 RCX: ffff88813fef1dc0
[  702.257856][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  702.265871][    C1] RBP: 0000000000000000 R08: ffff88813fef1dc0 R09: 0000000000000003
[  702.273889][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888074512228
[  702.281905][    C1] R13: dffffc0000000000 R14: ffff888074512760 R15: ffff888058755c24
[  702.289939][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  702.295638][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  702.301421][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  702.307036][    C1]  ieee80211_beacon_get_tim+0x63/0x4e0
[  702.312571][    C1]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[  702.318179][    C1]  ? read_lock_is_recursive+0x10/0x10
[  702.323661][    C1]  __iterate_interfaces+0x243/0x500
[  702.328927][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  702.335230][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  702.342489][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  702.348780][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[  702.355870][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  702.361135][    C1]  __hrtimer_run_queues+0x54a/0xd50
[  702.366430][    C1]  ? hw_scan_work+0xf50/0xf50
[  702.371183][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  702.376441][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  702.382584][    C1]  hrtimer_run_softirq+0x183/0x2a0
[  702.387758][    C1]  handle_softirqs+0x2a1/0x930
[  702.392578][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  702.397483][    C1]  ? do_softirq+0x210/0x210
[  702.402036][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  702.407335][    C1]  __irq_exit_rcu+0x13b/0x230
[  702.412073][    C1]  ? irq_exit_rcu+0x20/0x20
[  702.416638][    C1]  irq_exit_rcu+0x5/0x20
[  702.420924][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  702.426609][    C1]  </IRQ>
[  702.429578][    C1]  <TASK>
[  702.432815][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  702.438842][    C1] RIP: 0010:finish_task_switch+0x26a/0x8f0
[  702.444700][    C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 5c de 08 e8 4b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  702.464357][    C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286
[  702.470485][    C1] RAX: 206840baebf2de00 RBX: 0000000000000000 RCX: 206840baebf2de00
[  702.478471][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0
[  702.486559][    C1] RBP: ffffc90000177c30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560
[  702.494594][    C1] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff88813fef1dc0
[  702.502578][    C1] R13: dffffc0000000000 R14: ffff88802ae7d940 R15: ffff8880b8f3b5d0
[  702.510588][    C1]  ? finish_task_switch+0x265/0x8f0
[  702.515826][    C1]  __schedule+0x11d9/0x40e0
[  702.520397][    C1]  ? __sched_text_start+0x8/0x8
[  702.525343][    C1]  ? flush_smp_call_function_queue+0x127/0x350
[  702.531589][    C1]  ? generic_smp_call_function_single_interrupt+0x120/0x120
[  702.539067][    C1]  ? tick_nohz_restart_sched_tick+0x1f0/0x1f0
[  702.545217][    C1]  schedule_idle+0x4a/0x90
[  702.549658][    C1]  do_idle+0x635/0x680
[  702.553775][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  702.559032][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  702.564288][    C1]  ? asm_sysvec_error_interrupt+0x10/0x20
[  702.570176][    C1]  ? schedule_idle+0x57/0x90
[  702.574811][    C1]  cpu_startup_entry+0x3f/0x60
[  702.579612][    C1]  start_secondary+0xe4/0xf0
[  702.584363][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  702.590345][    C1]  </TASK>
[  702.594121][    C1] Kernel Offset: disabled
[  702.598551][    C1] Rebooting in 86400 seconds..