last executing test programs:

23m3.169456742s ago: executing program 32 (id=33):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x13, "4feda26323b172e0"})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x494802, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x1d0, 0x1, 0x6, 0x5, 0x70bd2a, 0x25dfdbff, {0x3, 0x0, 0xa}, [@typed={0x8, 0x88, 0x0, 0x0, @u32=0xf298}, @nested={0x1b1, 0x134, 0x0, 0x1, [@typed={0xc, 0x96, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x12c}, @generic="9c602b77497009abb2eaa31a6e39f8d7df3fee5391eaa53d0bde2255c5c6dbf8b9c8de0e239fa870137066145c8e94174b27d35118f01a0d348e25c6ef0a22a212d843aebb8afd4b73a38f3960014a8a32d4d0823a5847d21f7d53808ea8bcc3fa935079b01099c6fc538334824795fea2087039f294e595d05ac6afb29b2ebe32d8589a", @generic="1af6f19592558e94b5ad9ecf2d950de63c82cdeb0a474607a0583c5deada0f875532a99ea7c0f2e5790a02b5bb911e369e1f154c70255536ccbe6933f58af6a8b1e885bd12ddc7bef17b66e6c82ab4e3af44333238832dd7aca30525b4ae2709add325a117d33648b1e6d8e38c38db0ce67dd2d87cdc45b389a082d3b9a0a6fadf34b050194861571b5926717a574710cc047b60992972d385791c2fa0a3f5c36bd429531844a3c0d8a9d8a0b173518f0680c07dde", @typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @generic="6dd0e962ec02b0db7fed35631918b6b7436cc4692ff2e5576bfbaf7f194b88a317f7d328899af240ca452177bcc9548cd9c371e291fa829f3ef54a4615bd1ac5206f745099a74ec4c78f1f2bb0263bdbf007587523b922f2e81f5760"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8001}, 0x4801)
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x2000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
socket$inet6_sctp(0xa, 0x1, 0x84)

22m54.985206593s ago: executing program 33 (id=56):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000440)={0x4b, {{0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x14}, 0x800000}}, {{0xa, 0x4e22, 0x7fff, @private2, 0x100}}}, 0x108)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d16cef7c34648024212402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f473cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5015037cf1236a6167a302d5d082a447099b4ee2bc4"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x8442, 0x5c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000f7ffffffff350a00000000000018010000202078250000000000202020791af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0x20}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x4000890)
r5 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvfrom$unix(r5, 0x0, 0x0, 0x40000022, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfff})

21m10.233902738s ago: executing program 34 (id=353):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000002b40)=""/25, 0x19}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000180)=""/130, 0x82}], 0x5)

20m39.206767797s ago: executing program 35 (id=448):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14}, 0x0)
syslog(0x9, 0x0, 0x0)

16m6.599255813s ago: executing program 8 (id=1110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3, {[@exp_fastopen={0xfe, 0x1b}, @md5sig={0x13, 0x12, "0cd80e00"}]}}}}}}}, 0x0)

16m5.314865858s ago: executing program 8 (id=1113):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

16m2.56234688s ago: executing program 8 (id=1116):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="79fb38764f2c00"])
read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0x9362, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x8)

16m1.149936259s ago: executing program 36 (id=1095):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffff0bc, 0x301480)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/60)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

16m1.032043811s ago: executing program 8 (id=1121):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="79fb38764f2c00"])
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0x9362, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x8)

15m55.246921746s ago: executing program 8 (id=1125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230003a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)

15m50.971477165s ago: executing program 7 (id=1128):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x0, 0x0})

15m50.44150147s ago: executing program 8 (id=1129):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$sock(r0, 0x0, 0xc010)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, 0x0, 0x41)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)

15m45.004676098s ago: executing program 7 (id=1133):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r3, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}}, 0x0)

15m42.830662802s ago: executing program 7 (id=1135):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
getpid()
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000b5000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='svcrdma_rq_post_err\x00', r5, 0x0, 0x80000000d}, 0x18)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r7, 0x107, 0x15, 0x0, &(0x7f0000000080))
close(r6)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r9, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000240), &(0x7f0000000080)=r1}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

15m42.163132311s ago: executing program 5 (id=1137):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c"], 0x50)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="b28231adddba8ed6", 0x8}], 0x2, 0x0)
recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15m39.064428594s ago: executing program 7 (id=1138):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, 0x0, 0x14000012)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=@deltfilter={0x34, 0x2d, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0x1d9ba4b37f621188, 0xfff3}, {0x1, 0xa}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80)
recvmmsg$unix(r4, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = syz_open_dev$MSR(0x0, 0x547, 0x0)
read$msr(r6, &(0x7f0000000500)=""/119, 0x77)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}})
io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0)

15m38.415062361s ago: executing program 5 (id=1139):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

15m34.943681407s ago: executing program 37 (id=1129):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x20200, 0x81)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$sock(r0, 0x0, 0xc010)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, 0x0, 0x41)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)

15m34.850850561s ago: executing program 7 (id=1142):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x0, 0x0})

15m33.400310621s ago: executing program 5 (id=1143):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0)

15m33.08467217s ago: executing program 7 (id=1144):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8c0802, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
userfaultfd(0x181c00)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x804)
r3 = socket$inet6(0xa, 0x3, 0x88)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10)
syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffd, 0x103}, &(0x7f00000004c0)=<r11=>0x0, &(0x7f0000000600)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})

15m32.741860497s ago: executing program 5 (id=1146):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

15m27.712091412s ago: executing program 5 (id=1147):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x2e0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0x0, 0xff000000, 0x4, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

15m15.537726251s ago: executing program 38 (id=1144):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x8c0802, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
userfaultfd(0x181c00)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x804)
r3 = socket$inet6(0xa, 0x3, 0x88)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [<r8=>0x0, 0x0, 0x0, <r9=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10)
syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffd, 0x103}, &(0x7f00000004c0)=<r11=>0x0, &(0x7f0000000600)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})

15m15.381200563s ago: executing program 5 (id=1151):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
fcntl$notify(r0, 0x402, 0x8000003d)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e24, 0xf6, @local, 0x70233053}}}, 0x90)
fcntl$setsig(r0, 0xa, 0x21)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448cb, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f00000002c0)={0x0, 0xfffffffeffc})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x300}, 0x14}}, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10)
syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7)

14m59.845068696s ago: executing program 39 (id=1151):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
fcntl$notify(r0, 0x402, 0x8000003d)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e24, 0xf6, @local, 0x70233053}}}, 0x90)
fcntl$setsig(r0, 0xa, 0x21)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448cb, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r8 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f00000002c0)={0x0, 0xfffffffeffc})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x300}, 0x14}}, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10)
syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7)

5m55.581804471s ago: executing program 0 (id=2609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffff630, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/136, 0x88)
ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)

5m54.463128522s ago: executing program 0 (id=2613):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = userfaultfd(0x80801)
r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x5})

5m54.305298524s ago: executing program 0 (id=2614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20b01)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x21, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5})

5m52.499183183s ago: executing program 0 (id=2617):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84, 0x0, 0x20}}, 0x0}, 0x94)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

5m49.433117736s ago: executing program 0 (id=2628):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000740)='./file0\x00', 0x0, 0x2)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
open(0x0, 0x14927e, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x5032, &(0x7f0000000440)={0x0, 0x607b, 0x8, 0x0, 0x275}, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000700))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendto$inet6(r5, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r5, &(0x7f0000007900), 0x847, 0x10162, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x2, 0x0, 0x20})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x200000ffe000)

5m48.380516338s ago: executing program 0 (id=2631):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000001020101000000000000000001000007040003"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)

5m32.883111125s ago: executing program 40 (id=2631):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000001020101000000000000000001000007040003"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)

5m13.676618225s ago: executing program 9 (id=2684):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000900)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r5=>0x0})
sendmsg$inet(r2, &(0x7f0000000980)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000840)=[{0x0}, {&(0x7f00000003c0)="216869953691c8e80523aa8cdffb4d8a99e414838ed5cc1e0b47bbd5d74d4c940d5d2ab8b57515f57503417cb3776a7c63d79ddabf94d6e3c2593e144b4a1dab2da4a2eb01ecb6166749e2acfc2df2d056c400959642c3f7ea270f0d9f07ca70329e608d1f67e944faf94a48960f6b4d2df516e4d9eb41e3c9723a68e3be488e36b79d3a32691241363ccb71785e124c22b0487a84a729c693b14304eec65e797c43c3aa7029d6c12a9f3f1790ff", 0xae}, {&(0x7f0000000e80)="d8beae076f32c7f7aa389c27057ee9b273786e677446c5fc6e70292e01f45856b95a8ae037aae0f72e3b43427c93f6b4065d5b6abaf3bf3a0a147d831380d66d0e26979ac0c0d12260ea5d482741ee1b63018e192ce27fe40383837c812f87f32ae65ef7549835f3a5563a80209cc989da6953e814368a936cbf15391d856b7c526c821fd22f3b55638e8797f2d74e9854d869971e9c7d18ba5b28c575fc4c5a913bc1577f6c3dd99d7f96d639a20f89de8494ee77cf0bb1e6374bd975324b62d2f84b52cce448c6d0ba28a8b45e5e1478db63d45df9e2cb9fe6a8001831b6c8ad6c4fd02a3f31bdfc8e6686b4bd5bbdd8dd26d7e9306d726ffb8ddbe17a3eb822735eaa596bbc88ee3ff8867c09c314582f58ba98d9faa3d443f165674122f30b33a54d7f8dcdb7ae10c58d0d0c971844076703f824f5ee707839c1cb1c8de8b5552e907f92c8bda77c14da0e6fca3ed5fdbebfb98662c043f1f0e51693319e94f1991bec918a07c04974e01763f085872a9bd0536175077670b54245d2e3459f3f6db4c68a2c29cfbc8fffc3432b780b63ef003e7b5520d318d09b2ae9009c4334cde914a26335cbdcc4915aac8d1442975e6ce45f678a633764aa59c777dba7eacc50c44e1c5746f49476922ba7605847fc8dcf7f5bb2433391c68374f234f73a35a1e8a843ff77cd8a4aeb1a1e6cdf14b6327c266d238d5252661c4bff1fb5c30435e5883738e2a199ee6801e227fc1d6ca8f3ef7b28d51b350f6a55f405f721a292237c9743320bfa8ea099ab3535427070bff7ebdf04d0c00d0892b3c0dfd7b9ab07e7eb5467ecbcfc6b3c4664a9dff46da70f92542b678a3dbfc99ba2fc83052df2817e0df9df18f563ff46a41702580d62b18ef978e97875d470b9a9e0120bd27b3359a443b9b232d53b87e9a3faa927a886c5363e4c3fa27f99b0399fa3fdafc00f9eb60a3160f8dc1805639dd24df9cb938667b94f5845c1e29fb8faa18eb30519530de09db7844623515245fbd2e0864fe289175b2db2fbfda7facdda67cebc0ad5bf40cbca849dd20c470c61d2543e65c1fe5b9f9200463874afa8a16c369fba000aa224298c092cd4dea449b17c05f03a1e6f2e7b0f21b364b420486f388d3bb64be2fdc4e96dc86a6de15af5ff8c0647372adb0b13bf566258a285129ab0f0b4e76d6a5775cb63508b9e05afa2db75595a4ff5c89e77a9f568d7088a4ed96498809323ee064683ddf4d2553e9e06ed255250ea45803785f352d8bc50d89b2f693c093d7785816c89feb1471604f77021ca1c7d7a7e4e63243c3fd18b29ba71436cb352274d124ad886375d63b73622d0e1a7fa16778b0db7995537ed398b569a47b02d2f70a8b16827e39672e1157a21c97d96dffc562a69f092b3b0996bb279b245a65bf1f52676b25dbcdba64a112aa9d81166f56d9e6e507bd94ae6f6a19b8cda1f31edacd44db746070d50960744634206ce825380087cc8709976cb2248801204a40d3ac914bcfc1cd53eb8e8eefa7f74c4475d60fc61a716fcdea8d006be04b425f72dddc3416d58b88fc11e13423abfd174c0ca82054ea33b942b13ae3cfce9e3309f5ad1f28643b17d3d558d6d9bc833585c3b88d41574e8621a9e30585d4b79e51ae3ba2894482d10cf870e6d0dca4b7f17342d69d66af21eebe3c488b7d879e5bb94c7cd1c343f33384dc56ed33e90e616adedd4093c8b5538b42fc9c1c0f07977d2b2ce9cae444feb194f133028a204e1615b4839ee68ed146e1f64822fc8b538de140ceb3bdb581f30e9b7ff8548db8ba66015565b6c9bb5e8c735da3809430d72020b22c9d316797d0855db3264f2d04c8c4759d5bb126ae9142401f98b15a6a5d34d779b511fc5aeab5fdc40b69f0be1c3e29764eb91498da82fc54af861196aa709c27a6b3a4369ce615e97b46c2fa28d6be2d98f5849c129b666634bdaa095a8264e001f408466311e6b77f804e4030ff13af57b3eb9f4a06f6b5fb2a021c6a86a2f0b74746862d65a34695e383b7c3b5caea7e2de00846f7cd8653f16e367bfcb6e850dce93453d147d7f76f18fb0fd9ed6a6821997d1cd5892c144d769f4a2c02948da92425e0780b4064028fe6a248a8aed86e07e54565851a8ae24706a5f0c9050f2605d36383be1fdae17195c1a53dd766495c9639d9c0a26d35a26632c9772b912a3be86ca6f30f0b09551c40c57420f025e6c14c4b9820ba20ca438746fddcbb7d08d8bb392bbe1f5e13f0f9565002735bcd23f60f0053731abc68194219f720a36a3733680402c3f650087ba23e30d6061dbdff5a8808f8561417c5ad473f029265f8d256bbc35e69f5ba8117196e877ea63cde744220f8433cdf9c00b0d10333327a7ee20e32fa710011d2850802be91c456f21db0f5a608c16febea8b56637a4fc14c7a93ba9d900e1656d0e6eaa1939e1428239fd61af164c60a383e28724c06e243e6920c51aa013f1c8b73512abf53073b764cb2deb5b0bb993b9d2b8fd56678dc264239c27c6589dd33576836ede4322beef145be36aace12a37881daa9de38ed270da9b0cea08133836d3fe0f4b57ee508b2f206927670392a906875fee78bc27f5e2250f836eff80ae5e46b8cc3fadef36c183972ec0531b81a1db8054edbcf65f764e13bd522696ea7c0b0ec01e6ba910b94a6f4cd80293ddecb724dadfe434d1dbe48255adcec4b3a92e03931074b22664474b8c442ef5890ce7083d990e2cc484d8af901491db5770f8a27cc1d0d7b36adc91c07aa927ebcbeb652c8513d07f72c4c78f2ea36aa18145be806525ca2e0d87837995898cbc0f8eeb9e9f1360edb1f666941a5b51de795dc5ddb40f94aac9d2663b67bc5cf8c2a986145707ceebce2a6626d746164160b596fddad6099ac963b30a2e186942bb8451012380363c6e8b4d721aaa8000dd0b36416eb1e664321f7276deaad4627fae9052a95e6e0492704968928c8d1d978c68de42ce15789d90497feece0b10fe50a6160277e9d133709bb08adaa7f9f8067149b88a58018649a939207ebd09a48eafcc46e9dad9016adfc111e55ad6ecef1591efa39eb7dc7df1268d213da27e60fe911fc3066d085a298b9bda93f6b141a4db7cf9ff32fcb6847511a8b37bca7a2e45f0f85018dfa942914835cc0af82b4d410c7bbc500ff725080b8878dd91ab6b1e0e8a918763f427de21a7fa22a486794e6b875782fd3629348eda675eeead91ed85a32f78da70e267598f0cdc23acc5cc8378e2dd452eb67c2596efcca798599311a1804543a36395709b27d8ecd4be3344a6ba349e1ea299d3be2e628801cca466ad1a072a4dc08568a76209742aa3c0c561c33a317dcb5422254560d594e2cf6c05333815c557a21dc20382946c2eea38c167fd2c17da4792b5112f17a2a354d88afb339c9333b24d59b59007b3da06bb97750afa6a9147c4a38f605d4cde8e4d179980dcec015f250ecf9be8372c3d3e0ff9c8f19f88e9deb75b35d231969297735975810f73d69ca8932f86d83b4db199080a624ff51a94db12b9c11c062c26404d9735914cd3d6d03c210c943f7c92c1b1f5ceaf816c0d1731070aacc3125c984bdc5bacc63ec56932d757902a53bd5c5699546c315d11807ad7c889d94be053f854a20cbee520903771116518beb8dcd08ecdc71cf91ffc573666d8735e46a4946c2b04b3bcf4249ca7c04edf81b3fb58e4da90882741c49f25b3fb3efbc7934c916497a4a39b3866a6156b92bda6759ffc9cc9cf85ba8704bf07e56e526b6ffed6897989f5f212b6ef3b4de41205bfef2e520f09125d21bb343f970584652a9b077a43d323d352c026ecc52a215d62903711266cef2d311fceec8f4d2fb527e02c398d5013c486b1543b437b4e1cf074e0bf2a48945559b237be35a582378b73097442100600eeb1ffa9d7adf6d0c4f7291526b7daf51472bb820a255e3f992fb950f83a1d47a00de248af88400b5ccb4793df22d7e778e4fd5185d61b4b0e74364296fd7992dd8b720316cae5c79ca4074cc815ca6d986ec81d7d8427494a633382f5a53ea1191ffcbddf26dfe59e2791a2553841975b838a54523b6424e2743254bdf8e2b74ea0c2d179c7c274aa7192c01b14ca398a040e3e6effa45f26bbe29fff5f3f20e15ff194c518b2f926a49cf52c135db320753ef107f14ac020c6197b139571b9bf2b2f5ee258cbe52964cc854597f54918b296bacf959626909ba6fc68c889b231b3b33a1a7a86f11c250d4413d5e2c9d6b6c8f6df9854d918231173f2dc95ed0aeabaeb983c6119ac956d74068ad5aa8f4e0f4b8766fb0d6a45d4151685dde9c5af5af2af48636d38622159d9e219d4a2d6df14df411fb365d14c5606b6be807ba86bd58dd387b45418d78538b19255a4974d8f0a43f1251434d999999beb9aaaba7a5d5cfa16e9fa3f32e30361b356d2212aa881f18378317b823e6893feabc932da1b7fa5f8c17b7bc89e861a09633126694caac4a7156cff139f7e00355b71fc1674562cb8802fb589aabcf97e3c7818c5c907235f578d92cfa0a8e807814fc7358cd088a5461804a1aa043bd73558e5de2b9dde205f32bac96429e9332dafbec7024d8d3b0cc58d376fcbed8310b6f0ba99a86de5f6eff3ae87ce09c7f57fc6f115daf29e13c84776207d043ab7a83e2951f11ca28bb4b410b047295d276bb53bd576a8c35e9da157fa8206b20e08939cea40dffd8a4e659baea9eda79f86f71123902e5e0f284590779f9a0b1832b267a17b0f0a13275d8d19963fb28007a441253d0014b61c3e49ff507391ff0c653d8582ba39b018b4902a1d21a85363b46ad931c1fddf44780e6160407b7790c68460f29af10635b1be5f9c00ade7efa42a7f17908b44ba744bdcb4486ecec9391994f87e7602e363377e50fb9a975b74d5a5efe708fd7e1e3425d9e97f6304da1c88c835ac88ba4b595ea3e7f225d61bb757f25f52cbd0c47be479f423bd32befd3601f1ec62c8a82d37ce0b0e6570a8847fb15a660b9a8be8db9a2bbde76abeb7f90725b2bedae2c38ab5eebef9e2d89d0caabc02cbf0813956483d7276da01700b6a0dce54f9439dc0c30bb8e3c1bcceb764c7d01aaf5ba9af838cb67e564eeef0bce407773339b9835434881502ec9effdedc28b6a995d293a36be941ce16efc98c380e7efcf15460852e5d57af6757eccde6287212390d690d36f54b2943c9491b507563b190cf14171fc0f620fc9c12347a4f451f0c37f6112e55527f3d3435c208b5a078930de5789fe318894496758e0f67704216463be003516cb9851d5797725f3978005d9db9d8954996dff59b2ec1f6270383e9df79ad4a234c4067621c9a75bfcae463fae5ae4f94ba49335362b9721c175152ea304d48877d35718ca210b2f49d6a2c90c3a2ac0caf9f4b8781ac6ccbc37b8cc7c58c2416dfc0043aeacb1c3486b9e5633f7b6a2235a203bd98a51a94e131b369ae461c6fd47c5576244abdbf0d5ee377b94a8136444864c9e35af7cfbea95936888eeb31542c3e8f1c8068dd6bba451abd019355f70aeb66724f96ab1f53ebd667373d65eb4b5198cbcb7177d7ade8b756b5d67c423b6759777a5f9da842086eaf2337f3a9879e18213e8d76a3ad26cd36c3af5cf6c0627136d6bfd2dec1935e59099fef7dc6c91930c8bf8025d240635c8857b521235f4e189452a4b28762bdde344f250f1b40e8361fc82cd9c2e286df269539c777c07ef2a7df2f3316c01843537d18cdd3dd2cd2d8bb56804fd0a2e5cb", 0xffb}, {&(0x7f0000000480)}, {&(0x7f0000000540)="aa4455bbc33222188cb6614e56d5b296ff593ad2b9333c4e9a52d481f9ea6c7b9e8ef80334829c7adc9f2a7021ac2d74628564e73811b8f4b535781476fbad8387a84857c240fb38b7266c065c64496c3b3a49fd6cc68bb0a536379e2918ab71d4d4e58730707048de0f8c9c91dc6756d5b35638a900fc54ddf9daff3c99f933910ffb60d15dfb840da6f7f3e614863bbe21a21f348ef999cfbd432ac289e59e17837ff2c17786fd204f83e18b3f82c3195a60dc4e3e49f99c4a5d688e0e2c23b46854d11244075009c252ad105a25aefb8ed586c2a227c2f6fe8fef7b773027001c5bf37fb6f816b6c44377", 0xec}, {0x0}, {0x0}], 0x7, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x88}, 0x20000080)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x6e23, 0x20006, @empty, 0x6}}, 0x4, 0x2, 0x0, 0x5, 0x392, 0x97}, 0x9c)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000704"], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)

5m9.646241214s ago: executing program 9 (id=2692):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x78, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0x6, 0xb6, 0xff}}, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

5m8.429347237s ago: executing program 9 (id=2694):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e9e71fa51bde29f19b06fb9b3ba96da0e93d5a402dc7fe462a6cc4718c94c1747fff68092705b44bb48dd2db4f3127aab13b4af05549571a6c0e03db227b65d459fa5c1232d7b62f12b65354b7e70d32998da02ae0dc28942f682d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85c6711cd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee0493ffe3b72b508c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b9b0bba0ba2deac12f0257c64ceca8a0a62db179c7d9df7749da38624aab1865024e56a1b2a41e1c7e3a29c01adb31f1865bf6f44aa1e0fd6d827fbae1d57b5ff0026b580c890df83592aceb316fcd6ca200d007b786f9ae", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)

5m6.079817359s ago: executing program 9 (id=2700):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160)

5m5.890601015s ago: executing program 9 (id=2702):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})

5m5.532708062s ago: executing program 9 (id=2703):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0xa7)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x180)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r3, 0x400454ce, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

5m4.994371258s ago: executing program 41 (id=2703):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000554e0000830000000602444ea13c20961dd45dc6c2db938ff58a52f4366b810bb96e413cd97f052188c7ba4b0237c346c641453b0b68cb49f5348f99fa0a2d04840428c2adb2dec13d917400b3acc2964b1e549b06ee7ad73a186043882f5e6ca4beefd83d7abaa684f33669c51484e9a3597036eca93a2cef7f81ea4a35f5bc08779d97c568dc351865d7156cc51da70bddb7743fab12a9a6fbef06a8d9908dbe492fd8ddd13f840c22b8e42a7640951b1a6cd32a2797b8b066e6f05173c03eb0d3250d534043556611c1d1a24956f60493215fd91835f6b57745d8a2e1b3ed60f52bab419e7cfd40e943c298868762f2767499739b7f5f1dd270c5efb8c4c734facfa15aeaa57253"], &(0x7f00000000c0)=0xa7)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x180)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r3, 0x400454ce, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

14.839889938s ago: executing program 4 (id=3615):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xfff3, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x44, 0x1, {0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008894}, 0x200400d4)

14.510171884s ago: executing program 4 (id=3617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002700)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44098)

12.551103117s ago: executing program 4 (id=3623):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

11.233179799s ago: executing program 4 (id=3629):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, &(0x7f00000001c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

8.368844098s ago: executing program 1 (id=3639):
r0 = epoll_create1(0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.609294856s ago: executing program 2 (id=3641):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

7.454563719s ago: executing program 1 (id=3642):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7010fcdbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="200030801c00018008000400050000000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000)

6.56126873s ago: executing program 1 (id=3645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rtc_irq_set_state\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

6.483994084s ago: executing program 1 (id=3646):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3, 0x4000000)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xa, 0x16, 0xb3, 0x7f, 0x20080, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
read$FUSE(r7, &(0x7f0000008fc0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x182, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x9)
r9 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r9, 0x0, 0x0)

6.201108865s ago: executing program 2 (id=3647):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000240)=@udp6, 0x1}, 0x20)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCSSOFTCAR(r3, 0x5432, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x2, 0x4})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0)

5.495139567s ago: executing program 6 (id=3649):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r4, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0xfffffffffffffffe, 0x16, {{0x1, 0x0, 0x4, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x2, 0x8000, 0x0, r4, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x3e, 0x7, 0x20000000b})
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x1000, 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r6, 0x5)
unshare(0x28040680)
r7 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
unshare(0x2a020480)
fchdir(r7)
unshare(0x22020400)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

5.120243606s ago: executing program 3 (id=3650):
fanotify_init(0x200, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$inet6(r1, &(0x7f0000002fc0), 0x0, 0x4044)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})

5.065019151s ago: executing program 6 (id=3651):
socket(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
fcntl$setpipe(r2, 0x407, 0x2000000)
prctl$PR_CAPBSET_DROP(0x18, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

4.071797397s ago: executing program 3 (id=3652):
r0 = socket(0x11, 0x80a, 0x0)
bind$rxrpc(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
io_setup(0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.936436737s ago: executing program 6 (id=3653):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
accept4(r1, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r7, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880)

2.993086071s ago: executing program 2 (id=3654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

2.929285074s ago: executing program 3 (id=3655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.912487917s ago: executing program 6 (id=3656):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rtc_irq_set_state\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.856584855s ago: executing program 2 (id=3657):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a020000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

1.808537963s ago: executing program 3 (id=3658):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98549c4e16001d8cb60000000000000000000000120003006269746d61703a69702c6d61630000004c00078008000a400000002008001740000000000800124000000401080013400000000e080013400000010108001340000000071800018014000240fc0100000000000000000000000000011400078005001500fe000000080011400000009c050005000a00000005000100060000008fcc010f7b0e9d8bf1cc340ee6776f57e4e62aa8a665526de4b92e0c02a6b50b5b18ce65bad98be37dc7d9bff69fab7ce85ebb8c5b276fefac6769d15b"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4004804)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x2c4, 0x24, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x6, 0x4}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @TCA_RATE={0x6, 0x5, {0x80, 0xc}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0xdf, 0x19767fdc, 0x1, 0x8, 0xe79, 0x6}}, {0x10, 0x2, [0x0, 0x8001, 0x10, 0x0, 0x4, 0x81]}}, {{0x1c, 0x1, {0xc3, 0x7f, 0x1, 0x2, 0x0, 0x3, 0x7ff, 0x4}}, {0xc, 0x2, [0x100, 0x5, 0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0x6, 0x7ff, 0xfffffffb, 0x3, 0x8, 0x2, 0x4}}, {0xc, 0x2, [0x1, 0x8, 0xa9b8, 0xfff8]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xea5, 0xee99, 0xfff}}}}, @TCA_STAB={0x1a8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd8, 0x1a, 0x55d6, 0x819d, 0x1, 0x2, 0x2, 0x5}}, {0xe, 0x2, [0xfff, 0x10, 0x100, 0xfc00, 0xfca]}}, {{0x1c, 0x1, {0x2, 0x8, 0x6, 0x1, 0x5, 0x3, 0x4, 0x4}}, {0xc, 0x2, [0x3, 0x8c, 0x4, 0x9]}}, {{0x1c, 0x1, {0x9, 0x80, 0x11e, 0x6, 0x1, 0x4, 0x6, 0x2}}, {0x8, 0x2, [0x2, 0xf]}}, {{0x1c, 0x1, {0x8, 0x4, 0xd87, 0x2, 0x2, 0x401, 0x6, 0x1}}, {0x6, 0x2, [0x101]}}, {{0x1c, 0x1, {0xe8, 0x6, 0x8bbf, 0x5, 0x2, 0x7fff, 0x8001, 0x8}}, {0x14, 0x2, [0x2, 0xc, 0xe618, 0xb, 0x3, 0x6, 0x2, 0x1]}}, {{0x1c, 0x1, {0xfb, 0xf4, 0x4, 0x224, 0x2, 0x3, 0x1fde62ee, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x4]}}, {{0x1c, 0x1, {0xb, 0x3f, 0xfff7, 0x7, 0x0, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x7, 0x8, 0x9, 0x40, 0x9]}}, {{0x1c, 0x1, {0xf, 0x93, 0xc, 0x6, 0x4c27345c60f4ea1a, 0xd, 0x80000000, 0xa}}, {0x18, 0x2, [0x4, 0x1, 0x400, 0x401, 0x0, 0x6, 0x5, 0xf351, 0x1f, 0xcebf]}}, {{0x1c, 0x1, {0x0, 0x9, 0x200, 0x1, 0x2, 0x80000001, 0x75, 0x3}}, {0xa, 0x2, [0x3, 0x3, 0x8]}}, {{0x1c, 0x1, {0xe, 0xa, 0x8000, 0x4, 0x0, 0x808, 0x1, 0x3}}, {0xa, 0x2, [0xfd, 0x5, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc94d}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf028}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x15}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4000}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0xc8a5}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f00000001c0)=""/42, &(0x7f0000000280)=0x2a)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00'}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"})
ioctl$COMEDI_SETRSUBD(r0, 0x6410)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x7c, &(0x7f00000002c0)="010000000980ffff", 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.763487732s ago: executing program 4 (id=3659):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x4240a2ca)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x2c020400)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0)
msgget$private(0x0, 0x722)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00')
read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020)

1.687891685s ago: executing program 6 (id=3660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2e, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

745.572767ms ago: executing program 4 (id=3661):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000900)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r5=>0x0})
sendmsg$inet(r2, &(0x7f0000000980)={&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000840)=[{0x0}, {&(0x7f00000003c0)="216869953691c8e80523aa8cdffb4d8a99e414838ed5cc1e0b47bbd5d74d4c940d5d2ab8b57515f57503417cb3776a7c63d79ddabf94d6e3c2593e144b4a1dab2da4a2eb01ecb6166749e2acfc2df2d056c400959642c3f7ea270f0d9f07ca70329e608d1f67e944faf94a48960f6b4d2df516e4d9eb41e3c9723a68e3be488e36b79d3a32691241363ccb71785e124c22b0487a84a729c693b14304eec65e797c43c3aa7029d6c12a9f3f1790ff", 0xae}, {&(0x7f0000000e80)="d8beae076f32c7f7aa389c27057ee9b273786e677446c5fc6e70292e01f45856b95a8ae037aae0f72e3b43427c93f6b4065d5b6abaf3bf3a0a147d831380d66d0e26979ac0c0d12260ea5d482741ee1b63018e192ce27fe40383837c812f87f32ae65ef7549835f3a5563a80209cc989da6953e814368a936cbf15391d856b7c526c821fd22f3b55638e8797f2d74e9854d869971e9c7d18ba5b28c575fc4c5a913bc1577f6c3dd99d7f96d639a20f89de8494ee77cf0bb1e6374bd975324b62d2f84b52cce448c6d0ba28a8b45e5e1478db63d45df9e2cb9fe6a8001831b6c8ad6c4fd02a3f31bdfc8e6686b4bd5bbdd8dd26d7e9306d726ffb8ddbe17a3eb822735eaa596bbc88ee3ff8867c09c314582f58ba98d9faa3d443f165674122f30b33a54d7f8dcdb7ae10c58d0d0c971844076703f824f5ee707839c1cb1c8de8b5552e907f92c8bda77c14da0e6fca3ed5fdbebfb98662c043f1f0e51693319e94f1991bec918a07c04974e01763f085872a9bd0536175077670b54245d2e3459f3f6db4c68a2c29cfbc8fffc3432b780b63ef003e7b5520d318d09b2ae9009c4334cde914a26335cbdcc4915aac8d1442975e6ce45f678a633764aa59c777dba7eacc50c44e1c5746f49476922ba7605847fc8dcf7f5bb2433391c68374f234f73a35a1e8a843ff77cd8a4aeb1a1e6cdf14b6327c266d238d5252661c4bff1fb5c30435e5883738e2a199ee6801e227fc1d6ca8f3ef7b28d51b350f6a55f405f721a292237c9743320bfa8ea099ab3535427070bff7ebdf04d0c00d0892b3c0dfd7b9ab07e7eb5467ecbcfc6b3c4664a9dff46da70f92542b678a3dbfc99ba2fc83052df2817e0df9df18f563ff46a41702580d62b18ef978e97875d470b9a9e0120bd27b3359a443b9b232d53b87e9a3faa927a886c5363e4c3fa27f99b0399fa3fdafc00f9eb60a3160f8dc1805639dd24df9cb938667b94f5845c1e29fb8faa18eb30519530de09db7844623515245fbd2e0864fe289175b2db2fbfda7facdda67cebc0ad5bf40cbca849dd20c470c61d2543e65c1fe5b9f9200463874afa8a16c369fba000aa224298c092cd4dea449b17c05f03a1e6f2e7b0f21b364b420486f388d3bb64be2fdc4e96dc86a6de15af5ff8c0647372adb0b13bf566258a285129ab0f0b4e76d6a5775cb63508b9e05afa2db75595a4ff5c89e77a9f568d7088a4ed96498809323ee064683ddf4d2553e9e06ed255250ea45803785f352d8bc50d89b2f693c093d7785816c89feb1471604f77021ca1c7d7a7e4e63243c3fd18b29ba71436cb352274d124ad886375d63b73622d0e1a7fa16778b0db7995537ed398b569a47b02d2f70a8b16827e39672e1157a21c97d96dffc562a69f092b3b0996bb279b245a65bf1f52676b25dbcdba64a112aa9d81166f56d9e6e507bd94ae6f6a19b8cda1f31edacd44db746070d50960744634206ce825380087cc8709976cb2248801204a40d3ac914bcfc1cd53eb8e8eefa7f74c4475d60fc61a716fcdea8d006be04b425f72dddc3416d58b88fc11e13423abfd174c0ca82054ea33b942b13ae3cfce9e3309f5ad1f28643b17d3d558d6d9bc833585c3b88d41574e8621a9e30585d4b79e51ae3ba2894482d10cf870e6d0dca4b7f17342d69d66af21eebe3c488b7d879e5bb94c7cd1c343f33384dc56ed33e90e616adedd4093c8b5538b42fc9c1c0f07977d2b2ce9cae444feb194f133028a204e1615b4839ee68ed146e1f64822fc8b538de140ceb3bdb581f30e9b7ff8548db8ba66015565b6c9bb5e8c735da3809430d72020b22c9d316797d0855db3264f2d04c8c4759d5bb126ae9142401f98b15a6a5d34d779b511fc5aeab5fdc40b69f0be1c3e29764eb91498da82fc54af861196aa709c27a6b3a4369ce615e97b46c2fa28d6be2d98f5849c129b666634bdaa095a8264e001f408466311e6b77f804e4030ff13af57b3eb9f4a06f6b5fb2a021c6a86a2f0b74746862d65a34695e383b7c3b5caea7e2de00846f7cd8653f16e367bfcb6e850dce93453d147d7f76f18fb0fd9ed6a6821997d1cd5892c144d769f4a2c02948da92425e0780b4064028fe6a248a8aed86e07e54565851a8ae24706a5f0c9050f2605d36383be1fdae17195c1a53dd766495c9639d9c0a26d35a26632c9772b912a3be86ca6f30f0b09551c40c57420f025e6c14c4b9820ba20ca438746fddcbb7d08d8bb392bbe1f5e13f0f9565002735bcd23f60f0053731abc68194219f720a36a3733680402c3f650087ba23e30d6061dbdff5a8808f8561417c5ad473f029265f8d256bbc35e69f5ba8117196e877ea63cde744220f8433cdf9c00b0d10333327a7ee20e32fa710011d2850802be91c456f21db0f5a608c16febea8b56637a4fc14c7a93ba9d900e1656d0e6eaa1939e1428239fd61af164c60a383e28724c06e243e6920c51aa013f1c8b73512abf53073b764cb2deb5b0bb993b9d2b8fd56678dc264239c27c6589dd33576836ede4322beef145be36aace12a37881daa9de38ed270da9b0cea08133836d3fe0f4b57ee508b2f206927670392a906875fee78bc27f5e2250f836eff80ae5e46b8cc3fadef36c183972ec0531b81a1db8054edbcf65f764e13bd522696ea7c0b0ec01e6ba910b94a6f4cd80293ddecb724dadfe434d1dbe48255adcec4b3a92e03931074b22664474b8c442ef5890ce7083d990e2cc484d8af901491db5770f8a27cc1d0d7b36adc91c07aa927ebcbeb652c8513d07f72c4c78f2ea36aa18145be806525ca2e0d87837995898cbc0f8eeb9e9f1360edb1f666941a5b51de795dc5ddb40f94aac9d2663b67bc5cf8c2a986145707ceebce2a6626d746164160b596fddad6099ac963b30a2e186942bb8451012380363c6e8b4d721aaa8000dd0b36416eb1e664321f7276deaad4627fae9052a95e6e0492704968928c8d1d978c68de42ce15789d90497feece0b10fe50a6160277e9d133709bb08adaa7f9f8067149b88a58018649a939207ebd09a48eafcc46e9dad9016adfc111e55ad6ecef1591efa39eb7dc7df1268d213da27e60fe911fc3066d085a298b9bda93f6b141a4db7cf9ff32fcb6847511a8b37bca7a2e45f0f85018dfa942914835cc0af82b4d410c7bbc500ff725080b8878dd91ab6b1e0e8a918763f427de21a7fa22a486794e6b875782fd3629348eda675eeead91ed85a32f78da70e267598f0cdc23acc5cc8378e2dd452eb67c2596efcca798599311a1804543a36395709b27d8ecd4be3344a6ba349e1ea299d3be2e628801cca466ad1a072a4dc08568a76209742aa3c0c561c33a317dcb5422254560d594e2cf6c05333815c557a21dc20382946c2eea38c167fd2c17da4792b5112f17a2a354d88afb339c9333b24d59b59007b3da06bb97750afa6a9147c4a38f605d4cde8e4d179980dcec015f250ecf9be8372c3d3e0ff9c8f19f88e9deb75b35d231969297735975810f73d69ca8932f86d83b4db199080a624ff51a94db12b9c11c062c26404d9735914cd3d6d03c210c943f7c92c1b1f5ceaf816c0d1731070aacc3125c984bdc5bacc63ec56932d757902a53bd5c5699546c315d11807ad7c889d94be053f854a20cbee520903771116518beb8dcd08ecdc71cf91ffc573666d8735e46a4946c2b04b3bcf4249ca7c04edf81b3fb58e4da90882741c49f25b3fb3efbc7934c916497a4a39b3866a6156b92bda6759ffc9cc9cf85ba8704bf07e56e526b6ffed6897989f5f212b6ef3b4de41205bfef2e520f09125d21bb343f970584652a9b077a43d323d352c026ecc52a215d62903711266cef2d311fceec8f4d2fb527e02c398d5013c486b1543b437b4e1cf074e0bf2a48945559b237be35a582378b73097442100600eeb1ffa9d7adf6d0c4f7291526b7daf51472bb820a255e3f992fb950f83a1d47a00de248af88400b5ccb4793df22d7e778e4fd5185d61b4b0e74364296fd7992dd8b720316cae5c79ca4074cc815ca6d986ec81d7d8427494a633382f5a53ea1191ffcbddf26dfe59e2791a2553841975b838a54523b6424e2743254bdf8e2b74ea0c2d179c7c274aa7192c01b14ca398a040e3e6effa45f26bbe29fff5f3f20e15ff194c518b2f926a49cf52c135db320753ef107f14ac020c6197b139571b9bf2b2f5ee258cbe52964cc854597f54918b296bacf959626909ba6fc68c889b231b3b33a1a7a86f11c250d4413d5e2c9d6b6c8f6df9854d918231173f2dc95ed0aeabaeb983c6119ac956d74068ad5aa8f4e0f4b8766fb0d6a45d4151685dde9c5af5af2af48636d38622159d9e219d4a2d6df14df411fb365d14c5606b6be807ba86bd58dd387b45418d78538b19255a4974d8f0a43f1251434d999999beb9aaaba7a5d5cfa16e9fa3f32e30361b356d2212aa881f18378317b823e6893feabc932da1b7fa5f8c17b7bc89e861a09633126694caac4a7156cff139f7e00355b71fc1674562cb8802fb589aabcf97e3c7818c5c907235f578d92cfa0a8e807814fc7358cd088a5461804a1aa043bd73558e5de2b9dde205f32bac96429e9332dafbec7024d8d3b0cc58d376fcbed8310b6f0ba99a86de5f6eff3ae87ce09c7f57fc6f115daf29e13c84776207d043ab7a83e2951f11ca28bb4b410b047295d276bb53bd576a8c35e9da157fa8206b20e08939cea40dffd8a4e659baea9eda79f86f71123902e5e0f284590779f9a0b1832b267a17b0f0a13275d8d19963fb28007a441253d0014b61c3e49ff507391ff0c653d8582ba39b018b4902a1d21a85363b46ad931c1fddf44780e6160407b7790c68460f29af10635b1be5f9c00ade7efa42a7f17908b44ba744bdcb4486ecec9391994f87e7602e363377e50fb9a975b74d5a5efe708fd7e1e3425d9e97f6304da1c88c835ac88ba4b595ea3e7f225d61bb757f25f52cbd0c47be479f423bd32befd3601f1ec62c8a82d37ce0b0e6570a8847fb15a660b9a8be8db9a2bbde76abeb7f90725b2bedae2c38ab5eebef9e2d89d0caabc02cbf0813956483d7276da01700b6a0dce54f9439dc0c30bb8e3c1bcceb764c7d01aaf5ba9af838cb67e564eeef0bce407773339b9835434881502ec9effdedc28b6a995d293a36be941ce16efc98c380e7efcf15460852e5d57af6757eccde6287212390d690d36f54b2943c9491b507563b190cf14171fc0f620fc9c12347a4f451f0c37f6112e55527f3d3435c208b5a078930de5789fe318894496758e0f67704216463be003516cb9851d5797725f3978005d9db9d8954996dff59b2ec1f6270383e9df79ad4a234c4067621c9a75bfcae463fae5ae4f94ba49335362b9721c175152ea304d48877d35718ca210b2f49d6a2c90c3a2ac0caf9f4b8781ac6ccbc37b8cc7c58c2416dfc0043aeacb1c3486b9e5633f7b6a2235a203bd98a51a94e131b369ae461c6fd47c5576244abdbf0d5ee377b94a8136444864c9e35af7cfbea95936888eeb31542c3e8f1c8068dd6bba451abd019355f70aeb66724f96ab1f53ebd667373d65eb4b5198cbcb7177d7ade8b756b5d67c423b6759777a5f9da842086eaf2337f3a9879e18213e8d76a3ad26cd36c3af5cf6c0627136d6bfd2dec1935e59099fef7dc6c91930c8bf8025d240635c8857b521235f4e189452a4b28762bdde344f250f1b40e8361fc82cd9c2e286df269539c777c07ef2a7df2f3316c01843537d18cdd3dd2cd2d8bb56804fd0a2e5cb", 0xffb}, {&(0x7f0000000480)}, {&(0x7f0000000540)="aa4455bbc33222188cb6614e56d5b296ff593ad2b9333c4e9a52d481f9ea6c7b9e8ef80334829c7adc9f2a7021ac2d74628564e73811b8f4b535781476fbad8387a84857c240fb38b7266c065c64496c3b3a49fd6cc68bb0a536379e2918ab71d4d4e58730707048de0f8c9c91dc6756d5b35638a900fc54ddf9daff3c99f933910ffb60d15dfb840da6f7f3e614863bbe21a21f348ef999cfbd432ac289e59e17837ff2c17786fd204f83e18b3f82c3195a60dc4e3e49f99c4a5d688e0e2c23b46854d11244075009c252ad105a25aefb8ed586c2a227c2f6fe8fef7b773027001c5bf37fb6f816b6c44377", 0xec}, {0x0}, {0x0}], 0x7, &(0x7f0000001e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x88}, 0x20000080)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x6e23, 0x20006, @empty, 0x6}}, 0x4, 0x2, 0x0, 0x5, 0x392, 0x97}, 0x9c)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000704"], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)

697.098793ms ago: executing program 1 (id=3662):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xfff3, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x44, 0x1, {0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008894}, 0x200400d4)

696.435112ms ago: executing program 2 (id=3663):
socket(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/12], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x6, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
fcntl$setpipe(r2, 0x407, 0x2000000)
prctl$PR_CAPBSET_DROP(0x18, 0x5)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

491.954433ms ago: executing program 3 (id=3664):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', './binderfs/binder0\x00'}, &(0x7f0000000180)='./binderfs/binder0\x00', 0x13, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat=@weak_binder={0x77622a85, 0x1101, 0x800001}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

185.622746ms ago: executing program 2 (id=3665):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000881}, 0x4004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
capset(0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x601, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

184.256752ms ago: executing program 6 (id=3666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x152}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

183.010711ms ago: executing program 3 (id=3667):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
accept4(r1, 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r8, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880)

0s ago: executing program 1 (id=3668):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7e)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, 0x0)

kernel console output (not intermixed with test programs):

or's value: 21
[  783.816041][T11321] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  783.838028][T11321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  783.904271][T11321] usb 4-1: config 0 descriptor??
[  783.978063][T11321] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  784.475160][T12049] tmpfs: Unknown parameter 'y�8vO'
[  786.340210][T12074] bridge0: port 3(syz_tun) entered blocking state
[  786.358958][T12074] bridge0: port 3(syz_tun) entered disabled state
[  786.409042][T12074] syz_tun: entered allmulticast mode
[  786.426077][ T5868] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[  786.473011][T12074] syz_tun: entered promiscuous mode
[  786.501861][T11321] usb 4-1: USB disconnect, device number 17
[  786.542569][T12074] bridge0: port 3(syz_tun) entered blocking state
[  786.549546][T12074] bridge0: port 3(syz_tun) entered forwarding state
[  789.526595][T11311] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  789.698724][T11311] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  789.745447][T11311] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  789.755227][T11311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.778704][T11311] usb 10-1: config 0 descriptor??
[  789.800199][T11311] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  791.126953][T12146] tmpfs: Unknown parameter 'y�8vO'
[  791.213874][T12148] overlayfs: failed to resolve './file0': -2
[  792.674120][T11321] usb 10-1: USB disconnect, device number 8
[  794.213666][T12178] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  795.536620][T11321] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  795.769673][T11321] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  795.862944][T11321] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  795.893077][T11321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.059395][T11321] usb 5-1: config 0 descriptor??
[  796.462865][T11321] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  798.074043][T11321] usb 5-1: USB disconnect, device number 11
[  798.408104][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1621'.
[  799.562404][T12222] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  803.638308][T12243] netlink: 'syz.0.1632': attribute type 11 has an invalid length.
[  803.647004][T12243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1632'.
[  804.982164][T12248] binder_alloc: 12247: binder_alloc_buf, no vma
[  806.131770][T12262] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1637'.
[  806.761954][T12263] ip6gretap0: entered promiscuous mode
[  806.845115][T12263] macsec1: entered promiscuous mode
[  806.911804][T12263] macsec1: entered allmulticast mode
[  807.269612][T12263] ip6gretap0: entered allmulticast mode
[  807.383876][T12269] tmpfs: Unknown parameter 'y�8vO'
[  807.808007][T12276] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  808.854687][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  808.895098][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  809.995868][T12292] binder_alloc: 12291: binder_alloc_buf, no vma
[  813.530789][T12313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  815.773842][T12338] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  816.552025][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1665'.
[  817.046182][T12357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  817.077922][T12360] tmpfs: Unknown parameter 'y�8vO'
[  818.473575][T12374] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  821.980450][   T24] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  822.760656][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  823.062162][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  823.111822][T12408] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  823.157095][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  823.222176][   T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  823.254295][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.274990][   T24] usb 7-1: Product: syz
[  823.281336][   T24] usb 7-1: Manufacturer: syz
[  823.293559][   T24] usb 7-1: SerialNumber: syz
[  823.341155][   T24] usb 7-1: config 0 descriptor??
[  823.374814][T12398] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  823.405782][   T24] usb 7-1: ucan: probing device on interface #0
[  823.418136][   T24] usb 7-1: ucan: invalid in_ep MaxPacketSize
[  823.425488][   T24] usb 7-1: ucan: probe failed; try to update the device firmware
[  824.686780][T12417] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1688'.
[  824.696442][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'.
[  824.705427][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1688'.
[  826.732567][ T9252] usb 7-1: USB disconnect, device number 16
[  827.045983][T12443] tmpfs: Unknown parameter 'y�8vO'
[  828.297043][T12451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  828.457043][T12463] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1702'.
[  828.466542][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'.
[  828.477129][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'.
[  830.166414][   T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  830.408532][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  830.444171][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  830.474014][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  830.524583][   T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  830.586776][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.615398][   T24] usb 4-1: Product: syz
[  830.643151][   T24] usb 4-1: Manufacturer: syz
[  830.710450][   T24] usb 4-1: SerialNumber: syz
[  830.727351][   T24] usb 4-1: config 0 descriptor??
[  830.750035][T12479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  830.792027][   T24] usb 4-1: ucan: probing device on interface #0
[  830.813037][   T24] usb 4-1: ucan: invalid in_ep MaxPacketSize
[  830.856833][   T24] usb 4-1: ucan: probe failed; try to update the device firmware
[  833.492007][T11323] usb 4-1: USB disconnect, device number 18
[  835.786859][T12524] tmpfs: Unknown parameter 'y�8vO'
[  836.424771][T12529] binder: BINDER_SET_CONTEXT_MGR already set
[  836.451073][T12529] binder: 12527:12529 ioctl 4018620d 200000000040 returned -16
[  836.702809][ T9252] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[  837.448624][ T9252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  837.461216][ T9252] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  837.473596][ T9252] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  837.506831][ T9252] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  837.522341][ T9252] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.531514][ T9252] usb 10-1: Product: syz
[  837.539195][ T9252] usb 10-1: Manufacturer: syz
[  837.544598][ T9252] usb 10-1: SerialNumber: syz
[  837.639005][ T9252] usb 10-1: config 0 descriptor??
[  837.656736][T12542] binder: 12506:12542 ioctl c018620c 200000000000 returned -1
[  837.699674][T12530] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  838.275886][ T9252] usb 10-1: ucan: probing device on interface #0
[  838.295197][ T9252] usb 10-1: ucan: invalid in_ep MaxPacketSize
[  838.311576][ T9252] usb 10-1: ucan: probe failed; try to update the device firmware
[  840.724426][ T9252] usb 10-1: USB disconnect, device number 9
[  841.854822][T12576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  842.494365][T12580] tmpfs: Unknown parameter 'y�8vO'
[  845.214906][T12603] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1751'.
[  845.224487][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1751'.
[  845.233643][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1751'.
[  845.476722][T12607] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  845.916479][T12618] binder: 12594:12618 ioctl c018620c 200000000000 returned -1
[  845.919784][T12622] tmpfs: Unknown parameter 'y�8vO'
[  848.818919][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'.
[  848.983731][T12647] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  849.933431][T12659] tmpfs: Unknown parameter 'y�8vO'
[  853.067108][T12686] ip6gretap0: entered promiscuous mode
[  853.074290][T12686] macsec1: entered promiscuous mode
[  853.083173][T12686] macsec1: entered allmulticast mode
[  853.089088][T12686] ip6gretap0: entered allmulticast mode
[  853.895698][T12692] binder: 12672:12692 ioctl c018620c 200000000000 returned -1
[  854.302342][T12696] tmpfs: Unknown parameter 'y�8vO'
[  860.300166][T12727] tmpfs: Unknown parameter 'y�8vO'
[  862.811784][T12748] binder: 12733:12748 ioctl c018620c 200000000000 returned -1
[  863.279023][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1799'.
[  866.281965][T12770] overlayfs: overlapping lowerdir path
[  867.672688][T12778] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.1805'.
[  868.695954][T12790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  868.909432][T12797] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1811'.
[  868.956486][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'.
[  868.991333][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'.
[  870.291457][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  870.699362][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  870.946773][T11323] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  871.318975][T11323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  871.483333][T11323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  871.692068][T11323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  871.709689][T11323] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  871.720898][T11323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.336668][T11323] usb 4-1: config 0 descriptor??
[  873.254959][T11323] usbhid 4-1:0.0: can't add hid device: -71
[  873.283615][T11323] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  873.342238][T11323] usb 4-1: USB disconnect, device number 19
[  877.880635][T12877] overlayfs: failed to resolve './file1/file0': -2
[  878.956475][T11323] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  879.130744][T11323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.153309][T11323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.387591][T11323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  879.401500][T11323] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  879.410708][T11323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.424949][T11323] usb 1-1: config 0 descriptor??
[  879.479219][T12893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  879.851722][T11323] usbhid 1-1:0.0: can't add hid device: -71
[  879.981802][T11323] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  880.001934][T11323] usb 1-1: USB disconnect, device number 3
[  881.898491][T12926] overlayfs: failed to resolve './file1/file0': -2
[  883.016692][T12935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1854'.
[  883.750376][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  883.765452][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  883.777489][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  884.599037][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1860'.
[  884.846684][T11321] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  884.885678][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1863'.
[  885.131392][T11321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.209336][T11321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.229784][T11321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  885.268897][T11321] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  885.452754][ T9754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  885.500887][ T9754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  885.511828][T11321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.527973][T11321] usb 1-1: config 0 descriptor??
[  885.982042][T12971] overlayfs: failed to resolve './file1/file0': -2
[  886.536832][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1868'.
[  886.717113][T11321] usbhid 1-1:0.0: can't add hid device: -71
[  886.830156][T11321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  887.070866][T11321] usb 1-1: USB disconnect, device number 4
[  887.155773][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1870'.
[  887.371778][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1869'.
[  888.503885][T12987] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  889.027019][T11311] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  889.139025][T12998] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1876'.
[  889.161719][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1876'.
[  889.171531][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1876'.
[  889.213085][T11311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  889.341820][T11311] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  889.406357][T11311] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  889.433459][T11311] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  889.447156][T11311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.524773][T11311] usb 7-1: Product: syz
[  889.574952][T11311] usb 7-1: Manufacturer: syz
[  889.633975][T11311] usb 7-1: SerialNumber: syz
[  889.734359][T11311] usb 7-1: config 0 descriptor??
[  889.867608][T12992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  889.926619][T11311] usb 7-1: ucan: probing device on interface #0
[  889.953817][T11311] usb 7-1: ucan: invalid in_ep MaxPacketSize
[  889.981131][T11311] usb 7-1: ucan: probe failed; try to update the device firmware
[  890.677185][T11311] usb 7-1: USB disconnect, device number 17
[  892.676192][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1884'.
[  895.486538][T13048] binder: 13040:13048 ioctl c018620c 200000000000 returned -1
[  895.882835][T11314] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  896.098737][T11314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  896.125009][T11314] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  896.140782][T11314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  896.155992][T11314] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  896.171238][T11314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.192895][T11314] usb 1-1: Product: syz
[  896.242325][T11314] usb 1-1: Manufacturer: syz
[  896.275213][T11314] usb 1-1: SerialNumber: syz
[  896.316140][T11314] usb 1-1: config 0 descriptor??
[  896.333385][T13050] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  896.384260][T11314] usb 1-1: ucan: probing device on interface #0
[  896.450282][T11314] usb 1-1: ucan: invalid in_ep MaxPacketSize
[  896.464244][T11314] usb 1-1: ucan: probe failed; try to update the device firmware
[  897.391283][T11314] usb 1-1: USB disconnect, device number 5
[  897.483445][T13072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  902.556616][   T24] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  902.883623][T13118] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  903.928170][T13120] binder: BINDER_SET_CONTEXT_MGR already set
[  903.934544][T13120] binder: 13119:13120 ioctl 4018620d 200000000040 returned -16
[  903.982873][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  903.998969][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  904.013268][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  904.035712][   T24] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  904.045568][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.067417][   T24] usb 7-1: Product: syz
[  904.073669][   T24] usb 7-1: Manufacturer: syz
[  904.264493][T13132] netlink: 5348 bytes leftover after parsing attributes in process `syz.0.1923'.
[  904.323129][T13129] binder: 13128:13129 ioctl c018620c 200000000000 returned -1
[  904.424223][   T24] usb 7-1: SerialNumber: syz
[  904.465032][   T24] usb 7-1: config 0 descriptor??
[  904.491881][T13114] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  906.096445][   T24] usb 7-1: can't set config #0, error -71
[  906.142300][   T24] usb 7-1: USB disconnect, device number 18
[  907.394451][T13156] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  908.008740][T13161] binder: BINDER_SET_CONTEXT_MGR already set
[  908.062068][T13161] binder: 13159:13161 ioctl 4018620d 200000000040 returned -16
[  908.364984][T13166] binder: 13164:13166 ioctl c018620c 200000000000 returned -1
[  912.423467][T13210] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  913.094839][T13216] binder: BINDER_SET_CONTEXT_MGR already set
[  913.983397][T13216] binder: 13215:13216 ioctl 4018620d 200000000040 returned -16
[  915.184372][T13230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  921.735389][T13277] qnx6: unable to read the first superblock
[  923.413089][T13287] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  925.270838][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'.
[  925.886061][T13311] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.1978'.
[  929.363058][T11321] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  930.830166][T11321] usb 5-1: Using ep0 maxpacket: 32
[  930.863499][T11321] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  930.894618][T11321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.979977][T11321] usb 5-1: config 0 descriptor??
[  931.217011][T11321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  931.264706][T11321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  931.307788][T11321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  931.743195][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.752276][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  932.172701][T11321] usb 5-1: media controller created
[  932.234124][T11321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  932.267338][T11321] az6027: usb out operation failed. (-71)
[  932.276447][T11321] az6027: usb out operation failed. (-71)
[  932.456358][T11321] stb0899_attach: Driver disabled by Kconfig
[  933.216420][T11321] az6027: no front-end attached
[  933.216420][T11321] 
[  933.262653][T11321] az6027: usb out operation failed. (-71)
[  933.294641][T11321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  933.352190][T11321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15
[  933.422153][T11321] dvb-usb: schedule remote query interval to 400 msecs.
[  933.431133][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'.
[  933.440581][T11321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  933.462209][T11321] usb 5-1: USB disconnect, device number 12
[  933.597286][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'.
[  933.865172][T11321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  934.780447][T11322] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  935.848003][T11322] usb 1-1: Using ep0 maxpacket: 32
[  935.869055][T11322] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  935.911724][T11322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.982563][T11322] usb 1-1: config 0 descriptor??
[  936.396943][T11322] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  936.560958][T11322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  936.675737][T11322] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  937.134199][T11322] usb 1-1: media controller created
[  937.313611][T11322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  937.517423][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2013'.
[  937.931048][T11322] az6027: usb out operation failed. (-71)
[  937.975936][T11322] az6027: usb out operation failed. (-71)
[  938.012573][T11322] stb0899_attach: Driver disabled by Kconfig
[  938.024975][T11322] az6027: no front-end attached
[  938.024975][T11322] 
[  938.035243][T11322] az6027: usb out operation failed. (-71)
[  938.055698][T11322] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  938.106947][T11322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16
[  938.179505][T11322] dvb-usb: schedule remote query interval to 400 msecs.
[  938.228715][T11322] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  938.313999][T11322] usb 1-1: USB disconnect, device number 6
[  939.561742][T11322] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  941.327332][T11321] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  941.422894][T13445] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2029'.
[  941.462830][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2029'.
[  941.497711][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2029'.
[  941.531672][T11321] usb 5-1: Using ep0 maxpacket: 32
[  941.554968][T11321] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  941.585073][T11321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.625002][T11321] usb 5-1: config 0 descriptor??
[  942.687001][T11321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  942.715150][T11321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  942.758306][T11321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  942.771391][T13453] binder: BINDER_SET_CONTEXT_MGR already set
[  942.806585][T13453] binder: 13451:13453 ioctl 4018620d 200000000040 returned -16
[  942.814507][T11321] usb 5-1: media controller created
[  942.875546][T11321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  942.942829][T11321] az6027: usb out operation failed. (-71)
[  942.974541][T11321] az6027: usb out operation failed. (-71)
[  942.992703][T11321] stb0899_attach: Driver disabled by Kconfig
[  942.999804][T11321] az6027: no front-end attached
[  942.999804][T11321] 
[  943.021767][T11321] az6027: usb out operation failed. (-71)
[  943.035955][T11321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  943.056726][T11321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17
[  943.077756][T11321] dvb-usb: schedule remote query interval to 400 msecs.
[  943.084883][T11321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  943.104745][T11321] usb 5-1: USB disconnect, device number 13
[  943.317589][T11321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  946.337142][T13480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  947.166789][T11323] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  947.336437][T11323] usb 5-1: Using ep0 maxpacket: 32
[  947.366907][T11323] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  947.917151][T13511] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  948.186469][T11323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.226958][T11323] usb 5-1: config 0 descriptor??
[  948.456330][T11323] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  948.552256][T11323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  948.613784][T11323] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  948.654292][T11323] usb 5-1: media controller created
[  948.745899][T11323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  948.826386][T11323] az6027: usb out operation failed. (-71)
[  949.333006][T11323] az6027: usb out operation failed. (-71)
[  949.356342][T11323] stb0899_attach: Driver disabled by Kconfig
[  949.362853][T11323] az6027: no front-end attached
[  949.362853][T11323] 
[  949.424544][T11323] az6027: usb out operation failed. (-71)
[  949.455139][T11323] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  949.515777][T11323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  949.565169][T11323] dvb-usb: schedule remote query interval to 400 msecs.
[  949.595420][T11323] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  949.663637][T11323] usb 5-1: USB disconnect, device number 14
[  950.810111][T11323] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  951.325425][T13533] overlayfs: failed to resolve './file0': -2
[  951.467059][T11323] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  951.658419][T11323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  951.679969][T11323] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  951.731193][T11323] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  951.776639][T11323] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  951.804156][T11323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.880465][T11323] usb 10-1: config 0 descriptor??
[  952.497310][ T5954] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  952.766775][ T5954] usb 4-1: Using ep0 maxpacket: 32
[  952.783530][ T5954] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  952.830180][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.928053][ T5954] usb 4-1: config 0 descriptor??
[  952.996116][T11323] usbhid 10-1:0.0: can't add hid device: -71
[  953.036556][T11323] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  953.070259][T11323] usb 10-1: USB disconnect, device number 10
[  953.231549][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  953.263180][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  953.285588][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  953.297547][ T5954] usb 4-1: media controller created
[  953.321530][T13543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  953.342015][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  953.454032][ T5954] az6027: usb out operation failed. (-71)
[  953.471384][T13565] overlayfs: failed to resolve './file0': -2
[  953.491307][ T5954] az6027: usb out operation failed. (-71)
[  953.513834][ T5954] stb0899_attach: Driver disabled by Kconfig
[  953.545511][ T5954] az6027: no front-end attached
[  953.545511][ T5954] 
[  953.562243][ T5954] az6027: usb out operation failed. (-71)
[  953.621534][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  953.679772][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  953.730617][ T5954] dvb-usb: schedule remote query interval to 400 msecs.
[  953.753396][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  953.765263][T13573] No control pipe specified
[  953.787872][ T5954] usb 4-1: USB disconnect, device number 20
[  953.995693][ T5954] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  957.224419][T13605] No control pipe specified
[  957.247120][T11323] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  958.436330][T11323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  958.486374][ T5954] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  958.681001][T11323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  958.904667][T11323] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  958.999506][ T5954] usb 4-1: Using ep0 maxpacket: 32
[  959.091379][T11323] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  959.100982][ T5954] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  959.126539][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.136557][T11323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.158766][ T5954] usb 4-1: config 0 descriptor??
[  959.184501][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'.
[  959.204974][T11323] usb 7-1: config 0 descriptor??
[  959.403213][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  959.442750][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  959.458997][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  959.531367][ T5954] usb 4-1: media controller created
[  959.569943][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  959.631447][ T5954] az6027: usb out operation failed. (-71)
[  959.646801][ T5954] az6027: usb out operation failed. (-71)
[  959.653077][ T5954] stb0899_attach: Driver disabled by Kconfig
[  959.662742][ T5954] az6027: no front-end attached
[  959.662742][ T5954] 
[  959.685390][ T5954] az6027: usb out operation failed. (-71)
[  959.706317][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  959.739875][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  959.823713][ T5954] dvb-usb: schedule remote query interval to 400 msecs.
[  959.846652][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  959.865509][T11323] usbhid 7-1:0.0: can't add hid device: -71
[  959.890896][T11323] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  959.941575][ T5954] usb 4-1: USB disconnect, device number 21
[  959.960837][T11323] usb 7-1: USB disconnect, device number 19
[  960.183394][ T5954] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  960.795728][T13640] No control pipe specified
[  961.016172][T13641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  963.426566][T11323] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  963.609167][T11323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.674578][T11323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.706404][T11323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  963.749958][T11323] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  964.003923][T11323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.023017][T11323] usb 1-1: config 0 descriptor??
[  964.138477][T13680] binder: 13672:13680 ioctl c018620c 0 returned -14
[  965.055914][   T30] audit: type=1804 audit(1754822389.310:141): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2117" name="/newroot/188/file0" dev="tmpfs" ino=1038 res=1 errno=0
[  965.082177][T11323] usbhid 1-1:0.0: can't add hid device: -71
[  965.188161][T11323] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  965.237799][T11323] usb 1-1: USB disconnect, device number 7
[  965.463726][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'.
[  966.903907][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2123'.
[  967.191734][T13708] binder: 13705:13708 ioctl 4018620d 0 returned -22
[  969.868921][T13731] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2133'.
[  969.914833][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2133'.
[  969.934805][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2133'.
[  971.243585][T13742] binder: 13741:13742 ioctl 4018620d 0 returned -22
[  971.389700][T13746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  975.565110][T13778] binder: 13777:13778 ioctl c0306201 0 returned -14
[  976.196902][   T30] audit: type=1804 audit(1754822400.390:142): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2151" name="/newroot/178/file0" dev="tmpfs" ino=968 res=1 errno=0
[  977.223078][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'.
[  977.491470][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'.
[  979.443415][T13811] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  980.856589][T11314] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  980.984422][   T30] audit: type=1804 audit(1754822405.300:143): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2164" name="/newroot/183/file0" dev="tmpfs" ino=994 res=1 errno=0
[  981.768209][T11314] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  981.781675][T11314] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  981.796723][T11314] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  981.806134][T11314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.063435][T11314] usb 1-1: USB disconnect, device number 8
[  986.716414][   T30] audit: type=1804 audit(1754822411.040:144): pid=13863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2178" name="/newroot/196/file0" dev="tmpfs" ino=1079 res=1 errno=0
[  989.954687][T13885] vivid-004: disconnect
[  989.964191][T13884] vivid-004: reconnect
[  991.383643][   T30] audit: type=1804 audit(1754822415.700:145): pid=13909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2193" name="/newroot/192/file0" dev="tmpfs" ino=1040 res=1 errno=0
[  993.222602][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  993.232749][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  994.410090][T13932] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2201'.
[  997.260748][   T30] audit: type=1804 audit(1754822421.580:146): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2207" name="/newroot/174/file0" dev="tmpfs" ino=934 res=1 errno=0
[  998.477682][T13972] tmpfs: Unknown parameter 'y�8'
[  998.494512][T13972] autofs: Unknown parameter '00000000000000000000'
[ 1000.826373][T13997] qnx6: unable to read the first superblock
[ 1001.623225][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2225'.
[ 1001.992767][T14013] tmpfs: Unknown parameter 'y�8'
[ 1002.017642][T14013] autofs: Unknown parameter '00000000000000000000'
[ 1004.206765][T14040] netlink: 4276 bytes leftover after parsing attributes in process `syz.9.2236'.
[ 1004.216496][T14040] netlink: 4276 bytes leftover after parsing attributes in process `syz.9.2236'.
[ 1004.760063][T14044] qnx6: unable to read the first superblock
[ 1005.799906][T14051] tmpfs: Unknown parameter 'y�8'
[ 1005.806476][T14051] autofs: Unknown parameter '00000000000000000000'
[ 1009.992952][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'.
[ 1011.186750][   T30] audit: type=1804 audit(1754822434.910:147): pid=14085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2249" name="/newroot/546/file0" dev="tmpfs" ino=2936 res=1 errno=0
[ 1013.498477][T14128] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1015.286159][T14149] tmpfs: Unknown parameter 'y�8'
[ 1015.292135][T14149] autofs: Unknown parameter '00000000000000000000'
[ 1015.606854][T11311] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[ 1016.012046][T11311] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1016.031820][T11311] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1016.045920][T11311] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1016.063416][T11311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.308331][T11311] usb 1-1: usb_control_msg returned -32
[ 1016.332531][T11311] usbtmc 1-1:16.0: can't read capabilities
[ 1017.047635][T11322] usb 1-1: USB disconnect, device number 9
[ 1018.391739][T14185] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1020.613976][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2287'.
[ 1021.916613][T14212] tmpfs: Unknown parameter 'y�8'
[ 1021.924530][T14212] autofs: Unknown parameter 'fd00000000000000000000'
[ 1022.370440][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'.
[ 1022.496472][   T30] audit: type=1804 audit(1754822446.810:148): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2294" name="/newroot/217/file0" dev="tmpfs" ino=1167 res=1 errno=0
[ 1025.763531][T14248] tmpfs: Unknown parameter 'y�8'
[ 1025.781526][T14248] autofs: Unknown parameter 'fd00000000000000000000'
[ 1026.168663][   T30] audit: type=1804 audit(1754822450.490:149): pid=14256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2308" name="/newroot/197/file0" dev="tmpfs" ino=1041 res=1 errno=0
[ 1026.747138][T14264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1028.984051][T14289] tmpfs: Unknown parameter 'y�8'
[ 1029.020763][T14289] autofs: Unknown parameter 'fd00000000000000000000'
[ 1033.753788][T14322] random: crng reseeded on system resumption
[ 1034.792890][T14329] tmpfs: Unknown parameter 'y�8'
[ 1038.867835][T14361] smc: net device bond0 applied user defined pnetid SYZ2
[ 1038.917564][T14361] smc: net device bond0 erased user defined pnetid SYZ2
[ 1039.959093][T14373] tmpfs: Unknown parameter 'y�8'
[ 1041.573507][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2352'.
[ 1043.194407][T14411] tmpfs: Unknown parameter 'y�8'
[ 1043.288396][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'.
[ 1044.235724][   T30] audit: type=1804 audit(1754822468.550:150): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2363" name="/newroot/563/file0" dev="tmpfs" ino=3043 res=1 errno=0
[ 1044.512487][T14428] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2367' sets config #0
[ 1044.546549][T14428] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2367' sets config #1
[ 1046.205605][T14446] tmpfs: Unknown parameter 'y�8'
[ 1046.809822][T14450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1048.066452][T11322] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1048.294641][T11322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1048.309701][T11322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1048.674813][T11322] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1048.729100][T11322] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1048.750652][T11322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.841726][T11322] usb 10-1: config 0 descriptor??
[ 1049.360612][T11322] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1049.559597][T11322] usb 10-1: USB disconnect, device number 11
[ 1049.640173][T14478] fido_id[14478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 1053.155589][T11314] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1053.209596][T14520] input: syz1 as /devices/virtual/input/input21
[ 1053.372390][T11314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.484869][T14524] tmpfs: Unknown parameter 'y�8'
[ 1053.511149][T11314] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.582416][T11314] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1053.645169][T11314] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1053.781252][T11314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.260602][T11314] usb 7-1: config 0 descriptor??
[ 1054.613638][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.620420][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.424546][T11314] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1055.788393][T11314] usb 7-1: USB disconnect, device number 20
[ 1056.601690][T14563] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2411'.
[ 1057.785941][T14569] orangefs_mount: mount request failed with -4
[ 1058.493053][T14580] tmpfs: Unknown parameter 'y�8'
[ 1058.499591][T14580] No control pipe specified
[ 1063.156501][T11314] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1063.185497][T14608] delete_channel: no stack
[ 1063.190864][T14608] delete_channel: no stack
[ 1063.923719][T11314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1063.936350][T11314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1063.947438][T11314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1063.961143][T11314] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1063.970941][T11314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.985106][T11314] usb 1-1: config 0 descriptor??
[ 1064.644593][   T30] audit: type=1804 audit(1754822488.940:151): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2426" name="/newroot/241/file0" dev="tmpfs" ino=1302 res=1 errno=0
[ 1064.644853][T11314] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1064.836344][   T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1065.077193][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1065.117155][   T24] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[ 1065.125404][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.207237][   T24] usb 7-1: config 0 has no interface number 0
[ 1065.213515][   T24] usb 7-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1065.558974][T14630] tmpfs: Unknown parameter 'y�8'
[ 1065.571088][T14630] No control pipe specified
[ 1066.006825][   T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1066.042025][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.074892][   T24] usb 7-1: Product: syz
[ 1066.082714][   T24] usb 7-1: Manufacturer: syz
[ 1066.095808][   T24] usb 7-1: SerialNumber: syz
[ 1066.120136][   T24] usb 7-1: config 0 descriptor??
[ 1066.146451][T11314] usb 1-1: reset high-speed USB device number 10 using dummy_hcd
[ 1066.156742][   T24] iowarrior 7-1:0.186: no interrupt-in endpoint found
[ 1068.040322][T14647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.053071][T14647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.348149][T11311] usb 1-1: USB disconnect, device number 10
[ 1069.534417][T11311] usb 7-1: USB disconnect, device number 21
[ 1070.431355][T14668] tmpfs: Unknown parameter 'y�8'
[ 1070.437328][T14668] No control pipe specified
[ 1070.891568][T14679] qnx6: unable to read the first superblock
[ 1073.046687][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2435'.
[ 1073.098742][T14655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2435'.
[ 1073.648377][T14704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1073.658502][T14704] syzkaller0: entered promiscuous mode
[ 1073.665806][T14704] syzkaller0: entered allmulticast mode
[ 1073.729874][T14704] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.766931][T14703] tipc: Resetting bearer <eth:syzkaller0>
[ 1073.840090][T14703] tipc: Disabling bearer <eth:syzkaller0>
[ 1074.236889][T14713] tmpfs: Unknown parameter 'y�8'
[ 1078.934366][T14765] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2467'.
[ 1086.901047][T14834] vivid-001: disconnect
[ 1086.956104][T14831] vivid-001: reconnect
[ 1086.963595][T14842] netlink: 'syz.3.2494': attribute type 2 has an invalid length.
[ 1089.148185][T14858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2498'.
[ 1089.571070][T14864] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1090.751951][T14880] vivid-002: disconnect
[ 1090.761177][T14879] vivid-002: reconnect
[ 1092.375779][   T30] audit: type=1800 audit(1754822516.020:152): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2510" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1098.171620][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2528'.
[ 1102.654005][   T30] audit: type=1804 audit(1754822526.820:153): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2540" name="/newroot/253/file0" dev="tmpfs" ino=1337 res=1 errno=0
[ 1103.678468][T14997] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2543'.
[ 1104.953506][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2547'.
[ 1116.052023][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.058982][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.953260][T15106] vivid-004: disconnect
[ 1118.990356][T15105] vivid-004: reconnect
[ 1119.560032][T15122] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2582'.
[ 1123.511272][T15152] vivid-004: disconnect
[ 1123.532273][T15149] vivid-004: reconnect
[ 1123.851778][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'.
[ 1125.566576][T10489] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1127.982195][T15188] /dev/sg0: Can't lookup blockdev
[ 1129.376820][T15193] vivid-004: disconnect
[ 1129.384986][T15191] vivid-004: reconnect
[ 1131.936363][T11314] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1132.129035][T11314] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1132.186467][T11314] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1132.215971][T11314] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1132.245673][T11314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.836606][T10489] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1133.378097][T11322] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1133.676591][T11322] usb 1-1: Using ep0 maxpacket: 16
[ 1133.687935][T11322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1133.730918][T11322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1133.774532][T11322] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1133.793790][T11314] usb 4-1: USB disconnect, device number 22
[ 1133.840015][T11322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.947908][T11322] usb 1-1: config 0 descriptor??
[ 1134.090403][T15232] vivid-004: disconnect
[ 1134.098704][T15231] vivid-004: reconnect
[ 1134.164841][T15230] kvm: vcpu 0: requested 98 ns lapic timer period limited to 200000 ns
[ 1134.200718][T15213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1134.216619][T15213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1134.232718][T15213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1134.243080][T15213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1134.251306][T15213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1134.397293][T11322] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[ 1134.404792][T11322] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[ 1134.419935][T11322] mcp2221 0003:04D8:00DD.000E: item fetching failed at offset 3/5
[ 1134.429625][T11322] mcp2221 0003:04D8:00DD.000E: can't parse reports
[ 1134.436905][T11322] mcp2221 0003:04D8:00DD.000E: probe with driver mcp2221 failed with error -22
[ 1134.451311][ T6392] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.615043][T11322] usb 1-1: USB disconnect, device number 11
[ 1135.779071][ T6392] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.875148][   T30] audit: type=1804 audit(1754822560.190:154): pid=15254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2628" name="/newroot/265/file0" dev="tmpfs" ino=1398 res=1 errno=0
[ 1136.286417][T15213] Bluetooth: hci3: command tx timeout
[ 1136.753717][T15261] random: crng reseeded on system resumption
[ 1136.929872][ T6392] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.980480][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'.
[ 1137.254913][ T6392] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.737152][T10489] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1138.370096][T15213] Bluetooth: hci3: command tx timeout
[ 1138.727471][T15233] chnl_net:caif_netlink_parms(): no params data found
[ 1140.526312][T15213] Bluetooth: hci3: command tx timeout
[ 1142.606378][T15213] Bluetooth: hci3: command tx timeout
[ 1152.317345][ T6392] ip6gretap0 (unregistering): left allmulticast mode
[ 1155.298106][T10489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1155.342532][T10489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1155.356061][T10489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1155.372870][T10489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1155.385432][T10489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1156.401292][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1156.425938][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1156.449062][ T6392] bond0 (unregistering): Released all slaves
[ 1156.608483][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'.
[ 1156.677580][ T6392] tipc: Left network mode
[ 1156.821730][T15262] bridge0: port 3(syz_tun) entered disabled state
[ 1157.829575][T15213] Bluetooth: hci5: command tx timeout
[ 1158.044221][T15262] syz_tun (unregistering): left allmulticast mode
[ 1158.067465][T15262] syz_tun (unregistering): left promiscuous mode
[ 1158.082825][T15262] bridge0: port 3(syz_tun) entered disabled state
[ 1158.136022][T15233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1158.154008][T15233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1158.162887][T15233] bridge_slave_0: entered allmulticast mode
[ 1158.181283][T15233] bridge_slave_0: entered promiscuous mode
[ 1158.308527][T15233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1158.326078][T15233] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1158.346911][T15233] bridge_slave_1: entered allmulticast mode
[ 1158.366890][T15233] bridge_slave_1: entered promiscuous mode
[ 1158.508036][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1158.644539][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1158.745164][ T6392] hsr_slave_0: left promiscuous mode
[ 1158.787901][ T6392] hsr_slave_1: left promiscuous mode
[ 1158.794446][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1158.813193][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1158.822513][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1158.853165][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1158.918416][ T6392] veth1_macvtap: left promiscuous mode
[ 1158.944452][ T6392] veth0_macvtap: left promiscuous mode
[ 1158.961804][ T6392] veth1_vlan: left promiscuous mode
[ 1158.970799][ T6392] veth0_vlan: left promiscuous mode
[ 1159.908463][T10489] Bluetooth: hci5: command tx timeout
[ 1161.968031][T10489] Bluetooth: hci5: command tx timeout
[ 1162.416927][T11322] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[ 1162.598228][T11322] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[ 1162.606916][T11322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1162.618762][T11322] usb 5-1: config 0 has no interface number 0
[ 1162.624964][T11322] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[ 1162.639307][T11322] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 1162.651049][T11322] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1162.651746][ T6392] team0 (unregistering): Port device team_slave_1 removed
[ 1162.662474][T11322] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[ 1162.685367][T11322] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[ 1162.713556][T11322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.722334][T11322] usb 5-1: Product: syz
[ 1162.726870][T11322] usb 5-1: Manufacturer: syz
[ 1162.731822][T11322] usb 5-1: SerialNumber: syz
[ 1162.741223][T11322] usb 5-1: config 0 descriptor??
[ 1162.768307][T11322] symbolserial 5-1:0.175: symbol converter detected
[ 1162.790297][T11322] usb 5-1: symbol converter now attached to ttyUSB0
[ 1162.801918][ T6392] team0 (unregistering): Port device team_slave_0 removed
[ 1162.974438][T11322] usb 5-1: USB disconnect, device number 15
[ 1162.992754][T11322] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[ 1163.015483][T11322] symbolserial 5-1:0.175: device disconnected
[ 1163.873295][T15348] kthread_run failed with err -4
[ 1163.977149][T15365] tun0: tun_chr_ioctl cmd 1074025678
[ 1164.046452][T10489] Bluetooth: hci5: command tx timeout
[ 1164.587880][T15365] tun0: group set to 0
[ 1164.650977][T15233] team0: Port device team_slave_0 added
[ 1164.680514][T15233] team0: Port device team_slave_1 added
[ 1164.882546][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.894668][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1165.134278][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.011376][T15386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1166.328613][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1166.399274][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1166.552089][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1166.991493][ T6392] IPVS: stop unused estimator thread 0...
[ 1167.150430][T15233] hsr_slave_0: entered promiscuous mode
[ 1167.158751][T15233] hsr_slave_1: entered promiscuous mode
[ 1167.629944][T15233] debugfs: 'hsr0' already exists in 'hsr'
[ 1167.726024][T15233] Cannot create hsr debugfs directory
[ 1167.995071][T15318] chnl_net:caif_netlink_parms(): no params data found
[ 1168.006938][T11322] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1168.186397][T11322] usb 10-1: Using ep0 maxpacket: 32
[ 1168.194507][T11322] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1168.223466][T11322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.271383][T11322] usb 10-1: config 0 descriptor??
[ 1168.542835][T11322] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1168.687030][T11322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1168.723486][T15318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1168.748429][T11322] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1168.759276][T15318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.775175][T11322] usb 10-1: media controller created
[ 1168.781558][T15318] bridge_slave_0: entered allmulticast mode
[ 1168.808996][T15318] bridge_slave_0: entered promiscuous mode
[ 1168.854058][T15318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1168.866423][T15318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1168.871603][T11322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1168.873866][T15318] bridge_slave_1: entered allmulticast mode
[ 1168.942648][T15318] bridge_slave_1: entered promiscuous mode
[ 1169.042538][T11322] az6027: usb out operation failed. (-71)
[ 1169.069161][T11322] az6027: usb out operation failed. (-71)
[ 1169.076950][T11322] stb0899_attach: Driver disabled by Kconfig
[ 1169.084770][T11322] az6027: no front-end attached
[ 1169.084770][T11322] 
[ 1169.107164][T11322] az6027: usb out operation failed. (-71)
[ 1169.130450][T11322] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1169.158477][T11322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input22
[ 1169.206871][T11322] dvb-usb: schedule remote query interval to 400 msecs.
[ 1169.217521][T11322] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1169.277986][T11322] usb 10-1: USB disconnect, device number 12
[ 1169.312915][T15318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1169.366396][T11314] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1169.419914][T15318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1169.532627][T11314] usb 4-1: Using ep0 maxpacket: 8
[ 1169.590137][T11314] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1169.600304][T11322] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1169.608203][T11314] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[ 1169.643831][T11314] usb 4-1: config 7 has no interface number 0
[ 1170.313181][T11314] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[ 1170.322862][T11314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.362417][T11314] usb 4-1: Product: syz
[ 1170.367341][T11314] usb 4-1: Manufacturer: syz
[ 1170.432998][T11314] usb 4-1: SerialNumber: syz
[ 1170.663727][T15318] team0: Port device team_slave_0 added
[ 1170.690143][T15318] team0: Port device team_slave_1 added
[ 1170.712067][T11314] usb 4-1: USB disconnect, device number 23
[ 1170.956511][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'.
[ 1170.993923][T15318] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.001929][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.033357][T15318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1171.052336][T15437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2681'.
[ 1171.064618][T15318] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1171.072667][T15318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1171.114221][T15318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1171.399062][T15318] hsr_slave_0: entered promiscuous mode
[ 1171.413826][T15318] hsr_slave_1: entered promiscuous mode
[ 1171.472942][T15318] debugfs: 'hsr0' already exists in 'hsr'
[ 1171.667414][T15318] Cannot create hsr debugfs directory
[ 1173.327842][T15233] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1173.378347][T15233] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1173.456377][T11311] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1173.484092][T15233] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1173.537058][T15233] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1173.881227][T11311] usb 4-1: Using ep0 maxpacket: 32
[ 1173.901381][T11311] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1173.939689][T11311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.997231][T11311] usb 4-1: config 0 descriptor??
[ 1174.460204][T11311] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1174.680311][T11311] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1174.762935][T11311] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1175.171540][T15233] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1175.308757][T15233] 8021q: adding VLAN 0 to HW filter on device team0
[ 1175.345644][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.353575][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.451352][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.458793][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1176.745926][T15318] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1176.799122][T15318] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1176.871147][T15318] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1176.901502][T15318] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1177.499908][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.507669][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.513132][T15490] syz.4.2696: attempt to access beyond end of device
[ 1177.513132][T15490] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1177.577257][T15490] gfs2: error -5 reading superblock
[ 1177.873432][T15505] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.2694'.
[ 1177.920219][T15318] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.993883][T15318] 8021q: adding VLAN 0 to HW filter on device team0
[ 1178.041578][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1178.049069][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1178.119192][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.126628][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.295369][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1178.694824][T15318] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1178.801746][T15318] veth0_vlan: entered promiscuous mode
[ 1178.825725][T15318] veth1_vlan: entered promiscuous mode
[ 1178.940107][T15318] veth0_macvtap: entered promiscuous mode
[ 1178.955959][T15318] veth1_macvtap: entered promiscuous mode
[ 1179.014014][T15318] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1179.041394][T15318] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1179.069389][ T9749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.084959][ T9749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.146350][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.171380][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.275877][T15233] veth0_vlan: entered promiscuous mode
[ 1179.321640][T10874] bridge0: port 3(syz_tun) entered disabled state
[ 1179.380806][T10874] syz_tun (unregistering): left allmulticast mode
[ 1179.390474][T10874] syz_tun (unregistering): left promiscuous mode
[ 1179.399543][T10874] bridge0: port 3(syz_tun) entered disabled state
[ 1179.453397][T15233] veth1_vlan: entered promiscuous mode
[ 1179.577225][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.616245][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.685649][ T9749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.712495][ T9749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.770365][T15233] veth0_macvtap: entered promiscuous mode
[ 1179.795970][T15233] veth1_macvtap: entered promiscuous mode
[ 1179.853327][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1179.903990][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1179.937768][ T6391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.056705][ T6392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.078169][ T6392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.159637][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1180.323024][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.344157][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.485350][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.496107][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.092723][T15541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1181.105806][T15541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1181.115516][T15541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1182.117861][T15541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1182.126689][T15541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1182.175862][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2706'.
[ 1182.216489][T15213] Bluetooth: hci1: command 0x1003 tx timeout
[ 1182.216510][T10489] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1183.815822][T15557] qnx6: unable to read the first superblock
[ 1184.206293][T10489] Bluetooth: hci2: command tx timeout
[ 1185.208615][T15569] vivid-005: kernel_thread() failed
[ 1185.301556][T15570] block device autoloading is deprecated and will be removed.
[ 1185.398606][T15537] chnl_net:caif_netlink_parms(): no params data found
[ 1186.288998][T10489] Bluetooth: hci2: command tx timeout
[ 1186.988101][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2718'.
[ 1187.235069][T15537] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1188.143794][T15537] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1188.166419][T15537] bridge_slave_0: entered allmulticast mode
[ 1188.187955][T15537] bridge_slave_0: entered promiscuous mode
[ 1188.218246][T15537] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1188.265057][T15537] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1188.285467][T15537] bridge_slave_1: entered allmulticast mode
[ 1188.294882][T15537] bridge_slave_1: entered promiscuous mode
[ 1188.376302][T15213] Bluetooth: hci2: command tx timeout
[ 1188.740947][T15537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1188.757321][T15537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1188.847814][T15610] qnx6: unable to read the first superblock
[ 1189.511044][T10489] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1189.983699][T15537] team0: Port device team_slave_0 added
[ 1190.002826][T15537] team0: Port device team_slave_1 added
[ 1190.446291][T10489] Bluetooth: hci2: command tx timeout
[ 1190.612791][T15537] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1190.635147][T15537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1190.705141][T15537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1190.768575][T15537] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1190.829993][T15537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1190.915427][T15537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1190.959768][T15626] syzkaller1: entered promiscuous mode
[ 1190.965527][T15626] syzkaller1: entered allmulticast mode
[ 1191.263187][T15537] hsr_slave_0: entered promiscuous mode
[ 1191.281366][T15537] hsr_slave_1: entered promiscuous mode
[ 1191.522946][T15537] debugfs: 'hsr0' already exists in 'hsr'
[ 1191.528888][T15537] Cannot create hsr debugfs directory
[ 1194.512264][T15643] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1196.926446][T15656] qnx6: unable to read the first superblock
[ 1197.608682][ T9749] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1197.679253][   T30] audit: type=1804 audit(1754822622.000:155): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2736" name="/newroot/316/file0" dev="tmpfs" ino=1716 res=1 errno=0
[ 1198.682538][T15537] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1198.729440][T15537] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1198.784790][T15537] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1198.824297][T15537] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1199.333655][T15684] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2743'.
[ 1199.729779][T10489] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1199.740474][T15213] Bluetooth: hci1: command 0x1003 tx timeout
[ 1199.907721][T15537] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1200.128724][T15537] 8021q: adding VLAN 0 to HW filter on device team0
[ 1200.218798][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.226696][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1200.361388][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.368899][ T6392] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1202.176099][T15707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2751'.
[ 1202.884175][T15537] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1203.607561][T15537] veth0_vlan: entered promiscuous mode
[ 1203.709021][T15537] veth1_vlan: entered promiscuous mode
[ 1203.923440][T15537] veth0_macvtap: entered promiscuous mode
[ 1204.055507][T15537] veth1_macvtap: entered promiscuous mode
[ 1204.198491][T15537] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1204.263845][T15537] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1204.302507][ T6392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.351167][ T6392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.361911][ T6392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.420831][ T6392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.856045][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.885277][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1205.062368][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1205.070310][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1206.857000][T10489] Bluetooth: hci1: command 0x1003 tx timeout
[ 1206.972724][T15213] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1214.891183][T15834] netlink: 'syz.3.2791': attribute type 2 has an invalid length.
[ 1215.176409][T15843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2793'.
[ 1215.232667][T15844] tipc: Started in network mode
[ 1215.253989][T15844] tipc: Node identity 06c0cf78e636, cluster identity 4711
[ 1215.437200][T15844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1215.467269][T15845] syzkaller0: entered promiscuous mode
[ 1215.576519][T15845] syzkaller0: entered allmulticast mode
[ 1215.749531][T15842] tipc: Resetting bearer <eth:syzkaller0>
[ 1215.842372][T15842] tipc: Disabling bearer <eth:syzkaller0>
[ 1220.232745][T15888] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1221.598588][T15906] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1221.605101][T15906] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1221.611725][T15906] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1221.618340][T15906] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1221.625529][T15906] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1221.950241][T15906] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1222.188086][T15906] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1222.196874][T15906] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1222.204160][T15906] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1222.212256][T15906] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1222.219790][T15906] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1222.227016][T15906] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1222.234371][T15906] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1222.242894][T15906] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1226.291536][T15935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1226.331646][T15935] syzkaller0: entered promiscuous mode
[ 1226.339301][T15935] syzkaller0: entered allmulticast mode
[ 1226.376633][T15934] tipc: Resetting bearer <eth:syzkaller0>
[ 1226.548410][T15934] tipc: Disabling bearer <eth:syzkaller0>
[ 1231.061026][T15529] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1231.237246][T15984] tipc: Started in network mode
[ 1231.263589][T15984] tipc: Node identity aa2f9e934353, cluster identity 4711
[ 1231.304801][T15984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1231.359604][T15984] tipc: Resetting bearer <eth:syzkaller0>
[ 1231.394936][T16001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1231.395211][T15529] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.408662][T16001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1231.452798][T15982] tipc: Disabling bearer <eth:syzkaller0>
[ 1231.455985][T15529] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1231.481711][T15529] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1231.505745][T15529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.772149][T16003] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2846'.
[ 1231.866284][T16006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1234.039367][T11323] usb 3-1: USB disconnect, device number 14
[ 1235.509539][T16043] loop9: detected capacity change from 0 to 7
[ 1235.520900][T16043] buffer_io_error: 59 callbacks suppressed
[ 1235.520923][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.535741][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.545742][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.555201][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.564777][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.575355][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.584272][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.592704][T16043] ldm_validate_partition_table(): Disk read failed.
[ 1235.637377][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.648154][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.658546][T16043] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1235.669735][T16043] Dev loop9: unable to read RDB block 0
[ 1235.679740][T16043]  loop9: unable to read partition table
[ 1235.687206][T16043] loop9: partition table beyond EOD, truncated
[ 1235.693711][T16043] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1235.693711][T16043] 
) failed (rc=-5)
[ 1235.820356][T16045] overlayfs: overlapping lowerdir path
[ 1236.049692][T16046] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1236.706541][T16052] veth0_to_bridge: entered promiscuous mode
[ 1237.578739][T16051] veth0_to_bridge: left promiscuous mode
[ 1237.650885][T16066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2863'.
[ 1238.951598][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.958577][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.973368][T11311] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1239.070265][T11311] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1239.184809][T11311] usb 4-1: USB disconnect, device number 24
[ 1240.026890][T11311] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1240.463662][T11311] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.555649][T11311] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1240.700997][T11311] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1241.587454][T11311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.699465][T11311] usb 4-1: can't set config #27, error -71
[ 1241.853601][T11311] usb 4-1: USB disconnect, device number 25
[ 1245.124290][T15730] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1245.568463][T15730] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.620980][T15730] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1245.652946][T15730] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1245.677628][T15730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.321286][T16151] netlink: 'syz.1.2893': attribute type 4 has an invalid length.
[ 1248.094746][T16151] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1248.118792][T16151] �: renamed from bond0 (while UP)
[ 1248.125336][T16147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2893'.
[ 1248.679591][T15730] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1249.548495][T15529] usb 4-1: USB disconnect, device number 26
[ 1250.398194][T15730] usb 7-1: Using ep0 maxpacket: 32
[ 1250.572856][T15730] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1250.982742][T15730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.054976][T15730] usb 7-1: config 0 descriptor??
[ 1251.658734][T16177] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2903'.
[ 1252.500150][T15730] usb 7-1: can't set config #0, error -71
[ 1252.518242][T15730] usb 7-1: USB disconnect, device number 22
[ 1253.168391][   T30] audit: type=1804 audit(1754822677.150:156): pid=16187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2906" name="/newroot/38/file0" dev="tmpfs" ino=222 res=1 errno=0
[ 1253.626396][T16196] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1253.634858][T16196] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1253.642350][T16196] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1253.651315][T16196] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1253.659987][T16196] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1253.809284][T16196] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1253.816765][T16196] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1253.823559][T16196] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1253.831026][T16196] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1253.854431][T16196] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1254.533810][T16196] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1254.595327][T16196] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1254.687188][T16196] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1254.695244][T16196] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1256.396305][T15541] Bluetooth: hci3: command 0x0406 tx timeout
[ 1260.231721][T16246] fuse: Bad value for 'fd'
[ 1262.561326][T16268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'.
[ 1263.238753][T16286] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2939'.
[ 1268.219258][   T30] audit: type=1804 audit(1754822692.460:157): pid=16318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2951" name="/newroot/351/file0" dev="tmpfs" ino=1871 res=1 errno=0
[ 1274.526358][   T30] audit: type=1804 audit(1754822698.820:158): pid=16352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2964" name="file0" dev="tmpfs" ino=245 res=1 errno=0
[ 1277.060696][T16388] fuse: Bad value for 'fd'
[ 1279.502022][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2982'.
[ 1281.996853][T10489] Bluetooth: hci5: command 0x0406 tx timeout
[ 1282.011673][T16431] netlink: 'syz.4.2990': attribute type 1 has an invalid length.
[ 1282.020416][T16431] NCSI netlink: No device for ifindex 0
[ 1288.354123][T16486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1288.385187][T16486] tipc: Resetting bearer <eth:syzkaller0>
[ 1288.683979][T16485] tipc: Disabling bearer <eth:syzkaller0>
[ 1289.351848][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3016'.
[ 1292.015299][T15529] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[ 1292.377131][T15529] usb 5-1: device descriptor read/64, error -71
[ 1293.439887][T15529] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[ 1294.077346][T15529] usb 5-1: device descriptor read/64, error -71
[ 1294.198309][T15529] usb usb5-port1: attempt power cycle
[ 1297.687599][T16589] 9pnet_fd: Insufficient options for proto=fd
[ 1297.764121][T16589] netlink: 'syz.1.3044': attribute type 12 has an invalid length.
[ 1298.126244][T14179] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1298.637373][T14179] usb 4-1: Using ep0 maxpacket: 32
[ 1298.659234][T14179] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1298.694593][T14179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.735146][T14179] usb 4-1: config 0 descriptor??
[ 1299.805697][T14179] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1299.837550][T14179] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1299.857317][T14179] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1299.864676][T14179] usb 4-1: media controller created
[ 1299.895918][T14179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1299.948842][T14179] az6027: usb out operation failed. (-71)
[ 1299.956068][T14179] az6027: usb out operation failed. (-71)
[ 1299.976172][T14179] stb0899_attach: Driver disabled by Kconfig
[ 1299.986600][T14179] az6027: no front-end attached
[ 1299.986600][T14179] 
[ 1300.383210][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.389931][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.406245][T14179] az6027: usb out operation failed. (-71)
[ 1300.412177][T14179] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1301.028248][T14179] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24
[ 1301.077214][T14179] dvb-usb: schedule remote query interval to 400 msecs.
[ 1301.143173][T14179] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1301.218100][T14179] usb 4-1: USB disconnect, device number 27
[ 1301.437790][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3058'.
[ 1302.910726][T14179] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1303.886823][T16663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1303.898483][T16663] tipc: Resetting bearer <eth:syzkaller0>
[ 1304.062587][T16662] tipc: Disabling bearer <eth:syzkaller0>
[ 1308.212125][T15541] Bluetooth: hci2: command 0x0406 tx timeout
[ 1309.018462][T16698] binder: Unknown parameter '18446744073709551615'
[ 1309.975210][T16709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1310.301776][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'.
[ 1310.352207][T15529] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1310.517433][T15529] usb 5-1: Using ep0 maxpacket: 32
[ 1310.765485][T15529] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1310.774954][T15529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1310.787447][T15529] usb 5-1: config 0 descriptor??
[ 1311.506295][T15529] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1311.523617][T15529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1312.390535][T15529] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1312.469212][T15529] usb 5-1: media controller created
[ 1313.192904][T15529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1313.351891][T15529] az6027: usb out operation failed. (-71)
[ 1314.029877][T15529] az6027: usb out operation failed. (-71)
[ 1314.037992][T15529] stb0899_attach: Driver disabled by Kconfig
[ 1314.044131][T15529] az6027: no front-end attached
[ 1314.044131][T15529] 
[ 1314.071644][T15529] az6027: usb out operation failed. (-71)
[ 1314.078375][T15529] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1314.737877][T15529] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25
[ 1314.792545][T15529] dvb-usb: schedule remote query interval to 400 msecs.
[ 1314.848650][T15529] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1314.952073][T15529] usb 5-1: USB disconnect, device number 19
[ 1315.238050][T15529] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1315.676167][T16773] overlayfs: missing 'lowerdir'
[ 1316.717249][T16778] tmpfs: Unknown parameter '����'
[ 1316.856213][T15525] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1317.076201][T15525] usb 7-1: Using ep0 maxpacket: 32
[ 1317.083808][T15525] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1317.083841][T15525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.107721][T15525] usb 7-1: config 0 descriptor??
[ 1317.328223][T15525] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1317.463586][T15525] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1317.530830][T16788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3109'.
[ 1317.722709][T15525] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1317.988216][T15525] usb 7-1: media controller created
[ 1318.328696][T16802] overlayfs: missing 'lowerdir'
[ 1318.963515][T15525] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1319.119437][T15525] az6027: usb out operation failed. (-71)
[ 1319.168053][T15525] az6027: usb out operation failed. (-71)
[ 1319.173918][T15525] stb0899_attach: Driver disabled by Kconfig
[ 1319.201296][T15525] az6027: no front-end attached
[ 1319.201296][T15525] 
[ 1319.313104][T15525] az6027: usb out operation failed. (-71)
[ 1319.329863][T15525] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1319.361088][T16809] tmpfs: Unknown parameter '����'
[ 1319.396585][T15525] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26
[ 1319.475065][T15525] dvb-usb: schedule remote query interval to 400 msecs.
[ 1320.050002][T15525] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1320.102950][T15525] usb 7-1: USB disconnect, device number 23
[ 1320.468238][T15525] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1321.084576][T15525] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1321.217463][T16835] overlayfs: missing 'lowerdir'
[ 1321.266405][T15525] usb 7-1: Using ep0 maxpacket: 32
[ 1321.981904][T15525] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1321.992712][T15525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.015975][T15525] usb 7-1: config 0 descriptor??
[ 1322.452643][T15525] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1323.137222][T15525] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1323.204169][T15525] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1323.233529][T15525] usb 7-1: media controller created
[ 1323.354230][T15525] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1323.425329][T15525] az6027: usb out operation failed. (-71)
[ 1323.441290][T16854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1323.461458][T15525] az6027: usb out operation failed. (-71)
[ 1323.472290][T15525] stb0899_attach: Driver disabled by Kconfig
[ 1323.491631][T15525] az6027: no front-end attached
[ 1323.491631][T15525] 
[ 1323.523682][T15525] az6027: usb out operation failed. (-71)
[ 1323.542358][T15525] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1323.590022][T15525] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27
[ 1323.648530][T15525] dvb-usb: schedule remote query interval to 400 msecs.
[ 1323.655640][T15525] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1324.536464][T15525] usb 7-1: USB disconnect, device number 24
[ 1324.844488][T15525] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1324.872972][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[ 1326.064052][T16894] loop8: detected capacity change from 0 to 7
[ 1326.097380][T16894] Dev loop8: unable to read RDB block 7
[ 1326.104552][T16894]  loop8: unable to read partition table
[ 1326.117619][T16894] loop8: partition table beyond EOD, truncated
[ 1326.124341][T16894] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1327.178897][T16890] could not allocate digest TFM handle sha1-avx
[ 1328.461375][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3150'.
[ 1332.827591][T16948] @: renamed from vlan0 (while UP)
[ 1334.317959][ T6386] kworker/u8:14 (6386) used greatest stack depth: 17952 bytes left
[ 1334.588243][T16961] netlink: 'syz.2.3166': attribute type 12 has an invalid length.
[ 1334.596613][T16961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3166'.
[ 1335.615013][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'.
[ 1335.647670][T15529] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1336.343808][T16981] XFS (nullb0): Invalid superblock magic number
[ 1336.350431][T15529] usb 3-1: Using ep0 maxpacket: 32
[ 1336.372625][T15529] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1336.442971][T15529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.547946][T15529] usb 3-1: config 0 descriptor??
[ 1336.625651][T15529] usb 3-1: can't set config #0, error -71
[ 1336.691596][T15529] usb 3-1: USB disconnect, device number 15
[ 1337.080678][ T1149] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.477443][ T1149] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.743952][ T1149] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.847140][T11323] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1338.052776][T11323] usb 4-1: Using ep0 maxpacket: 8
[ 1338.094779][T11323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.143114][ T1149] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.148288][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'.
[ 1338.161372][T11323] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1338.777419][T11323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.868923][T11323] usb 4-1: config 0 descriptor??
[ 1338.953852][T11323] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1339.181380][T17045] comedi comedi0: dt2801: I/O port conflict (0x3,2)
[ 1339.603519][ T1149] bridge_slave_1: left allmulticast mode
[ 1339.614607][ T1149] bridge_slave_1: left promiscuous mode
[ 1339.625812][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1339.816365][ T1149] bridge_slave_0: left allmulticast mode
[ 1339.822286][ T1149] bridge_slave_0: left promiscuous mode
[ 1339.923591][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1339.969382][T17054] netlink: 'syz.4.3194': attribute type 10 has an invalid length.
[ 1340.100317][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3194'.
[ 1340.992427][T11323] gspca_vc032x: reg_w err -110
[ 1341.033993][T11323] vc032x 4-1:0.0: probe with driver vc032x failed with error -110
[ 1341.339044][T17066] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1341.363185][T17066] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1341.385506][T17066] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1341.549774][T17066] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1341.559957][T17070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3199'.
[ 1341.590810][T17066] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1341.653461][T17066] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1341.671317][ T1149] ip6gretap0 (unregistering): left allmulticast mode
[ 1341.676870][T17066] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1341.695444][T17066] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1341.702680][T17066] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1341.710082][T17066] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1341.717312][T17066] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1341.725002][T17066] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1342.189760][T15730] usb 4-1: USB disconnect, device number 28
[ 1345.013150][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1345.171609][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1345.210488][ T1149] bond0 (unregistering): Released all slaves
[ 1345.259688][T17054] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1345.476323][T17054] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1345.593917][T17104] ubi31: attaching mtd0
[ 1345.621595][T17104] ubi31: scanning is finished
[ 1345.626526][T17104] ubi31: empty MTD device detected
[ 1346.032331][T17054] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1346.094231][ T1149] tipc: Left network mode
[ 1346.313306][T17104] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1348.153569][   T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1349.151089][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1349.212234][   T24] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1349.223747][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1349.239987][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1349.249877][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.491088][ T1149] hsr_slave_0: left promiscuous mode
[ 1349.576341][   T24] usbtmc 4-1:16.0: bulk endpoints not found
[ 1349.604036][ T1149] hsr_slave_1: left promiscuous mode
[ 1349.665057][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1349.712189][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1349.756505][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1349.821966][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1349.927512][ T1149] veth1_macvtap: left promiscuous mode
[ 1349.946291][ T1149] veth0_macvtap: left promiscuous mode
[ 1349.967286][ T1149] veth1_vlan: left promiscuous mode
[ 1349.976778][ T1149] veth0_vlan: left promiscuous mode
[ 1350.314165][T17156] tmpfs: Bad value for 'mpol'
[ 1352.820811][T11322] usb 4-1: USB disconnect, device number 29
[ 1354.050810][T17184] netlink: 'syz.1.3233': attribute type 1 has an invalid length.
[ 1354.382533][T17188] syz.3.3234: attempt to access beyond end of device
[ 1354.382533][T17188] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1354.400678][T17188] gfs2: error -5 reading superblock
[ 1354.825971][ T1149] team0 (unregistering): Port device team_slave_1 removed
[ 1354.948205][ T1149] team0 (unregistering): Port device team_slave_0 removed
[ 1356.380978][T17184] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 1358.656710][   T30] audit: type=1804 audit(1754822782.290:159): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3241" name="/newroot/415/file0" dev="tmpfs" ino=2253 res=1 errno=0
[ 1360.014831][T17245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1360.021961][T17245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1360.141455][T17251] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1360.208161][T17245] vhci_hcd vhci_hcd.0: Device attached
[ 1360.258591][T17255] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11)
[ 1360.265334][T17255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1360.309741][T17255] vhci_hcd vhci_hcd.0: Device attached
[ 1360.357499][T17251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14)
[ 1360.364485][T17251] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1360.378398][T11323] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[ 1360.387090][T17245] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7)
[ 1360.393650][T17245] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1360.403693][T17251] vhci_hcd vhci_hcd.0: Device attached
[ 1360.435131][T17245] vhci_hcd vhci_hcd.0: Device attached
[ 1360.548450][T17245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1360.741454][T17272] overlayfs: failed to clone upperpath
[ 1361.635146][T17255] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19)
[ 1361.641918][T17255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1361.784129][T17269] binder: Unknown parameter 'func'
[ 1361.850763][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.858609][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.886467][T17255] vhci_hcd vhci_hcd.0: Device attached
[ 1361.932737][T17257] vhci_hcd: connection closed
[ 1361.935460][T17262] vhci_hcd: connection closed
[ 1361.948129][   T30] audit: type=1804 audit(1754822786.240:160): pid=17275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3257" name="file0" dev="tmpfs" ino=644 res=1 errno=0
[ 1361.976770][ T9763] vhci_hcd: stop threads
[ 1361.983106][ T9763] vhci_hcd: release socket
[ 1361.988487][T17248] vhci_hcd: connection reset by peer
[ 1361.993840][T17263] vhci_hcd: connection closed
[ 1362.083857][ T9763] vhci_hcd: disconnect device
[ 1362.115044][ T9763] vhci_hcd: stop threads
[ 1362.122397][T17270] vhci_hcd: connection closed
[ 1362.124858][ T9763] vhci_hcd: release socket
[ 1362.163326][ T9763] vhci_hcd: disconnect device
[ 1362.173022][ T9763] vhci_hcd: stop threads
[ 1362.185038][ T9763] vhci_hcd: release socket
[ 1362.190970][ T9763] vhci_hcd: disconnect device
[ 1362.201034][ T9763] vhci_hcd: stop threads
[ 1362.205469][ T9763] vhci_hcd: release socket
[ 1362.233329][ T9763] vhci_hcd: disconnect device
[ 1362.309173][ T9763] vhci_hcd: stop threads
[ 1362.320488][ T9763] vhci_hcd: release socket
[ 1362.325492][ T9763] vhci_hcd: disconnect device
[ 1362.356856][   T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 1363.498986][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1363.516995][   T24] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1363.528853][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1363.553407][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1363.587131][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.624163][   T24] usbtmc 3-1:16.0: bulk endpoints not found
[ 1364.579256][T17299] kvm: pic: non byte write
[ 1365.771789][T11323] vhci_hcd: vhci_device speed not set
[ 1366.214372][T14179] usb 3-1: USB disconnect, device number 16
[ 1368.429541][   T30] audit: type=1326 audit(1754822792.740:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1368.507018][   T30] audit: type=1326 audit(1754822792.740:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1368.548126][T11311] usb usb40-port1: attempt power cycle
[ 1368.752253][   T30] audit: type=1326 audit(1754822792.740:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1368.775725][   T30] audit: type=1326 audit(1754822792.740:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1368.817940][   T30] audit: type=1326 audit(1754822792.740:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.499222][   T30] audit: type=1326 audit(1754822792.750:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.524501][   T30] audit: type=1326 audit(1754822792.750:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.585311][   T30] audit: type=1326 audit(1754822792.750:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.609486][   T30] audit: type=1326 audit(1754822792.750:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.641528][   T30] audit: type=1326 audit(1754822792.750:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17346 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc998ebe9 code=0x7ffc0000
[ 1369.837775][T11311] usb usb40-port1: unable to enumerate USB device
[ 1369.990416][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3293'.
[ 1370.086270][   T24] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1370.385661][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1370.488294][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1370.587426][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1370.695717][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1371.017281][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.137376][   T24] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[ 1372.250971][T17399] netlink: 'syz.4.3301': attribute type 4 has an invalid length.
[ 1372.270036][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3300'.
[ 1372.279261][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3300'.
[ 1372.297874][T17399] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3301'.
[ 1372.359610][ T6391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.402076][T17399] : renamed from bond0 (while UP)
[ 1372.428154][   T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1372.521125][ T6391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1372.609797][   T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.626308][   T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1372.645734][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1372.716206][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.864102][ T6391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.061662][T17411] syz.4.3303: attempt to access beyond end of device
[ 1373.061662][T17411] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1373.076649][T17411] gfs2: error -5 reading superblock
[ 1374.020847][T15529] usb 4-1: USB disconnect, device number 30
[ 1374.081392][T14179] usb 7-1: USB disconnect, device number 25
[ 1374.171175][   T24] IPVS: starting estimator thread 0...
[ 1374.229042][ T6391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.286736][T17417] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1375.959322][ T6391] bridge_slave_1: left allmulticast mode
[ 1375.982096][ T6391] bridge_slave_1: left promiscuous mode
[ 1375.992658][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3313'.
[ 1376.027615][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1376.085553][ T6391] bridge_slave_0: left allmulticast mode
[ 1376.120890][ T6391] bridge_slave_0: left promiscuous mode
[ 1376.373557][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1376.951842][T17454] loop8: detected capacity change from 0 to 79
[ 1376.959649][T14179] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1377.096194][T11323] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1377.134898][T14179] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1377.178487][T14179] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1377.207456][T17456] loop8: detected capacity change from 79 to 78
[ 1377.221105][ T6391] ip6gretap0 (unregistering): left allmulticast mode
[ 1377.234399][T14179] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1377.269263][T14179] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1377.299364][T11323] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1377.329001][T14179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.348710][T11323] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1377.375762][T11323] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1377.389137][T14179] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[ 1377.418457][T11323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.727753][T15730] usb 7-1: USB disconnect, device number 26
[ 1379.809761][T15529] usb 3-1: USB disconnect, device number 17
[ 1381.991440][   T30] audit: type=1804 audit(1754822806.270:171): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3330" name="/newroot/114/file0" dev="tmpfs" ino=622 res=1 errno=0
[ 1386.147262][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1386.582197][T17535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3343'.
[ 1387.180237][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1387.873866][ T6391] bond0 (unregistering): Released all slaves
[ 1387.967615][T17502] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1388.096908][ T6391] tipc: Left network mode
[ 1390.068008][T11323] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1390.135869][T17562] overlayfs: failed to clone upperpath
[ 1390.400577][T11323] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1390.816328][T11323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1390.847364][T11323] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1391.295563][T11323] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[ 1391.377917][T11323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.536343][ T6391] hsr_slave_0: left promiscuous mode
[ 1391.547578][T11323] usb 3-1: config 0 descriptor??
[ 1391.554025][T11323] usb 3-1: can't set config #0, error -71
[ 1391.585152][T11323] usb 3-1: USB disconnect, device number 18
[ 1391.614473][ T6391] hsr_slave_1: left promiscuous mode
[ 1391.663178][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1392.035499][T15730] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[ 1392.072519][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1392.171187][T17579] syz.4.3357: attempt to access beyond end of device
[ 1392.171187][T17579] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 1392.184833][T17579] gfs2: error -5 reading superblock
[ 1392.226395][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1392.250384][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1392.386354][T15730] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1392.410120][ T6391] veth1_macvtap: left promiscuous mode
[ 1392.416021][ T6391] veth0_macvtap: left promiscuous mode
[ 1392.425269][T15730] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1392.467572][ T6391] veth1_vlan: left promiscuous mode
[ 1392.473129][ T6391] veth0_vlan: left promiscuous mode
[ 1392.486486][T15730] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1392.495600][T15730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.877529][T15730] usb 7-1: usb_control_msg returned -32
[ 1392.883207][T15730] usbtmc 7-1:16.0: can't read capabilities
[ 1393.544655][T15730] usb 7-1: USB disconnect, device number 27
[ 1397.957938][   T30] audit: type=1326 audit(1754822822.280:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1397.981301][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1397.991167][   T30] audit: type=1326 audit(1754822822.280:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1398.014103][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1398.024962][   T30] audit: type=1326 audit(1754822822.280:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1398.047399][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1398.146105][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1398.420439][   T30] audit: type=1326 audit(1754822822.280:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.034091][   T30] audit: type=1326 audit(1754822822.280:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.082785][   T30] audit: type=1326 audit(1754822822.290:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08b2f8d550 code=0x7ffc0000
[ 1399.125778][   T30] audit: type=1326 audit(1754822822.290:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.149530][   T30] audit: type=1326 audit(1754822822.290:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.173420][   T30] audit: type=1326 audit(1754822822.290:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.199389][   T30] audit: type=1326 audit(1754822822.290:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.6.3368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b2f8ebe9 code=0x7ffc0000
[ 1399.435565][ T6391] team0 (unregistering): Port device team_slave_1 removed
[ 1399.512431][T11322] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[ 1399.522006][ T6391] team0 (unregistering): Port device team_slave_0 removed
[ 1399.705509][T11322] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1399.723104][T11322] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1399.737312][T11322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1399.746653][T11322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.981966][T11322] usb 4-1: usb_control_msg returned -32
[ 1399.987993][T11322] usbtmc 4-1:16.0: can't read capabilities
[ 1400.453711][T17577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1400.603369][T17632] pim6reg: entered allmulticast mode
[ 1400.605148][T11323] usb 4-1: USB disconnect, device number 31
[ 1402.321996][T17656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1402.465378][T17656] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1402.749256][T17670] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1402.872699][T17676] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1404.382617][T17693] qnx6: unable to read the first superblock
[ 1404.848695][T15529] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1405.718271][T15529] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1405.775378][T15529] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1405.872295][T15529] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1405.882684][T15529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.075118][T15529] usb 3-1: usb_control_msg returned -71
[ 1406.091230][T15529] usbtmc 3-1:16.0: can't read capabilities
[ 1406.113731][T15529] usb 3-1: USB disconnect, device number 19
[ 1408.314081][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1408.314110][   T30] audit: type=1804 audit(1754822832.520:184): pid=17735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3405" name="/newroot/448/file0" dev="tmpfs" ino=2435 res=1 errno=0
[ 1412.303384][T17784] ptrace attach of "./syz-executor exec"[15537] was attempted by "\x09   
                   ��      ��      ��      0              ��      ��      ��                 ����                                                                                                                                                                                                                                                                                                                                                                                                                           "[17784]
[ 1416.107151][T17814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3432'.
[ 1416.731402][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'.
[ 1423.258980][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.259046][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1426.092052][T17927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3467'.
[ 1431.535354][T11323] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1431.757596][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3492'.
[ 1431.769232][   T30] audit: type=1804 audit(1754822855.300:185): pid=17983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3490" name="/newroot/147/file0" dev="tmpfs" ino=791 res=1 errno=0
[ 1431.832114][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3492'.
[ 1432.010483][T11323] usb 7-1: device descriptor read/64, error -71
[ 1432.165681][T17991] overlayfs: overlapping lowerdir path
[ 1433.036319][T11323] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1433.288072][T11323] usb 7-1: device descriptor read/64, error -71
[ 1434.145144][T11323] usb usb7-port1: attempt power cycle
[ 1436.877434][T15529] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1437.746175][T15529] usb 3-1: device descriptor read/64, error -71
[ 1438.111703][T15529] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1438.456210][T15529] usb 3-1: device descriptor read/64, error -71
[ 1438.728471][T15529] usb usb3-port1: attempt power cycle
[ 1439.084428][T18064] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.3517'.
[ 1439.113058][T15529] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1439.521348][T15529] usb 3-1: device descriptor read/8, error -71
[ 1439.900111][T15529] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1439.969625][T18069] syzkaller0: entered promiscuous mode
[ 1439.975273][T18069] syzkaller0: entered allmulticast mode
[ 1440.130216][T15529] usb 3-1: device not accepting address 23, error -71
[ 1440.470474][T15529] usb usb3-port1: unable to enumerate USB device
[ 1447.240024][T18105] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1447.655553][   T30] audit: type=1326 audit(1754822871.970:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18108 comm="syz.6.3534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x0
[ 1447.923859][T18114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3532'.
[ 1451.944994][T18147] IPv6: Can't replace route, no match found
[ 1452.596346][T11311] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1453.069682][T11311] usb 5-1: device descriptor read/64, error -71
[ 1453.241708][T18165] qnx6: unable to read the first superblock
[ 1453.317085][T11311] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1453.456172][T11311] usb 5-1: device descriptor read/64, error -71
[ 1453.576624][T11311] usb usb5-port1: attempt power cycle
[ 1453.662422][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3555'.
[ 1453.967719][T11311] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1454.028481][T11311] usb 5-1: device descriptor read/8, error -71
[ 1454.276345][T11311] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1454.306996][T11311] usb 5-1: device descriptor read/8, error -71
[ 1454.428285][T11311] usb usb5-port1: unable to enumerate USB device
[ 1454.478918][T18194] IPv6: Can't replace route, no match found
[ 1456.657374][   T30] audit: type=1804 audit(1754822880.710:187): pid=18220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3569" name="/newroot/465/file0" dev="tmpfs" ino=2467 res=1 errno=0
[ 1456.716195][T18218] ubi31: attaching mtd0
[ 1456.757025][T18218] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80)
[ 1459.786650][   T30] audit: type=1326 audit(1754822884.110:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18252 comm="syz.6.3583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b2f8ebe9 code=0x0
[ 1462.362600][T18267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3586'.
[ 1468.345667][T18332] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3605'.
[ 1472.728890][T18384] netlink: 'syz.4.3623': attribute type 11 has an invalid length.
[ 1472.785116][T18384] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3623'.
[ 1473.071172][T18387] qnx6: unable to read the first superblock
[ 1476.212248][T18406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1478.504649][T18406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.862079][T18406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1481.004610][T18406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1482.134828][ T6391] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1482.346789][ T9749] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.242139][ T9754] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.266257][ T9754] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1484.694313][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.701183][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.776928][ T5954] kworker/0:5 (5954) used greatest stack depth: 15224 bytes left
[ 1485.180936][T18517] ------------[ cut here ]------------
[ 1485.187650][T18517] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x64a/0x6e0, CPU#0: syz.6.3666/18517
[ 1485.198618][T18517] Modules linked in:
[ 1485.203108][T18517] CPU: 0 UID: 0 PID: 18517 Comm: syz.6.3666 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1485.215394][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1485.227462][T18517] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[ 1485.233700][T18517] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 a3 8c 00 cc e8 32 8a ce f6 90 0f 0b 90 eb e1 e8 27 8a ce f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[ 1485.254047][T18517] RSP: 0018:ffffc9000cd16f70 EFLAGS: 00010287
[ 1485.261128][T18517] RAX: ffffffff8af12999 RBX: ffff8880329e8000 RCX: 0000000000080000
[ 1485.269684][T18517] RDX: ffffc9001d2e2000 RSI: 0000000000000402 RDI: 0000000000000403
[ 1485.278001][T18517] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af124b3
[ 1485.286256][T18517] R10: dffffc0000000000 R11: ffffed100653d031 R12: 1ffff1100653d00a
[ 1485.294449][T18517] R13: ffff888060640e40 R14: 0000000000000001 R15: ffffffff8af124b3
[ 1485.302571][T18517] FS:  00007f08b3e596c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[ 1485.311830][T18517] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1485.319008][T18517] CR2: 0000200000001040 CR3: 0000000033ad4000 CR4: 00000000003526f0
[ 1485.328139][T18517] Call Trace:
[ 1485.332012][T18517]  <TASK>
[ 1485.335002][T18517]  rate_control_rate_init_all_links+0x109/0x1a0
[ 1485.341525][T18517]  sta_apply_auth_flags+0x1c2/0x400
[ 1485.346928][T18517]  sta_apply_parameters+0xe4b/0x15b0
[ 1485.352449][T18517]  ieee80211_add_station+0x424/0x6a0
[ 1485.357867][T18517]  rdev_add_station+0x108/0x290
[ 1485.362884][T18517]  nl80211_new_station+0x1755/0x1b70
[ 1485.368621][T18517]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1485.374344][T18517]  ? netdev_run_todo+0xe1d/0xea0
[ 1485.379576][T18517]  ? nl80211_pre_doit+0x4f1/0x930
[ 1485.384675][T18517]  genl_family_rcv_msg_doit+0x212/0x300
[ 1485.390620][T18517]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1485.396939][T18517]  ? bpf_lsm_capable+0x9/0x20
[ 1485.401826][T18517]  ? security_capable+0x7e/0x2e0
[ 1485.407037][T18517]  genl_rcv_msg+0x60e/0x790
[ 1485.411612][T18517]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1485.416729][T18517]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1485.422713][T18517]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1485.429093][T18517]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1485.434918][T18517]  ? __asan_memcpy+0x40/0x70
[ 1485.439769][T18517]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1485.445443][T18517]  netlink_rcv_skb+0x205/0x470
[ 1485.450414][T18517]  ? __lock_acquire+0xab9/0xd20
[ 1485.455442][T18517]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1485.460964][T18517]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1485.466438][T18517]  ? down_read+0x1ad/0x2e0
[ 1485.471036][T18517]  genl_rcv+0x28/0x40
[ 1485.475071][T18517]  netlink_unicast+0x82f/0x9e0
[ 1485.480048][T18517]  ? __pfx_netlink_unicast+0x10/0x10
[ 1485.485492][T18517]  ? netlink_sendmsg+0x642/0xb30
[ 1485.490616][T18517]  ? skb_put+0x11b/0x210
[ 1485.495019][T18517]  netlink_sendmsg+0x805/0xb30
[ 1485.500050][T18517]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1485.505426][T18517]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1485.510832][T18517]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1485.516429][T18517]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1485.522279][T18517]  __sock_sendmsg+0x219/0x270
[ 1485.528148][T18517]  ____sys_sendmsg+0x505/0x830
[ 1485.532988][T18517]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1485.538683][T18517]  ? import_iovec+0x74/0xa0
[ 1485.543963][T18517]  ___sys_sendmsg+0x21f/0x2a0
[ 1485.548912][T18517]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1485.554298][T18517]  ? __fget_files+0x2a/0x420
[ 1485.559335][T18517]  ? __fget_files+0x3a0/0x420
[ 1485.564175][T18517]  __x64_sys_sendmsg+0x19b/0x260
[ 1485.569302][T18517]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1485.575094][T18517]  ? rcu_is_watching+0x15/0xb0
[ 1485.580277][T18517]  ? do_syscall_64+0xbe/0x3b0
[ 1485.585185][T18517]  do_syscall_64+0xfa/0x3b0
[ 1485.590079][T18517]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1485.595400][T18517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.601775][T18517]  ? clear_bhb_loop+0x60/0xb0
[ 1485.606694][T18517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.612720][T18517] RIP: 0033:0x7f08b2f8ebe9
[ 1485.617322][T18517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1485.637866][T18517] RSP: 002b:00007f08b3e59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1485.647057][T18517] RAX: ffffffffffffffda RBX: 00007f08b31b5fa0 RCX: 00007f08b2f8ebe9
[ 1485.655085][T18517] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[ 1485.663326][T18517] RBP: 00007f08b3011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1485.671440][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1485.679652][T18517] R13: 00007f08b31b6038 R14: 00007f08b31b5fa0 R15: 00007ffd3e233a48
[ 1485.688055][T18517]  </TASK>
[ 1485.691123][T18517] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1485.698452][T18517] CPU: 0 UID: 0 PID: 18517 Comm: syz.6.3666 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full) 
[ 1485.709669][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1485.719761][T18517] Call Trace:
[ 1485.723047][T18517]  <TASK>
[ 1485.726073][T18517]  dump_stack_lvl+0x99/0x250
[ 1485.730821][T18517]  ? __asan_memcpy+0x40/0x70
[ 1485.735471][T18517]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1485.740686][T18517]  ? __pfx__printk+0x10/0x10
[ 1485.745389][T18517]  vpanic+0x281/0x750
[ 1485.749392][T18517]  ? __pfx__printk+0x10/0x10
[ 1485.753999][T18517]  ? __pfx_vpanic+0x10/0x10
[ 1485.758529][T18517]  ? is_bpf_text_address+0x292/0x2b0
[ 1485.764140][T18517]  ? is_bpf_text_address+0x26/0x2b0
[ 1485.769467][T18517]  panic+0xb9/0xc0
[ 1485.773468][T18517]  ? __pfx_panic+0x10/0x10
[ 1485.778179][T18517]  __warn+0x334/0x4c0
[ 1485.782169][T18517]  ? rate_control_rate_init+0x64a/0x6e0
[ 1485.787774][T18517]  ? rate_control_rate_init+0x64a/0x6e0
[ 1485.793539][T18517]  report_bug+0x2be/0x4f0
[ 1485.798227][T18517]  ? rate_control_rate_init+0x64a/0x6e0
[ 1485.803792][T18517]  ? rate_control_rate_init+0x64a/0x6e0
[ 1485.809456][T18517]  ? rate_control_rate_init+0x64c/0x6e0
[ 1485.815024][T18517]  handle_bug+0x84/0x160
[ 1485.819366][T18517]  exc_invalid_op+0x1a/0x50
[ 1485.823962][T18517]  asm_exc_invalid_op+0x1a/0x20
[ 1485.828823][T18517] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[ 1485.835085][T18517] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 a3 8c 00 cc e8 32 8a ce f6 90 0f 0b 90 eb e1 e8 27 8a ce f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[ 1485.854985][T18517] RSP: 0018:ffffc9000cd16f70 EFLAGS: 00010287
[ 1485.861172][T18517] RAX: ffffffff8af12999 RBX: ffff8880329e8000 RCX: 0000000000080000
[ 1485.869182][T18517] RDX: ffffc9001d2e2000 RSI: 0000000000000402 RDI: 0000000000000403
[ 1485.877274][T18517] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af124b3
[ 1485.885338][T18517] R10: dffffc0000000000 R11: ffffed100653d031 R12: 1ffff1100653d00a
[ 1485.893336][T18517] R13: ffff888060640e40 R14: 0000000000000001 R15: ffffffff8af124b3
[ 1485.901312][T18517]  ? rate_control_rate_init+0x163/0x6e0
[ 1485.906889][T18517]  ? rate_control_rate_init+0x163/0x6e0
[ 1485.912535][T18517]  ? rate_control_rate_init+0x649/0x6e0
[ 1485.918106][T18517]  rate_control_rate_init_all_links+0x109/0x1a0
[ 1485.924379][T18517]  sta_apply_auth_flags+0x1c2/0x400
[ 1485.929594][T18517]  sta_apply_parameters+0xe4b/0x15b0
[ 1485.935070][T18517]  ieee80211_add_station+0x424/0x6a0
[ 1485.940394][T18517]  rdev_add_station+0x108/0x290
[ 1485.945288][T18517]  nl80211_new_station+0x1755/0x1b70
[ 1485.950629][T18517]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1485.956300][T18517]  ? netdev_run_todo+0xe1d/0xea0
[ 1485.961387][T18517]  ? nl80211_pre_doit+0x4f1/0x930
[ 1485.966451][T18517]  genl_family_rcv_msg_doit+0x212/0x300
[ 1485.972072][T18517]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1485.978297][T18517]  ? bpf_lsm_capable+0x9/0x20
[ 1485.983114][T18517]  ? security_capable+0x7e/0x2e0
[ 1485.988120][T18517]  genl_rcv_msg+0x60e/0x790
[ 1485.992769][T18517]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1485.997884][T18517]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1486.003481][T18517]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1486.009138][T18517]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1486.014664][T18517]  ? __asan_memcpy+0x40/0x70
[ 1486.019352][T18517]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1486.024863][T18517]  netlink_rcv_skb+0x205/0x470
[ 1486.029775][T18517]  ? __lock_acquire+0xab9/0xd20
[ 1486.034682][T18517]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1486.039736][T18517]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1486.045055][T18517]  ? down_read+0x1ad/0x2e0
[ 1486.049724][T18517]  genl_rcv+0x28/0x40
[ 1486.053973][T18517]  netlink_unicast+0x82f/0x9e0
[ 1486.058759][T18517]  ? __pfx_netlink_unicast+0x10/0x10
[ 1486.064055][T18517]  ? netlink_sendmsg+0x642/0xb30
[ 1486.069096][T18517]  ? skb_put+0x11b/0x210
[ 1486.073346][T18517]  netlink_sendmsg+0x805/0xb30
[ 1486.078153][T18517]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1486.083497][T18517]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1486.088462][T18517]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1486.093779][T18517]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1486.099085][T18517]  __sock_sendmsg+0x219/0x270
[ 1486.103782][T18517]  ____sys_sendmsg+0x505/0x830
[ 1486.108642][T18517]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1486.113941][T18517]  ? import_iovec+0x74/0xa0
[ 1486.118453][T18517]  ___sys_sendmsg+0x21f/0x2a0
[ 1486.123160][T18517]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1486.128459][T18517]  ? __fget_files+0x2a/0x420
[ 1486.133071][T18517]  ? __fget_files+0x3a0/0x420
[ 1486.137831][T18517]  __x64_sys_sendmsg+0x19b/0x260
[ 1486.142920][T18517]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1486.148424][T18517]  ? rcu_is_watching+0x15/0xb0
[ 1486.153206][T18517]  ? do_syscall_64+0xbe/0x3b0
[ 1486.157994][T18517]  do_syscall_64+0xfa/0x3b0
[ 1486.162512][T18517]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1486.167761][T18517]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.173870][T18517]  ? clear_bhb_loop+0x60/0xb0
[ 1486.178712][T18517]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1486.184636][T18517] RIP: 0033:0x7f08b2f8ebe9
[ 1486.189094][T18517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1486.208785][T18517] RSP: 002b:00007f08b3e59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1486.217303][T18517] RAX: ffffffffffffffda RBX: 00007f08b31b5fa0 RCX: 00007f08b2f8ebe9
[ 1486.225374][T18517] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[ 1486.233448][T18517] RBP: 00007f08b3011e19 R08: 0000000000000000 R09: 0000000000000000
[ 1486.241527][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1486.249576][T18517] R13: 00007f08b31b6038 R14: 00007f08b31b5fa0 R15: 00007ffd3e233a48
[ 1486.257610][T18517]  </TASK>
[ 1486.261104][T18517] Kernel Offset: disabled
[ 1486.265431][T18517] Rebooting in 86400 seconds..