last executing test programs:

5m5.596338023s ago: executing program 32 (id=2):
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
fsopen(&(0x7f00000000c0)='bpf\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x29, 0x18, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)

4m47.519298014s ago: executing program 33 (id=38):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

4m30.533323947s ago: executing program 0 (id=89):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)

4m29.655630384s ago: executing program 0 (id=91):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)={@map, 0xffffffffffffffff, 0x25, 0x0, 0xffffffffffffffff, @void, @value}, 0x20)

4m28.957603446s ago: executing program 0 (id=93):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004854)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)

4m14.066604066s ago: executing program 0 (id=113):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00')

4m12.647674959s ago: executing program 0 (id=115):
socket$netlink(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
socket$unix(0x1, 0x1, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc0102030109022d00010b06800809045f40030a00004009050d02000202040c0905080c400001c60d"], 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

4m7.851925826s ago: executing program 0 (id=118):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffffffffffe, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRES64=0x0, @ANYRES16=r3], 0x8)

4m5.732062715s ago: executing program 5 (id=32):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_emit_ethernet(0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd602e5cea00a43c0020010000000000000000000000000002ff0200"/51], 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
socket$inet6(0xa, 0x80002, 0x0)

4m4.96465643s ago: executing program 3 (id=122):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)

4m2.100179329s ago: executing program 3 (id=123):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00')

4m1.219694925s ago: executing program 3 (id=124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000467000/0x3000)=nil, &(0x7f00009bd000/0x4000)=nil, &(0x7f0000461000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000949000/0x4000)=nil, &(0x7f00007d8000/0x2000)=nil, &(0x7f000020f000/0x4000)=nil, &(0x7f0000925000/0x4000)=nil, &(0x7f00002d6000/0x4000)=nil, 0x0, 0x0, r3}, 0x68)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000010, 0x13, r4, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

3m58.265852134s ago: executing program 3 (id=125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a30000000000900020073797a2600"], 0x2c}}, 0x0)

3m57.14194031s ago: executing program 3 (id=127):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)

3m54.977864997s ago: executing program 3 (id=130):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1494)
fcntl$setstatus(r3, 0x4, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r7, 0xffffffffffffffff, 0x0)

3m51.830004575s ago: executing program 34 (id=118):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffffffffffe, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYRES64=0x0, @ANYRES16=r3], 0x8)

3m49.885454659s ago: executing program 35 (id=32):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002d40), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3}})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_emit_ethernet(0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd602e5cea00a43c0020010000000000000000000000000002ff0200"/51], 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
socket$inet6(0xa, 0x80002, 0x0)

3m39.477640365s ago: executing program 36 (id=130):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockname$unix(r0, &(0x7f0000000d80), &(0x7f0000000200)=0x6e)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1494)
fcntl$setstatus(r3, 0x4, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x7, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2m24.805170056s ago: executing program 7 (id=254):
unshare(0x2040400)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0)

2m23.751257968s ago: executing program 7 (id=257):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
write$tun(r1, 0x0, 0x7c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x7600)
connect$inet6(r0, 0x0, 0x0)

2m20.389357182s ago: executing program 7 (id=262):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x858, 0x2, [@TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x810, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0xd, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x9, 0x80000001, 0x0, 0x5, 0x7, 0x1, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0xd, 0x4000000, 0x5, 0x8001, 0xc, 0x9, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x32, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x4, 0x298, 0x4, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x0, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0x5, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x81, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee3, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x6, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0x5, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x3, 0xa5, 0x80, 0x0, 0x5, 0x1fc, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x31, 0x5, 0x7f, 0xca5a, 0x4, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x1, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x9, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0x6, 0x303, 0xda, 0x1ff, 0x101, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x8001, 0x5, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1000001, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0x5, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x80000001, 0x7fffffff, 0x4, 0xd95, 0x2, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x81, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x7ff, 0x7, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0xfffffffc, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x3, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)

2m18.025720738s ago: executing program 7 (id=267):
unshare(0x2040400)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0)

2m16.703308102s ago: executing program 7 (id=272):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0))
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x3)
r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x6007, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0)

2m12.597026042s ago: executing program 7 (id=281):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='veth1_to_batadv\x00', 0x8, 0x9, 0xff9e})
landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)

1m57.124595418s ago: executing program 37 (id=281):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='veth1_to_batadv\x00', 0x8, 0x9, 0xff9e})
landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)

1m35.237025028s ago: executing program 4 (id=369):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800)
keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2)
add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9)
r2 = dup(r0)
unshare(0x2010000)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000100003040000000000000000000000005c29008007ed98ca4945e9bb613185507aaf605d220bfe14a6469b44433c2b08c48ba4aa090000446fd411cce71e1fea839ccc37a86a4346833590180419c36445ecf547d3d5b6e13095f1d480", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800600190088000000050001"], 0x44}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0)
listen(r4, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000000c0)={0x0, 0x40})

1m32.278006089s ago: executing program 4 (id=374):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1m30.033008213s ago: executing program 4 (id=380):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020)

1m28.051373329s ago: executing program 4 (id=386):
socket$kcm(0x2a, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0x2}, {0x7, 0x3}]}, 0x14, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)

1m26.786657403s ago: executing program 4 (id=387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x403, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20311}}, 0x20}, 0x1, 0xba01}, 0x810)

1m25.862738153s ago: executing program 4 (id=389):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
dup(r0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x8008af26, &(0x7f0000000680)={0x22f})
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

1m10.447015379s ago: executing program 38 (id=389):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
dup(r0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x8008af26, &(0x7f0000000680)={0x22f})
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

30.846048118s ago: executing program 6 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deeab526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75e03a41bed4ecfb8ce96e18dc422346f9696f4bb3226b0ca75d135ebd8cae46fb83b64c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b84674aa61ef55982a6ccb492175fc9e013e3953dd62e8147f724a0eb490588d63b569a57e3af3a479003ca29805a118ba317b1d", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5", 0xdd}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809", 0x31}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb", 0xf2}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b888", 0x4b}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678da2bbb2ecbf968e6be4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386890334ffff4a9f5f4f3005cd846ea1ed", 0xd4}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16", 0x32}], 0x3}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

29.840324629s ago: executing program 6 (id=497):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}}, 0x0)

29.000157025s ago: executing program 6 (id=499):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088ca"], 0xfdef)

26.482564516s ago: executing program 6 (id=501):
r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000010, 0x13, r0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

25.030847359s ago: executing program 6 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000005400128009000100626f6e6400000000440002800e001b0002000004000000000000000008000200a0"], 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x0)

24.229205225s ago: executing program 6 (id=511):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
syz_usb_connect$uac1(0x5, 0xf5, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0xc5, 0x20, 0xa5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x6}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0xa, 0x6, 0xa], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x6, 0x6, 0x6, 0x5, 0x7], 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "9e82"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xaede, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x4, 0xd8, 0x9, 0x8, 0xc0}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x400, 0x1e, "19c1df86d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc7, 0x3, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3c7, 0x81, 0xfd, 0x10, {0x7, 0x25, 0x1, 0x2, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x100, 0x2, "59ecb08b2131"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x5, 0xd, "fd4c"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x49, '5'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x63, "1ab457180be29e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x40, 0x57, {0x7, 0x25, 0x1, 0x0, 0xda, 0x5b}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0xff, 0x9, 0x10, 0x4}, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}})
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040))
rename(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00')
ioctl$KVM_RUN(r6, 0xae80, 0x0)
fchdir(r3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

10.025382646s ago: executing program 1 (id=552):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a40)=""/4100, 0x1004}], 0x1}, 0x8}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

9.238407758s ago: executing program 9 (id=555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfbd, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0x3, 0xd0}]}}, "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"}}, 0xfcb)

8.464998337s ago: executing program 39 (id=511):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
syz_usb_connect$uac1(0x5, 0xf5, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0xc5, 0x20, 0xa5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x6}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0xa, 0x6, 0xa], 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x2, 0x5, [0x6, 0x6, 0x6, 0x5, 0x7], 0x5}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x1, "9e82"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xaede, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x4, 0xd8, 0x9, 0x8, 0xc0}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x400, 0x1e, "19c1df86d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc7, 0x3, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3c7, 0x81, 0xfd, 0x10, {0x7, 0x25, 0x1, 0x2, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x100, 0x2, "59ecb08b2131"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x5, 0xd, "fd4c"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x49, '5'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x63, "1ab457180be29e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x40, 0x57, {0x7, 0x25, 0x1, 0x0, 0xda, 0x5b}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x8, 0xff, 0x9, 0x10, 0x4}, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}})
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040))
rename(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00')
ioctl$KVM_RUN(r6, 0xae80, 0x0)
fchdir(r3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

8.383660676s ago: executing program 2 (id=557):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x2000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b45522027434427203030303030303030303030303030303030aaf28838852feadd54414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

8.360791945s ago: executing program 1 (id=558):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000340)=0x6)

8.187729698s ago: executing program 9 (id=559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="ebff01"])
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.619949754s ago: executing program 2 (id=561):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc001, 0x4)

6.859032065s ago: executing program 1 (id=562):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
dup(r1)
open(&(0x7f00000000c0)='./file0\x00', 0x80440, 0x120)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009e173610ef171e7b06de0102030109021200000000000904000000020600003c3ffbb3396897ca10a8bf5bd299455026b1b156d74d526735f6cab7657f5d4d096e"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
listen(r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

6.598321887s ago: executing program 9 (id=563):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="c1cc4a177d7103161a6bac4b8f820b0d9101b381484a108917a20a4047e2f912424cbc887f940f74b9fa34eb7e901d466de3e908588c09ed02ad82b03462d8a2")
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c34000000000000000000000000000000009d9400", [0x4, 0x40000000000000]}})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000480)={r2, 0x400, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x1000cf]}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
capget(&(0x7f00000014c0)={0x20080522}, &(0x7f0000001500)={0x9, 0x4, 0x2, 0x2, 0x4, 0xe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)=0x63)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x400d0}, 0x24040000)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000140)}], 0x2)
r8 = socket(0x1e, 0x6, 0x81)
dup3(r0, r8, 0x80000)

6.570867639s ago: executing program 2 (id=564):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'})
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)

6.567252825s ago: executing program 8 (id=565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

5.554628642s ago: executing program 8 (id=566):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="451f1c8854978fbd1de2e6d2c3b63be5802aac5ed4ec7621aea6633515d234fe03d1f02429da339070428fada33461ba3501c54f6c290de012a9a51c254255ccdf997f4c69ea8942335fb7b950da9e83"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0})

5.548763628s ago: executing program 9 (id=567):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a40)=""/4100, 0x1004}], 0x1}, 0x8}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

4.992576372s ago: executing program 2 (id=568):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfbd, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0x3, 0xd0}]}}, "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"}}, 0xfcb)

4.454076057s ago: executing program 8 (id=569):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x1d, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0)

4.017791173s ago: executing program 9 (id=570):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x4c, 0x4d, 0x70, 0x20, 0x41e, 0x3f19, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0xbd, 0xb, 0x0, 0xff, 0xb2, 0x3b, 0x2}}]}}]}}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES32=r0], 0x20)

3.346800472s ago: executing program 8 (id=571):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000340)=0x6)

3.189899166s ago: executing program 2 (id=572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="ebff01"])
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.269585111s ago: executing program 1 (id=573):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

1.70672655s ago: executing program 9 (id=574):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120003000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x7, &(0x7f0000000040)={0x20, "ef9a26c95b778cd5e2fa5d10e7f963e7f59c529b6c0913a66109d77ae0e5b657b1"}})

1.467951556s ago: executing program 1 (id=575):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1.251819144s ago: executing program 8 (id=576):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000780)="c1cc4a177d7103161a6bac4b8f820b0d9101b381484a108917a20a4047e2f912424cbc887f940f74b9fa34eb7e901d466de3e908588c09ed02ad82b03462d8a2")
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859891d875397bab22d0000b420a9c81f40f45f819e01177d3d458dac00000000000000000000003b00", "90be8b1c5512406c34000000000000000000000000000000009d9400", [0x4, 0x40000000000000]}})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000480)={r2, 0x400, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x1000cf]}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
capget(&(0x7f00000014c0)={0x20080522}, &(0x7f0000001500)={0x9, 0x4, 0x2, 0x2, 0x4, 0xe})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)=0x63)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x400d0}, 0x24040000)
writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000140)}], 0x2)
r8 = socket(0x1e, 0x6, 0x81)
dup3(r0, r8, 0x80000)

906.234435ms ago: executing program 2 (id=577):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'})
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)

531.47719ms ago: executing program 1 (id=578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="451f1c8854978fbd1de2e6d2c3b63be5802aac5ed4ec7621aea6633515d234fe03d1f02429da339070428fada33461ba3501c54f6c290de012a9a51c254255ccdf997f4c69ea8942335fb7b950da9e83"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0})

0s ago: executing program 8 (id=579):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a40)=""/4100, 0x1004}], 0x1}, 0x8}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

sim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.628109][ T4002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.915838][ T4002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.791663][ T4002] bridge_slave_1: left allmulticast mode
[  309.797609][ T4002] bridge_slave_1: left promiscuous mode
[  309.805243][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.822485][ T5800] Bluetooth: hci5: command tx timeout
[  309.960257][ T4002] bridge_slave_0: left allmulticast mode
[  309.966417][ T4002] bridge_slave_0: left promiscuous mode
[  309.973379][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.837158][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.944143][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.997119][ T4002] bond0 (unregistering): Released all slaves
[  314.247880][ T6142] netlink: 'syz.3.52': attribute type 30 has an invalid length.
[  314.263607][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.271416][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.278998][ T6086] bridge_slave_0: entered allmulticast mode
[  314.289547][ T6086] bridge_slave_0: entered promiscuous mode
[  314.456837][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.464722][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.472435][ T6086] bridge_slave_1: entered allmulticast mode
[  314.484435][ T6086] bridge_slave_1: entered promiscuous mode
[  314.758315][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.939042][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.485034][ T4002] hsr_slave_0: left promiscuous mode
[  315.508488][ T4002] hsr_slave_1: left promiscuous mode
[  315.516559][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.524982][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.634021][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.641959][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.810599][ T4002] veth1_macvtap: left promiscuous mode
[  315.816421][ T4002] veth0_macvtap: left promiscuous mode
[  315.822653][ T4002] veth1_vlan: left promiscuous mode
[  315.828401][ T4002] veth0_vlan: left promiscuous mode
[  315.871087][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  316.393184][    T9] usb 4-1: Using ep0 maxpacket: 8
[  316.469184][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  316.479257][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.487808][    T9] usb 4-1: Product: syz
[  316.492379][    T9] usb 4-1: Manufacturer: syz
[  316.497248][    T9] usb 4-1: SerialNumber: syz
[  316.532295][    T9] usb 4-1: config 0 descriptor??
[  316.846669][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  316.907753][ T4002] team0 (unregistering): Port device team_slave_1 removed
[  317.021820][ T4002] team0 (unregistering): Port device team_slave_0 removed
[  317.483418][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  317.799652][ T6086] team0: Port device team_slave_0 added
[  317.974006][ T6086] team0: Port device team_slave_1 added
[  318.517416][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.524795][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.551465][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.719668][   T45] usb 4-1: USB disconnect, device number 3
[  318.789664][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.797818][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.829621][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.168683][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.190776][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.201941][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.223533][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.243243][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.501981][ T6086] hsr_slave_0: entered promiscuous mode
[  319.513392][ T6086] hsr_slave_1: entered promiscuous mode
[  319.522629][ T6086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.530577][ T6086] Cannot create hsr debugfs directory
[  319.811367][ T6193] netlink: 'syz.3.63': attribute type 1 has an invalid length.
[  319.857970][ T6193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.63'.
[  321.040473][ T6194] veth0_macvtap: entered allmulticast mode
[  321.450330][ T5811] Bluetooth: hci0: command tx timeout
[  323.513319][ T5811] Bluetooth: hci0: command tx timeout
[  324.358716][ T6188] chnl_net:caif_netlink_parms(): no params data found
[  325.526029][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  325.561676][ T6086] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  325.570625][ T5811] Bluetooth: hci0: command tx timeout
[  325.724876][    T9] usb 1-1: Using ep0 maxpacket: 8
[  325.744001][ T6086] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  325.806924][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  325.817151][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.826385][    T9] usb 1-1: Product: syz
[  325.831056][    T9] usb 1-1: Manufacturer: syz
[  325.835924][    T9] usb 1-1: SerialNumber: syz
[  325.902904][ T6086] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  325.944275][    T9] usb 1-1: config 0 descriptor??
[  326.015895][ T3685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.109781][ T6086] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  326.206205][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  326.372432][ T3685] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.442416][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  326.755442][ T3685] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.135160][ T3685] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.174099][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.174570][ T6248] netlink: 'syz.3.75': attribute type 1 has an invalid length.
[  327.184403][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.198757][ T6188] bridge_slave_0: entered allmulticast mode
[  327.208715][ T6188] bridge_slave_0: entered promiscuous mode
[  327.314984][ T6248] 8021q: adding VLAN 0 to HW filter on device bond1
[  327.400359][ T6252] bond1: (slave gretap1): making interface the new active one
[  327.427483][ T6252] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  327.476588][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.484520][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.496489][ T6188] bridge_slave_1: entered allmulticast mode
[  327.506764][ T6188] bridge_slave_1: entered promiscuous mode
[  327.661707][ T5811] Bluetooth: hci0: command tx timeout
[  328.084569][ T3685] bridge_slave_1: left promiscuous mode
[  328.091851][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.167300][ T3685] bridge_slave_0: left allmulticast mode
[  328.173478][ T3685] bridge_slave_0: left promiscuous mode
[  328.180426][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.541424][ T5848] usb 1-1: USB disconnect, device number 3
[  328.849184][ T3685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.873207][ T3685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.922528][ T3685] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  328.972851][ T3685] batadv0: left allmulticast mode
[  328.979234][ T3685] batadv0: left promiscuous mode
[  329.032182][ T3685] bond0 (unregistering): Released all slaves
[  329.171362][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.360416][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.434023][ T3685] tipc: Left network mode
[  330.379368][ T6188] team0: Port device team_slave_0 added
[  330.604349][ T6188] team0: Port device team_slave_1 added
[  330.672530][ T6283] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[  330.683170][ T3685] hsr_slave_0: left promiscuous mode
[  330.708688][ T3685] hsr_slave_1: left promiscuous mode
[  330.717143][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.724973][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.848683][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.856604][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.916056][ T3685] veth1_macvtap: left promiscuous mode
[  330.922095][ T3685] veth0_macvtap: left promiscuous mode
[  330.928003][ T3685] veth1_vlan: left promiscuous mode
[  330.933717][ T3685] veth0_vlan: left promiscuous mode
[  331.241924][ T6279] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  331.254959][ T6279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  331.389927][    C1] hrtimer: interrupt took 295064 ns
[  332.355324][ T3685] team0 (unregistering): Port device team_slave_1 removed
[  332.462512][ T3685] team0 (unregistering): Port device team_slave_0 removed
[  332.941533][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  333.200453][ T5848] usb 4-1: Using ep0 maxpacket: 8
[  333.224474][ T5848] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  333.235016][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.243493][ T5848] usb 4-1: Product: syz
[  333.247932][ T5848] usb 4-1: Manufacturer: syz
[  333.253617][ T5848] usb 4-1: SerialNumber: syz
[  333.343496][ T5848] usb 4-1: config 0 descriptor??
[  333.377844][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.388960][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.396788][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.423569][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.625894][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.634625][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.661494][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.750661][ T5848] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  333.912800][ T6086] 8021q: adding VLAN 0 to HW filter on device team0
[  333.938167][ T5848] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  334.019658][ T6188] hsr_slave_0: entered promiscuous mode
[  334.030779][ T6188] hsr_slave_1: entered promiscuous mode
[  334.040073][ T6188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  334.047904][ T6188] Cannot create hsr debugfs directory
[  334.088126][ T1843] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.095910][ T1843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.212613][ T1843] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.220352][ T1843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.888408][ T5848] usb 4-1: USB disconnect, device number 4
[  336.169486][ T6188] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  336.417557][ T6188] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  336.582097][ T6188] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  336.874185][ T6188] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  337.622237][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.690399][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.885151][ T6188] 8021q: adding VLAN 0 to HW filter on device team0
[  338.927543][ T6350] warning: `syz.4.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  338.993400][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.001039][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.081932][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.089559][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.151890][   T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  341.352388][   T45] usb 4-1: Using ep0 maxpacket: 8
[  341.381201][ T6086] veth0_vlan: entered promiscuous mode
[  341.423626][   T45] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  341.433215][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.442446][   T45] usb 4-1: Product: syz
[  341.446871][   T45] usb 4-1: Manufacturer: syz
[  341.455539][   T45] usb 4-1: SerialNumber: syz
[  341.561803][ T6086] veth1_vlan: entered promiscuous mode
[  341.658107][   T45] usb 4-1: config 0 descriptor??
[  341.941690][   T45] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  342.089109][ T6086] veth0_macvtap: entered promiscuous mode
[  342.156333][   T45] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  342.218623][ T6086] veth1_macvtap: entered promiscuous mode
[  342.456295][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.504067][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.102957][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.360609][ T6086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.370014][ T6086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.379115][ T6086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.388371][ T6086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.824908][   T11] usb 4-1: USB disconnect, device number 5
[  346.496759][ T6391] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.107'.
[  346.941724][ T6396] pim6reg: entered allmulticast mode
[  346.985498][ T6395] pim6reg: left allmulticast mode
[  348.675147][ T6188] veth0_vlan: entered promiscuous mode
[  348.825103][ T6188] veth1_vlan: entered promiscuous mode
[  349.303319][ T6188] veth0_macvtap: entered promiscuous mode
[  349.415983][ T6188] veth1_macvtap: entered promiscuous mode
[  349.665613][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.798587][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.941353][ T6188] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.954034][ T6188] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.964326][ T6188] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.973650][ T6188] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.887796][ T6425] fuse: Bad value for 'fd'
[  352.473193][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  352.480210][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  353.290454][   T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  353.562843][   T11] usb 1-1: Using ep0 maxpacket: 8
[  353.691511][   T11] usb 1-1: config 11 has an invalid interface number: 95 but max is 0
[  353.700292][   T11] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  353.711074][   T11] usb 1-1: config 11 has no interface number 0
[  353.717538][   T11] usb 1-1: config 11 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  353.731204][   T11] usb 1-1: config 11 interface 95 has no altsetting 0
[  354.038318][   T11] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  354.050542][   T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.058837][   T11] usb 1-1: Product: syz
[  354.064873][   T11] usb 1-1: Manufacturer: syz
[  354.069751][   T11] usb 1-1: SerialNumber: syz
[  354.723680][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[  354.826401][ T6439] team_slave_0: entered promiscuous mode
[  354.832619][ T6439] team_slave_1: entered promiscuous mode
[  354.838989][ T6439] macvtap1: entered promiscuous mode
[  354.844760][ T6439] team0: entered promiscuous mode
[  354.855907][ T6439] macvtap1: entered allmulticast mode
[  354.865077][ T6439] team0: entered allmulticast mode
[  354.871709][ T6439] team_slave_0: entered allmulticast mode
[  354.877741][ T6439] team_slave_1: entered allmulticast mode
[  354.889638][ T6439] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  355.197509][ T6445] team0: left allmulticast mode
[  355.202990][ T6445] team_slave_0: left allmulticast mode
[  355.208737][ T6445] team_slave_1: left allmulticast mode
[  355.214840][ T6445] team0: left promiscuous mode
[  355.223262][ T6445] team_slave_0: left promiscuous mode
[  355.228962][ T6445] team_slave_1: left promiscuous mode
[  355.702855][   T11] usb 1-1: USB disconnect, device number 4
[  356.291197][ T6462] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.117'.
[  357.482454][   T30] audit: type=1326 audit(1747366806.365:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.4.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f946bf8e969 code=0x0
[  358.102558][ T4501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.111687][ T4501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.278023][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.286450][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.580163][ T6497] veth1_macvtap: left promiscuous mode
[  359.585931][ T6497] macsec0: entered promiscuous mode
[  360.240303][   T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  360.449632][   T11] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  360.462300][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  360.473771][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  360.483973][   T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  360.499741][   T11] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  360.510089][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.680421][   T11] usb 4-1: config 0 descriptor??
[  361.216340][   T11] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  361.321078][   T11] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  361.430725][ T5877] usb 4-1: USB disconnect, device number 6
[  362.530991][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.539111][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.875592][ T6513] fuse: Bad value for 'fd'
[  362.894490][ T6507] fido_id[6507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  362.960674][ T1843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.968962][ T1843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.865869][ T6537] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.128'.
[  369.203582][ T6540] Zero length message leads to an empty skb
[  370.240519][   T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  370.370938][   T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  370.460131][   T45] usb 7-1: Using ep0 maxpacket: 32
[  370.521943][   T45] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  370.535691][   T45] usb 7-1: config 0 has no interface number 0
[  370.543244][   T45] usb 7-1: config 0 interface 12 has no altsetting 0
[  370.681091][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  370.684695][   T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  370.701368][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  370.712700][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  370.723078][   T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  370.740957][   T11] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  370.751760][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.003216][   T45] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  371.013378][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.021910][   T45] usb 7-1: Product: syz
[  371.021985][   T11] usb 5-1: config 0 descriptor??
[  371.026233][   T45] usb 7-1: Manufacturer: syz
[  371.036282][   T45] usb 7-1: SerialNumber: syz
[  371.204465][ T5856] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  371.215247][ T5856] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  371.226692][ T5856] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.240132][ T5856] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  371.253934][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.614062][   T45] usb 7-1: config 0 descriptor??
[  371.641243][   T11] usbhid 5-1:0.0: can't add hid device: -71
[  371.648007][   T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  371.759645][ T5856] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  371.775817][ T5856] usb 4-1: invalid MIDI out EP 0
[  371.945623][   T11] usb 5-1: USB disconnect, device number 3
[  372.755374][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  372.892189][ T5856] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  372.943054][   T45] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  372.953788][   T45] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  372.962830][   T45] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  372.971139][   T45] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  373.014834][   T45] usb 7-1: USB disconnect, device number 2
[  375.663693][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.674000][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.693207][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.716065][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  375.734393][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.395677][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.412344][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.437602][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.531064][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.554679][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.841267][ T5811] Bluetooth: hci2: command tx timeout
[  378.230556][ T6568] chnl_net:caif_netlink_parms(): no params data found
[  379.650487][ T5797] Bluetooth: hci6: command tx timeout
[  379.891782][ T5797] Bluetooth: hci2: command tx timeout
[  380.130407][ T5811] Bluetooth: hci1: command 0x0406 tx timeout
[  380.136745][ T5811] Bluetooth: hci3: command 0x0406 tx timeout
[  380.144727][ T5797] Bluetooth: hci4: command 0x0406 tx timeout
[  380.366295][ T6577] chnl_net:caif_netlink_parms(): no params data found
[  381.316112][ T4002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.492901][    T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  381.741034][ T5807] Bluetooth: hci6: command tx timeout
[  381.756011][ T4002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.802190][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.809612][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.817654][ T6568] bridge_slave_0: entered allmulticast mode
[  381.826340][ T6568] bridge_slave_0: entered promiscuous mode
[  381.862724][    T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.874366][    T9] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.884668][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  381.891708][    T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  381.905543][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.971187][ T5807] Bluetooth: hci2: command tx timeout
[  381.986118][ T4002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.072733][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.080611][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.088445][ T6568] bridge_slave_1: entered allmulticast mode
[  382.098242][ T6568] bridge_slave_1: entered promiscuous mode
[  382.185843][ T4002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.326532][    T9] usb 7-1: config 0 descriptor??
[  382.880877][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  382.887342][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  382.991516][    T9] usb 7-1: USB disconnect, device number 3
[  383.041920][ T6568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.655490][ T6568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.810504][ T5807] Bluetooth: hci6: command tx timeout
[  383.950164][ T4002] bridge_slave_1: left allmulticast mode
[  383.956122][ T4002] bridge_slave_1: left promiscuous mode
[  383.964234][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.041348][ T4002] bridge_slave_0: left allmulticast mode
[  384.052242][ T5807] Bluetooth: hci2: command tx timeout
[  384.053801][ T4002] bridge_slave_0: left promiscuous mode
[  384.064410][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.102292][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  385.283443][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.326921][ T4002] bond0 (unregistering): Released all slaves
[  385.870474][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.878350][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.886403][ T6577] bridge_slave_0: entered allmulticast mode
[  385.901044][ T5807] Bluetooth: hci6: command tx timeout
[  385.904231][ T6577] bridge_slave_0: entered promiscuous mode
[  385.938577][ T6568] team0: Port device team_slave_0 added
[  386.146604][ T6568] team0: Port device team_slave_1 added
[  386.174375][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.182243][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.190575][ T6577] bridge_slave_1: entered allmulticast mode
[  386.204863][ T6577] bridge_slave_1: entered promiscuous mode
[  386.531570][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.564587][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.581341][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.649621][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.660751][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  387.112138][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.340313][ T4002] hsr_slave_0: left promiscuous mode
[  387.370904][ T4002] hsr_slave_1: left promiscuous mode
[  387.379088][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.387011][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.453160][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.461103][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.505288][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  387.545340][ T4002] veth1_macvtap: left promiscuous mode
[  387.551609][ T4002] veth0_macvtap: left promiscuous mode
[  387.557390][ T4002] veth1_vlan: left promiscuous mode
[  387.563145][ T4002] veth0_vlan: left promiscuous mode
[  388.158328][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  388.170431][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  388.181887][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  388.192058][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  388.205510][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  388.223501][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.370216][   T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  388.561771][   T11] usb 5-1: Using ep0 maxpacket: 32
[  388.582975][   T11] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  388.591895][   T11] usb 5-1: config 0 has no interface number 0
[  388.598479][   T11] usb 5-1: config 0 interface 12 has no altsetting 0
[  388.613985][ T4002] team0 (unregistering): Port device team_slave_1 removed
[  388.642890][ T4002] team0 (unregistering): Port device team_slave_0 removed
[  388.672189][    T9] usb 7-1: config 0 descriptor??
[  388.815128][ T5807] Bluetooth: hci1: command tx timeout
[  388.973859][   T11] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  388.983709][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.992366][   T11] usb 5-1: Product: syz
[  388.996986][   T11] usb 5-1: Manufacturer: syz
[  389.002249][   T11] usb 5-1: SerialNumber: syz
[  389.082760][   T11] usb 5-1: config 0 descriptor??
[  389.357211][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.364749][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.394419][ T6568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.441372][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.465404][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.476969][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.501984][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  389.507506][ T6568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.510443][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  389.831365][    T9] usb 7-1: USB disconnect, device number 4
[  390.106339][   T11] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  390.114388][   T11] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  390.122001][   T11] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  390.133485][   T11] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  390.240810][ T6577] team0: Port device team_slave_0 added
[  390.333621][   T11] usb 5-1: USB disconnect, device number 4
[  390.367942][ T6577] team0: Port device team_slave_1 added
[  390.851926][ T5807] Bluetooth: hci1: command tx timeout
[  390.981552][ T4002] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.103859][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.115471][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.143069][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.218714][ T6568] hsr_slave_0: entered promiscuous mode
[  391.231011][ T6568] hsr_slave_1: entered promiscuous mode
[  391.250902][   T30] audit: type=1326 audit(1747366840.085:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.6.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc54c18e969 code=0x0
[  391.375246][ T4002] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.582366][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.589591][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.616282][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.743269][ T4002] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.013748][ T4002] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.054177][ T6630] evm: overlay not supported
[  393.130421][ T5807] Bluetooth: hci1: command tx timeout
[  393.804404][ T6577] hsr_slave_0: entered promiscuous mode
[  393.815205][ T6577] hsr_slave_1: entered promiscuous mode
[  393.823410][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.831295][ T6577] Cannot create hsr debugfs directory
[  394.630911][   T11] usb 4-1: USB disconnect, device number 7
[  394.872911][ T6611] chnl_net:caif_netlink_parms(): no params data found
[  394.943266][ T4002] bridge_slave_1: left allmulticast mode
[  394.949208][ T4002] bridge_slave_1: left promiscuous mode
[  394.958240][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.011084][ T4002] bridge_slave_0: left allmulticast mode
[  395.017035][ T4002] bridge_slave_0: left promiscuous mode
[  395.024508][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.170436][ T5807] Bluetooth: hci1: command tx timeout
[  396.058733][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.139403][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.172761][ T4002] bond0 (unregistering): Released all slaves
[  397.199482][   T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  397.544106][   T11] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  397.556141][   T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  397.570415][   T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  397.581676][   T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  397.595210][   T11] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  397.604841][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.628626][   T11] usb 7-1: config 0 descriptor??
[  397.664176][ T4002] hsr_slave_0: left promiscuous mode
[  397.678392][ T4002] hsr_slave_1: left promiscuous mode
[  397.689518][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.697671][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.714191][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.725086][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.791485][ T4002] veth0_macvtap: left promiscuous mode
[  397.797782][ T4002] veth1_vlan: left promiscuous mode
[  397.805140][ T4002] veth0_vlan: left promiscuous mode
[  398.205070][   T11] usbhid 7-1:0.0: can't add hid device: -71
[  398.214737][   T11] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  398.278195][   T11] usb 7-1: USB disconnect, device number 5
[  398.747176][ T4002] team0 (unregistering): Port device team_slave_1 removed
[  398.840165][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  398.854897][ T4002] team0 (unregistering): Port device team_slave_0 removed
[  399.030129][    T9] usb 5-1: Using ep0 maxpacket: 32
[  399.048988][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  399.057992][    T9] usb 5-1: config 0 has no interface number 0
[  399.064594][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  399.143871][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  399.153669][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.162284][    T9] usb 5-1: Product: syz
[  399.166723][    T9] usb 5-1: Manufacturer: syz
[  399.172081][    T9] usb 5-1: SerialNumber: syz
[  399.270251][ T6568] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  399.334170][ T6568] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  399.346646][    T9] usb 5-1: config 0 descriptor??
[  399.673619][ T6568] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  399.829238][ T6568] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  400.380558][    T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  400.388693][    T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  400.396519][    T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  400.405250][    T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  400.602139][    T9] usb 5-1: USB disconnect, device number 5
[  400.827430][ T6577] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  400.890565][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.898196][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.906419][ T6611] bridge_slave_0: entered allmulticast mode
[  400.916381][ T6611] bridge_slave_0: entered promiscuous mode
[  401.001338][ T6577] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  401.083812][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.091745][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.099555][ T6611] bridge_slave_1: entered allmulticast mode
[  401.109592][ T6611] bridge_slave_1: entered promiscuous mode
[  401.121564][ T6577] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  401.240310][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.380614][ T6577] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  401.828757][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.914836][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.046182][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.144468][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.285514][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.848589][ T6611] team0: Port device team_slave_0 added
[  402.850461][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  403.095617][ T6611] team0: Port device team_slave_1 added
[  403.117067][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  403.133843][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  403.145402][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  403.155635][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  403.169091][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  403.178622][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.352527][    T9] usb 7-1: config 0 descriptor??
[  403.450137][   T60] bridge_slave_1: left allmulticast mode
[  403.456099][   T60] bridge_slave_1: left promiscuous mode
[  403.463252][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.540652][   T60] bridge_slave_0: left allmulticast mode
[  403.546726][   T60] bridge_slave_0: left promiscuous mode
[  403.554043][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.033304][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  404.040432][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  404.076660][    T9] usb 7-1: USB disconnect, device number 6
[  404.233778][   T60] bond1 (unregistering): (slave gretap1): Releasing active interface
[  405.212256][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.248326][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.273927][   T60] bond0 (unregistering): Released all slaves
[  405.298911][   T60] bond1 (unregistering): Released all slaves
[  405.705107][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.712486][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.740721][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.753920][ T6704] netlink: 'syz.6.164': attribute type 12 has an invalid length.
[  405.766696][ T6704] netlink: 'syz.6.164': attribute type 29 has an invalid length.
[  405.774972][ T6704] netlink: 148 bytes leftover after parsing attributes in process `syz.6.164'.
[  405.990201][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.997416][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.024658][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.119110][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.450703][   T60] hsr_slave_0: left promiscuous mode
[  406.462478][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  406.484961][   T60] hsr_slave_1: left promiscuous mode
[  406.493740][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.501902][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.532105][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.540185][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.577519][   T60] veth1_macvtap: left promiscuous mode
[  406.584323][   T60] veth1_vlan: left promiscuous mode
[  406.590142][   T60] veth0_vlan: left promiscuous mode
[  406.673308][    T9] usb 5-1: Using ep0 maxpacket: 32
[  406.709221][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  406.717985][    T9] usb 5-1: config 0 has no interface number 0
[  406.724764][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  406.788260][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  406.797867][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.806547][    T9] usb 5-1: Product: syz
[  406.811072][    T9] usb 5-1: Manufacturer: syz
[  406.815965][    T9] usb 5-1: SerialNumber: syz
[  406.971188][    T9] usb 5-1: config 0 descriptor??
[  407.582380][   T60] team0 (unregistering): Port device team_slave_1 removed
[  407.661164][   T60] team0 (unregistering): Port device team_slave_0 removed
[  407.960821][    T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  407.968761][    T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  407.978697][    T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  407.988051][    T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  408.170451][    T9] usb 5-1: USB disconnect, device number 6
[  408.384107][ T6568] 8021q: adding VLAN 0 to HW filter on device team0
[  408.426962][ T6611] hsr_slave_0: entered promiscuous mode
[  408.437623][ T6611] hsr_slave_1: entered promiscuous mode
[  408.446800][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  408.454813][ T6611] Cannot create hsr debugfs directory
[  408.566603][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.574369][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.881111][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.911761][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.919355][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.365510][ T6577] 8021q: adding VLAN 0 to HW filter on device team0
[  410.069332][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.076914][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.352545][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.360168][ T4047] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.245910][ T6611] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  411.362548][ T6611] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  411.512816][ T6611] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  411.562419][ T6723] loop4: detected capacity change from 0 to 7
[  411.643963][ T6723]  loop4: [POWERTEC] p1 p2 p3
[  411.650576][ T6723] loop4: p1 start 1600481121 is beyond EOD, truncated
[  411.654472][ T6611] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  411.657682][ T6723] loop4: p2 size 2147483648 extends beyond EOD, truncated
[  411.773546][ T6723] loop4: p3 start 1680801792 is beyond EOD, truncated
[  412.455866][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  413.419000][ T6568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.607717][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.891026][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  413.897770][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  413.965899][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.344182][ T6611] 8021q: adding VLAN 0 to HW filter on device team0
[  414.504458][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.511957][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.637937][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.645479][ T4047] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.655657][ T5877] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  414.950323][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  414.962990][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  414.976083][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  414.986660][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  415.000047][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  415.009339][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.346873][ T5877] usb 5-1: config 0 descriptor??
[  415.884680][ T5877] usbhid 5-1:0.0: can't add hid device: -71
[  415.894304][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  416.024398][ T5877] usb 5-1: USB disconnect, device number 7
[  417.718670][ T6568] veth0_vlan: entered promiscuous mode
[  417.803226][ T6577] veth0_vlan: entered promiscuous mode
[  417.915149][ T6568] veth1_vlan: entered promiscuous mode
[  417.989239][ T6577] veth1_vlan: entered promiscuous mode
[  418.064027][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.400799][ T6568] veth0_macvtap: entered promiscuous mode
[  418.577465][ T6568] veth1_macvtap: entered promiscuous mode
[  418.613630][ T6577] veth0_macvtap: entered promiscuous mode
[  418.717309][ T6577] veth1_macvtap: entered promiscuous mode
[  418.832793][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.000552][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.055268][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.162576][ T6568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.175413][ T6568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.180284][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  419.185324][ T6568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.201321][ T6568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.304524][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.454654][ T6577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.455005][    T9] usb 7-1: Using ep0 maxpacket: 32
[  419.465063][ T6577] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.481690][ T6577] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.492572][ T6577] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.573006][    T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  419.587922][    T9] usb 7-1: config 0 has no interface number 0
[  419.595432][    T9] usb 7-1: config 0 interface 12 has no altsetting 0
[  419.730389][    T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  419.740135][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.748427][    T9] usb 7-1: Product: syz
[  419.753185][    T9] usb 7-1: Manufacturer: syz
[  419.758059][    T9] usb 7-1: SerialNumber: syz
[  419.969545][    T9] usb 7-1: config 0 descriptor??
[  420.782484][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'.
[  421.470307][    T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  421.478248][    T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  421.488203][    T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  421.499125][    T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  421.643665][    T9] usb 7-1: USB disconnect, device number 7
[  422.667151][ T6611] veth0_vlan: entered promiscuous mode
[  422.822338][ T6611] veth1_vlan: entered promiscuous mode
[  423.110407][   T45] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  423.246446][ T6611] veth0_macvtap: entered promiscuous mode
[  423.351424][   T45] usb 7-1: Using ep0 maxpacket: 8
[  423.382369][ T6611] veth1_macvtap: entered promiscuous mode
[  423.495088][   T45] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  423.504661][   T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  423.514147][   T45] usb 7-1: Product: syz
[  423.518522][   T45] usb 7-1: Manufacturer: syz
[  423.524318][   T45] usb 7-1: SerialNumber: syz
[  423.682070][   T45] usb 7-1: config 0 descriptor??
[  423.747919][   T45] usbtest 7-1:0.0: FX2 device
[  423.754197][   T45] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  423.816546][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.936704][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.021418][ T5856] usb 7-1: USB disconnect, device number 8
[  424.135718][ T6611] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.146543][ T6611] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.156812][ T6611] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.166101][ T6611] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.442264][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.6.178'.
[  426.933421][ T6846] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  427.300528][   T45] hid-generic 0000:0003:0000.0002: item fetching failed at offset 0/2
[  427.365961][   T45] hid-generic 0000:0003:0000.0002: probe with driver hid-generic failed with error -22
[  429.882849][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.892943][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.230838][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.238970][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.568511][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.577206][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.960804][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.969033][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.544023][ T6882] fuse: Bad value for 'fd'
[  432.110664][   T11] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  433.977885][ T6898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.186'.
[  434.720100][   T11] usb 7-1: Using ep0 maxpacket: 32
[  434.732622][   T11] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  434.744715][   T11] usb 7-1: config 0 has no interface number 0
[  434.753158][   T11] usb 7-1: config 0 interface 12 has no altsetting 0
[  435.590655][   T11] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  435.608590][   T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.704110][   T11] usb 7-1: config 0 descriptor??
[  435.762597][   T11] usb 7-1: can't set config #0, error -71
[  435.816645][   T11] usb 7-1: USB disconnect, device number 9
[  436.100621][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  436.350327][    T9] usb 9-1: Using ep0 maxpacket: 8
[  436.379847][    T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  436.389381][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.397930][    T9] usb 9-1: Product: syz
[  436.402594][    T9] usb 9-1: Manufacturer: syz
[  436.407484][    T9] usb 9-1: SerialNumber: syz
[  436.486016][    T9] usb 9-1: config 0 descriptor??
[  436.665452][ T4002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.674043][ T4002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.827792][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.836816][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.913899][    T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  438.082996][ T6927] fuse: Bad value for 'fd'
[  438.189026][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.195'.
[  439.150579][    T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  439.246603][    T9] usb 9-1: USB disconnect, device number 2
[  439.350483][ T6922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.491575][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[  443.553298][ T6976] fuse: Invalid rootmode
[  444.452301][ T6981] capability: warning: `syz.4.211' uses deprecated v2 capabilities in a way that may be insecure
[  444.870224][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  445.131360][    T9] usb 10-1: Using ep0 maxpacket: 8
[  445.226329][    T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  445.236073][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.244725][    T9] usb 10-1: Product: syz
[  445.249269][    T9] usb 10-1: Manufacturer: syz
[  445.255009][    T9] usb 10-1: SerialNumber: syz
[  445.426662][    T9] usb 10-1: config 0 descriptor??
[  445.752180][    T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  447.180654][    T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  447.232737][ T7002] fuse: Bad value for 'fd'
[  447.264863][    T9] usb 10-1: USB disconnect, device number 2
[  447.588081][ T6995] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  447.597481][ T6995] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  447.642778][ T6995] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  447.651246][ T6995] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  447.675261][ T6995] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  447.682059][ T6995] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  447.698275][ T6995] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  447.722744][ T6995] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  447.729429][ T6995] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  447.802953][ T6995] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  447.832044][ T6995] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  447.838347][ T6995] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  447.883226][ T6995] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  448.840762][ T7013] loop6: detected capacity change from 0 to 63
[  448.919446][ T6026] Buffer I/O error on dev loop6, logical block 0, async page read
[  448.962500][ T7013] Buffer I/O error on dev loop6, logical block 0, async page read
[  448.977455][ T7013] Buffer I/O error on dev loop6, logical block 0, async page read
[  448.987830][ T7013] Buffer I/O error on dev loop6, logical block 0, async page read
[  448.996214][ T7013] Buffer I/O error on dev loop6, logical block 0, async page read
[  449.043568][ T6026] Buffer I/O error on dev loop6, logical block 0, async page read
[  449.094328][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  449.095493][ T6026] Buffer I/O error on dev loop6, logical block 0, async page read
[  449.194027][ T6026] Buffer I/O error on dev loop6, logical block 0, async page read
[  449.262444][ T6026] Buffer I/O error on dev loop6, logical block 0, async page read
[  449.544717][ T7018] raw_sendmsg: syz.7.222 forgot to set AF_INET. Fix it!
[  449.735166][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout
[  449.741852][ T5807] Bluetooth: hci0: command 0x0406 tx timeout
[  449.810247][ T5800] Bluetooth: hci6: command 0x0c1a tx timeout
[  449.910086][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout
[  451.179430][ T5800] Bluetooth: hci4: command 0x0406 tx timeout
[  451.811820][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout
[  451.811914][ T5807] Bluetooth: hci0: command 0x0406 tx timeout
[  451.880569][ T5856] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  451.890920][ T5807] Bluetooth: hci6: command 0x0c1a tx timeout
[  451.970379][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout
[  452.080569][ T5856] usb 7-1: Using ep0 maxpacket: 8
[  452.186126][ T5856] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  452.196314][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.204941][ T5856] usb 7-1: Product: syz
[  452.209440][ T5856] usb 7-1: Manufacturer: syz
[  452.215545][ T5856] usb 7-1: SerialNumber: syz
[  452.258716][ T5856] usb 7-1: config 0 descriptor??
[  452.490750][ T7050] binder: 7048:7050 ioctl c0306201 200000000480 returned -14
[  452.520303][ T5856] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  453.029567][ T7055] binder: 7054:7055 unknown command 1
[  453.035839][ T7055] binder: 7054:7055 ioctl c0306201 200000000c40 returned -22
[  453.891744][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout
[  453.904188][ T5856] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  453.933237][ T5856] usb 7-1: USB disconnect, device number 10
[  453.971095][ T5807] Bluetooth: hci6: command 0x0c1a tx timeout
[  454.050397][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout
[  454.691956][ T5856] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  455.850102][ T5856] usb 8-1: Using ep0 maxpacket: 32
[  455.863847][ T5856] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  455.873655][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.836189][ T5856] usb 8-1: config 0 descriptor??
[  457.095344][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  457.479619][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  457.503252][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  457.510896][ T5856] usb 8-1: media controller created
[  457.590812][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  458.191877][ T5856] az6027: usb out operation failed. (-71)
[  458.232962][ T5856] az6027: usb out operation failed. (-71)
[  458.239084][ T5856] stb0899_attach: Driver disabled by Kconfig
[  458.246363][ T5856] az6027: no front-end attached
[  458.246363][ T5856] 
[  458.400975][ T5856] az6027: usb out operation failed. (-71)
[  458.406996][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  458.418193][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8
[  458.638729][ T5856] dvb-usb: schedule remote query interval to 400 msecs.
[  458.646144][ T5856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  458.781607][ T5856] usb 8-1: USB disconnect, device number 2
[  459.544731][ T5856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  460.424366][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.253'.
[  460.537018][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.253'.
[  460.580184][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.253'.
[  463.030222][ T5848] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  464.232266][ T5848] usb 7-1: Using ep0 maxpacket: 32
[  464.263595][ T5848] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  464.273280][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.359493][ T5848] usb 7-1: config 0 descriptor??
[  464.727707][ T5848] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  464.866095][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  465.155970][ T5848] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  465.163684][ T5848] usb 7-1: media controller created
[  465.933671][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  465.942696][ T5856] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[  465.950644][ T5856] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[  465.958423][ T5856] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[  466.248295][ T5856] hid-generic 0000:0003:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  466.663253][ T5848] az6027: usb out operation failed. (-71)
[  466.737292][ T5848] az6027: usb out operation failed. (-71)
[  466.743448][ T5848] stb0899_attach: Driver disabled by Kconfig
[  466.749666][ T5848] az6027: no front-end attached
[  466.749666][ T5848] 
[  466.900911][ T5848] az6027: usb out operation failed. (-71)
[  466.907091][ T5848] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  466.918148][ T5848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9
[  467.178127][ T5848] dvb-usb: schedule remote query interval to 400 msecs.
[  467.185601][ T5848] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  467.282486][ T5848] usb 7-1: USB disconnect, device number 11
[  467.522404][ T7153] fido_id[7153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  468.204630][ T5848] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  468.574384][ T7170] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11)
[  468.581337][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  468.590109][ T7170] vhci_hcd vhci_hcd.0: Device attached
[  468.787305][ T7176] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13)
[  468.794234][ T7176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  468.804038][ T7176] vhci_hcd vhci_hcd.0: Device attached
[  468.857979][ T5848] vhci_hcd: vhci_device speed not set
[  468.921323][ T7170] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16)
[  468.928237][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  468.940894][ T7170] vhci_hcd vhci_hcd.0: Device attached
[  469.011340][ T5848] usb 47-1: new full-speed USB device number 2 using vhci_hcd
[  469.090500][ T7176] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15)
[  469.097447][ T7176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  469.106082][ T7176] vhci_hcd vhci_hcd.0: Device attached
[  469.215150][ T7170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  469.249439][ T7184] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  469.311939][ T7187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  469.361693][ T7170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  470.580990][ T7170] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(23)
[  470.587958][ T7170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  470.596443][ T7170] vhci_hcd vhci_hcd.0: Device attached
[  470.797244][ T7194] vhci_hcd: connection closed
[  470.833135][ T3778] vhci_hcd: stop threads
[  470.842787][ T3778] vhci_hcd: release socket
[  470.847517][ T3778] vhci_hcd: disconnect device
[  470.870891][ T7181] vhci_hcd: connection closed
[  470.888470][ T7179] vhci_hcd: connection closed
[  470.899445][ T7177] vhci_hcd: connection closed
[  470.906419][ T7173] vhci_hcd: connection reset by peer
[  471.011474][ T3778] vhci_hcd: stop threads
[  471.016000][ T3778] vhci_hcd: release socket
[  471.022284][ T3778] vhci_hcd: disconnect device
[  471.103245][ T3778] vhci_hcd: stop threads
[  471.107754][ T3778] vhci_hcd: release socket
[  471.112816][ T3778] vhci_hcd: disconnect device
[  471.223908][ T3778] vhci_hcd: stop threads
[  471.228551][ T3778] vhci_hcd: release socket
[  471.234665][ T3778] vhci_hcd: disconnect device
[  471.300470][ T3778] vhci_hcd: stop threads
[  471.304998][ T3778] vhci_hcd: release socket
[  471.311138][ T3778] vhci_hcd: disconnect device
[  471.452667][ T7206] team_slave_0: entered promiscuous mode
[  471.458801][ T7206] team_slave_1: entered promiscuous mode
[  471.465226][ T7206] vlan2: entered promiscuous mode
[  471.470788][ T7206] team0: entered promiscuous mode
[  471.761125][ T6730] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  471.814108][   T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  471.880092][ T5877] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  471.990981][ T6730] usb 5-1: device descriptor read/64, error -71
[  472.027233][   T24] usb 10-1: Using ep0 maxpacket: 32
[  472.071618][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  472.087853][   T24] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  472.097854][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.141603][ T5877] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  472.150452][ T5877] usb 7-1: config 0 has no interface number 0
[  472.157004][ T5877] usb 7-1: config 0 interface 12 has no altsetting 0
[  472.202222][   T24] usb 10-1: config 0 descriptor??
[  472.257550][ T5877] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  472.267500][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.276234][ T5877] usb 7-1: Product: syz
[  472.279260][ T6730] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  472.280789][ T5877] usb 7-1: Manufacturer: syz
[  472.280968][ T5877] usb 7-1: SerialNumber: syz
[  472.448274][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  472.468708][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  472.494769][ T6730] usb 5-1: device descriptor read/64, error -71
[  472.514036][ T5877] usb 7-1: config 0 descriptor??
[  472.630144][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  472.637767][   T24] usb 10-1: media controller created
[  472.651959][ T6730] usb usb5-port1: attempt power cycle
[  472.875211][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  473.094130][ T6730] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  473.186544][ T6730] usb 5-1: device descriptor read/8, error -71
[  473.462554][   T24] az6027: usb out operation failed. (-71)
[  473.471868][   T24] az6027: usb out operation failed. (-71)
[  473.478243][   T24] stb0899_attach: Driver disabled by Kconfig
[  473.484640][   T24] az6027: no front-end attached
[  473.484640][   T24] 
[  473.503893][   T24] az6027: usb out operation failed. (-71)
[  473.504139][ T6730] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  473.510230][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  473.532404][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input10
[  473.642909][ T6730] usb 5-1: device descriptor read/8, error -71
[  473.783015][ T6730] usb usb5-port1: unable to enumerate USB device
[  473.928444][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  473.936399][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  474.136378][   T24] usb 10-1: USB disconnect, device number 3
[  474.140418][ T5848] vhci_hcd: vhci_device speed not set
[  474.823648][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  474.909010][ T5877] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  474.918098][ T5877] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  474.925999][ T5877] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  474.935006][ T5877] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  475.306271][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  475.313399][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  475.366109][ T5877] usb 7-1: USB disconnect, device number 12
[  475.635118][ T5856] usb usb48-port1: attempt power cycle
[  476.346831][ T5856] usb usb48-port1: unable to enumerate USB device
[  476.456019][ T7245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  479.050949][ T5856] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  479.183425][ T5877] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  479.293973][ T5856] usb 5-1: Using ep0 maxpacket: 32
[  479.323626][ T5856] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  479.333986][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.430125][ T5877] usb 10-1: Using ep0 maxpacket: 8
[  479.441670][ T5856] usb 5-1: config 0 descriptor??
[  479.489718][ T5877] usb 10-1: config index 0 descriptor too short (expected 74, got 45)
[  479.498871][ T5877] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  479.510869][ T5877] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  479.521981][ T5877] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  479.533855][ T5877] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  479.544481][ T5877] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  479.558285][ T5877] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  479.567743][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.763609][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.8.294'.
[  479.811706][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  479.850112][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  479.906870][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  479.914848][ T5856] usb 5-1: media controller created
[  480.136424][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  480.171081][ T5877] usb 10-1: GET_CAPABILITIES returned 2f
[  480.177194][ T5877] usbtmc 10-1:16.0: can't read capabilities
[  480.367544][ T5877] usb 10-1: USB disconnect, device number 4
[  480.913060][ T5856] az6027: usb out operation failed. (-71)
[  480.977748][ T5856] az6027: usb out operation failed. (-71)
[  480.984185][ T5856] stb0899_attach: Driver disabled by Kconfig
[  480.990986][ T5856] az6027: no front-end attached
[  480.990986][ T5856] 
[  481.100792][ T5856] az6027: usb out operation failed. (-71)
[  481.107196][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  481.260181][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  481.458066][ T5856] dvb-usb: schedule remote query interval to 400 msecs.
[  481.465510][ T5856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  481.580722][ T5856] usb 5-1: USB disconnect, device number 12
[  482.404621][ T7288] binder: 7287:7288 unknown command 1
[  482.410684][ T7288] binder: 7287:7288 ioctl c0306201 200000000c40 returned -22
[  482.503899][ T5856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  484.933812][ T7307] =======================================================
[  484.933812][ T7307] WARNING: The mand mount option has been deprecated and
[  484.933812][ T7307]          and is ignored by this kernel. Remove the mand
[  484.933812][ T7307]          option from the mount to silence this warning.
[  484.933812][ T7307] =======================================================
[  485.673008][ T7307] orangefs_mount: mount request failed with -4
[  485.931821][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'.
[  486.452609][ T5856] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  486.720177][ T5856] usb 7-1: Using ep0 maxpacket: 32
[  486.750725][ T5856] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  486.764851][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.870189][ T5856] usb 7-1: config 0 descriptor??
[  487.187594][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  487.286661][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  487.412527][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  487.420367][ T5856] usb 7-1: media controller created
[  487.581987][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  488.206125][ T7333] binder: BINDER_SET_CONTEXT_MGR already set
[  488.213611][ T7333] binder: 7332:7333 ioctl 4018620d 200000000040 returned -16
[  488.298242][ T7335] binder: 7332:7335 unknown command 1
[  488.304389][ T7335] binder: 7332:7335 ioctl c0306201 200000000c40 returned -22
[  488.450557][ T5856] az6027: usb out operation failed. (-71)
[  488.526170][ T5856] az6027: usb out operation failed. (-71)
[  488.532677][ T5856] stb0899_attach: Driver disabled by Kconfig
[  488.538926][ T5856] az6027: no front-end attached
[  488.538926][ T5856] 
[  488.584375][ T5856] az6027: usb out operation failed. (-71)
[  488.590789][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  488.608397][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12
[  488.630244][ T5856] dvb-usb: schedule remote query interval to 400 msecs.
[  488.637479][ T5856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  488.652696][ T5856] usb 7-1: USB disconnect, device number 13
[  490.326823][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  490.342174][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  490.353719][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  490.367958][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  490.379995][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  490.734691][ T5856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  491.461701][   T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  491.691069][   T24] usb 5-1: Using ep0 maxpacket: 32
[  491.734127][   T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  491.743489][   T24] usb 5-1: config 0 has no interface number 0
[  491.750212][   T24] usb 5-1: config 0 interface 12 has no altsetting 0
[  491.794243][ T5848] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  491.902351][   T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  491.912247][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.920788][   T24] usb 5-1: Product: syz
[  491.925211][   T24] usb 5-1: Manufacturer: syz
[  491.930196][   T24] usb 5-1: SerialNumber: syz
[  492.016404][ T5848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  492.026751][ T5848] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  492.037124][ T5848] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 224
[  492.047661][ T5848] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  492.051723][   T24] usb 5-1: config 0 descriptor??
[  492.057195][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.325817][ T5848] usb 10-1: config 0 descriptor??
[  492.362855][ T7351] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  492.454763][ T5800] Bluetooth: hci3: command tx timeout
[  492.699696][ T5848] hdpvr 10-1:0.0: unexpected answer of status request, len 0
[  492.708629][ T5848] hdpvr 10-1:0.0: device init failed
[  492.716452][ T5848] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12
[  492.930610][   T24] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[  492.939454][   T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  492.947445][   T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  492.955853][   T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  493.089273][ T5856] usb 10-1: USB disconnect, device number 5
[  493.315939][   T24] usb 5-1: USB disconnect, device number 13
[  493.346382][ T7342] chnl_net:caif_netlink_parms(): no params data found
[  494.458204][ T3778] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.530274][ T5800] Bluetooth: hci3: command tx timeout
[  494.699368][ T3778] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.721672][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  494.943252][ T3778] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.990929][   T24] usb 5-1: Using ep0 maxpacket: 32
[  495.061543][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  495.071310][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.205001][   T24] usb 5-1: config 0 descriptor??
[  495.242721][ T3778] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.493313][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  495.533849][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  495.606449][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  495.615369][   T24] usb 5-1: media controller created
[  495.754447][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  496.130704][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.138540][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.147513][ T7342] bridge_slave_0: entered allmulticast mode
[  496.157915][ T7342] bridge_slave_0: entered promiscuous mode
[  496.265157][   T24] az6027: usb out operation failed. (-71)
[  496.341678][   T24] az6027: usb out operation failed. (-71)
[  496.347935][   T24] stb0899_attach: Driver disabled by Kconfig
[  496.354857][   T24] az6027: no front-end attached
[  496.354857][   T24] 
[  496.363555][ T3778] bridge_slave_1: left allmulticast mode
[  496.370131][ T3778] bridge_slave_1: left promiscuous mode
[  496.377161][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.451263][   T24] az6027: usb out operation failed. (-71)
[  496.457570][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  496.469140][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  496.490220][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.6.332'.
[  496.590871][ T3778] bridge_slave_0: left allmulticast mode
[  496.597009][ T3778] bridge_slave_0: left promiscuous mode
[  496.604262][ T3778] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.616129][ T5800] Bluetooth: hci3: command tx timeout
[  496.796460][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  496.805805][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  496.981219][   T24] usb 5-1: USB disconnect, device number 14
[  497.588290][ T7406] netlink: 'syz.8.335': attribute type 8 has an invalid length.
[  497.658222][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  498.186829][ T3778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.316852][ T3778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.368026][ T3778] bond0 (unregistering): Released all slaves
[  498.480426][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.490415][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.499305][ T7342] bridge_slave_1: entered allmulticast mode
[  498.513552][ T7342] bridge_slave_1: entered promiscuous mode
[  498.686049][ T7415] binder: 7412:7415 unknown command 1
[  498.692525][ T7415] binder: 7412:7415 ioctl c0306201 200000000c40 returned -22
[  498.700079][ T5800] Bluetooth: hci3: command tx timeout
[  499.364320][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.578173][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.705812][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.343'.
[  499.790542][ T3778] hsr_slave_0: left promiscuous mode
[  499.851063][ T3778] hsr_slave_1: left promiscuous mode
[  499.859367][ T3778] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.873258][ T3778] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.023659][ T3778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.031827][ T3778] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.202811][ T3778] veth1_macvtap: left promiscuous mode
[  500.208824][ T3778] veth0_macvtap: left promiscuous mode
[  500.216489][ T3778] veth1_vlan: left promiscuous mode
[  500.222662][ T3778] veth0_vlan: left promiscuous mode
[  500.493599][ T7430] loop6: detected capacity change from 0 to 7
[  500.562684][ T7430] Dev loop6: unable to read RDB block 7
[  500.568788][ T7430]  loop6: unable to read partition table
[  500.758086][ T7430] loop6: partition table beyond EOD, truncated
[  500.765679][ T7430] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  502.028586][ T3778] team0 (unregistering): Port device team_slave_1 removed
[  502.171926][ T3778] team0 (unregistering): Port device team_slave_0 removed
[  503.328698][ T7457] binder: 7455:7457 unknown command 1
[  503.334870][ T7457] binder: 7455:7457 ioctl c0306201 200000000c40 returned -22
[  503.421093][ T7436] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  503.459188][ T7342] team0: Port device team_slave_0 added
[  503.555892][ T7342] team0: Port device team_slave_1 added
[  504.037226][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.044708][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.074529][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.335366][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.342874][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.372853][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.627738][ T7342] hsr_slave_0: entered promiscuous mode
[  504.638686][ T7342] hsr_slave_1: entered promiscuous mode
[  504.847244][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'.
[  508.106043][ T7492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  508.432193][ T7342] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  508.609062][ T7342] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  508.813666][ T7342] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  508.995610][ T7342] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  509.173556][ T7503] binder: 7502:7503 ioctl 4018620d 0 returned -22
[  509.402698][ T7506] binder: 7502:7506 unknown command 0
[  509.408369][ T7506] binder: 7502:7506 ioctl c0306201 2000000003c0 returned -22
[  509.698485][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.368'.
[  510.032899][ T7511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.369'.
[  510.958978][ T7342] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.188543][ T7511] sctp: failed to load transform for md5: -2
[  511.203939][ T7342] 8021q: adding VLAN 0 to HW filter on device team0
[  511.322564][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.330666][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.509042][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.516761][ T4047] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.896551][ T7342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  511.907651][ T7342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  513.846532][ T7541] tipc: Started in network mode
[  513.852254][ T7541] tipc: Node identity 1e959bf32d45, cluster identity 4711
[  513.860739][ T7541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.930797][ T7542] syzkaller0: entered promiscuous mode
[  513.936859][ T7542] syzkaller0: entered allmulticast mode
[  514.058978][ T7541] tipc: Resetting bearer <eth:syzkaller0>
[  514.180724][ T7539] tipc: Resetting bearer <eth:syzkaller0>
[  514.240362][ T7539] tipc: Disabling bearer <eth:syzkaller0>
[  514.830496][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.224316][ T7553] binder: BINDER_SET_CONTEXT_MGR already set
[  515.230944][ T7553] binder: 7550:7553 ioctl 4018620d 200000000040 returned -16
[  515.340719][ T7342] veth0_vlan: entered promiscuous mode
[  515.456646][ T7342] veth1_vlan: entered promiscuous mode
[  515.941324][ T7342] veth0_macvtap: entered promiscuous mode
[  516.229903][ T7342] veth1_macvtap: entered promiscuous mode
[  516.697723][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.855328][ T7342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  517.027021][ T7342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.037442][ T7342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.046897][ T7342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.056378][ T7342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.436569][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'.
[  521.678478][ T7599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  521.741171][ T7601] syzkaller0: entered promiscuous mode
[  521.747073][ T7601] syzkaller0: entered allmulticast mode
[  521.882119][ T7599] tipc: Resetting bearer <eth:syzkaller0>
[  521.967229][ T7598] tipc: Resetting bearer <eth:syzkaller0>
[  522.058279][ T7598] tipc: Disabling bearer <eth:syzkaller0>
[  527.004988][ T7628] binder: BINDER_SET_CONTEXT_MGR already set
[  527.013481][ T7628] binder: 7625:7628 ioctl 4018620d 200000000040 returned -16
[  528.700800][ T1843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.709450][ T1843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.904775][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.913283][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.281954][ T7645] bridge1: entered promiscuous mode
[  530.287366][ T7645] bridge1: entered allmulticast mode
[  533.870525][ T7661] tipc: Started in network mode
[  533.875799][ T7661] tipc: Node identity 12304577dab, cluster identity 4711
[  533.884521][ T7661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.017050][ T7661] syzkaller0: entered promiscuous mode
[  534.023413][ T7661] syzkaller0: entered allmulticast mode
[  534.204161][ T7662] tipc: Resetting bearer <eth:syzkaller0>
[  534.291636][ T7657] tipc: Resetting bearer <eth:syzkaller0>
[  534.350185][ T7657] tipc: Disabling bearer <eth:syzkaller0>
[  534.673757][ T7668] binder: BINDER_SET_CONTEXT_MGR already set
[  534.685345][ T7668] binder: 7667:7668 ioctl 4018620d 200000000040 returned -16
[  534.765820][ T7671] binder: 7667:7671 unknown command 1
[  534.771767][ T7671] binder: 7667:7671 ioctl c0306201 200000000c40 returned -22
[  535.483455][ T7674] binder: BINDER_SET_CONTEXT_MGR already set
[  535.490276][ T7674] binder: 7672:7674 ioctl 4018620d 200000000040 returned -16
[  536.297897][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  536.312261][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  536.340786][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  536.434168][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  536.490530][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  536.731723][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  536.738532][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  539.001670][ T5800] Bluetooth: hci2: command tx timeout
[  540.743229][ T7689] chnl_net:caif_netlink_parms(): no params data found
[  541.013704][ T5800] Bluetooth: hci2: command tx timeout
[  541.372704][ T3685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.390542][ T7727] binder: BINDER_SET_CONTEXT_MGR already set
[  541.390610][ T7727] binder: 7725:7727 ioctl 4018620d 200000000040 returned -16
[  541.401462][ T7727] binder: 7725:7727 unknown command 1
[  541.401551][ T7727] binder: 7725:7727 ioctl c0306201 200000000c40 returned -22
[  541.428586][ T7724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.432964][ T7726] syzkaller0: entered promiscuous mode
[  541.433070][ T7726] syzkaller0: entered allmulticast mode
[  541.460047][ T7721] tipc: Resetting bearer <eth:syzkaller0>
[  541.496689][ T7721] tipc: Disabling bearer <eth:syzkaller0>
[  541.646276][ T7733] binder: 7732:7733 ioctl c0306201 0 returned -14
[  541.662956][ T3685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.831317][ T3685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.954624][ T7734] binder: 7732:7734 unknown command 0
[  541.954715][ T7734] binder: 7732:7734 ioctl c0306201 2000000003c0 returned -22
[  542.573872][ T3685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.140640][ T5800] Bluetooth: hci2: command tx timeout
[  544.521479][ T3685] bond0 (unregistering): Released all slaves
[  544.572846][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.8.424'.
[  544.718981][ T7750] bridge1: entered promiscuous mode
[  544.725169][ T7750] bridge1: entered allmulticast mode
[  544.768172][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.776012][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.784479][ T7689] bridge_slave_0: entered allmulticast mode
[  544.794480][ T7689] bridge_slave_0: entered promiscuous mode
[  544.839350][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.848513][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.856679][ T7689] bridge_slave_1: entered allmulticast mode
[  544.866677][ T7689] bridge_slave_1: entered promiscuous mode
[  545.179464][ T5800] Bluetooth: hci2: command tx timeout
[  545.682921][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  545.726099][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.962720][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.005542][   T24] usb 9-1: Using ep0 maxpacket: 16
[  546.085599][   T24] usb 9-1: config index 0 descriptor too short (expected 1828, got 36)
[  546.095666][   T24] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  546.105097][   T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  546.114383][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  546.124436][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  546.136561][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  546.381726][   T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  546.391250][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.399536][   T24] usb 9-1: Product: syz
[  546.404866][   T24] usb 9-1: Manufacturer: syz
[  546.409683][   T24] usb 9-1: SerialNumber: syz
[  546.430311][ T3685] hsr_slave_0: left promiscuous mode
[  546.485842][ T3685] hsr_slave_1: left promiscuous mode
[  546.515622][   T24] usb 9-1: config 0 descriptor??
[  546.545977][   T24] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[  546.554495][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[  546.566727][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[  546.577342][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[  546.585490][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[  546.593892][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[  546.601865][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[  546.610016][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[  546.630567][ T3685] veth1_macvtap: left promiscuous mode
[  546.636409][ T3685] veth0_macvtap: left promiscuous mode
[  546.643293][ T3685] veth1_vlan: left promiscuous mode
[  546.649138][ T3685] veth0_vlan: left promiscuous mode
[  546.752929][   T24] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  546.772781][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[  546.781562][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[  546.789940][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[  546.798102][   T24] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[  546.810695][   T24] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  548.390792][ T7689] team0: Port device team_slave_0 added
[  548.589185][    T9] usb 9-1: USB disconnect, device number 3
[  548.719174][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  548.746843][ T7785] tipc: Started in network mode
[  548.753366][ T7785] tipc: Node identity 5a43e78b5447, cluster identity 4711
[  548.763242][ T7785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  548.787692][ T7689] team0: Port device team_slave_1 added
[  548.798778][ T7788] syzkaller0: entered promiscuous mode
[  548.804899][ T7788] syzkaller0: entered allmulticast mode
[  548.833369][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  548.846521][    T9] keyspan 9-1:0.0: device disconnected
[  549.080966][ T7777] tipc: Resetting bearer <eth:syzkaller0>
[  549.176878][ T7777] tipc: Disabling bearer <eth:syzkaller0>
[  549.282445][ T7791] binder: 7789:7791 ioctl c0306201 0 returned -14
[  549.462108][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.469410][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.496303][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.634498][ T7794] binder: 7789:7794 unknown command 0
[  549.640883][ T7794] binder: 7789:7794 ioctl c0306201 2000000003c0 returned -22
[  549.677996][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.685466][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.712270][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.107121][ T7809] bridge1: entered promiscuous mode
[  551.112879][ T7809] bridge1: entered allmulticast mode
[  551.847133][ T7689] hsr_slave_0: entered promiscuous mode
[  551.857789][ T7689] hsr_slave_1: entered promiscuous mode
[  551.866985][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.875427][ T7689] Cannot create hsr debugfs directory
[  552.551095][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.9.442'.
[  553.171753][ T5856] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  553.453325][ T5856] usb 10-1: Using ep0 maxpacket: 16
[  553.576351][ T5856] usb 10-1: config index 0 descriptor too short (expected 1828, got 36)
[  553.585344][ T5856] usb 10-1: config 0 has an invalid interface number: 0 but max is -1
[  553.594231][ T5856] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0
[  553.603829][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  553.614075][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  553.628292][ T5856] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  554.377391][ T5856] usb 10-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  554.386934][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.395424][ T5856] usb 10-1: Product: syz
[  554.399950][ T5856] usb 10-1: Manufacturer: syz
[  554.404788][ T5856] usb 10-1: SerialNumber: syz
[  554.463029][ T7834] tipc: Started in network mode
[  554.468441][ T7834] tipc: Node identity 1a848b2534ce, cluster identity 4711
[  554.477581][ T7834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.533350][ T5856] usb 10-1: config 0 descriptor??
[  554.564571][ T5856] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected
[  554.572681][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87
[  554.581271][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7
[  554.593707][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81
[  554.602163][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1
[  554.610668][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2
[  554.618900][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85
[  554.627639][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5
[  554.761986][ T5856] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  554.778610][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83
[  554.789118][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4
[  554.799227][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86
[  554.809408][ T5856] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6
[  554.824510][ T5856] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  554.980186][ T7828] tipc: Disabling bearer <eth:syzkaller0>
[  555.960524][ T7689] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  556.022097][ T7689] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  556.119165][ T7689] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  556.208121][ T7689] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  556.265114][ T7842] binder: 7840:7842 ioctl c0306201 0 returned -14
[  556.338494][   T11] usb 10-1: USB disconnect, device number 6
[  556.371304][   T11] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  556.431027][ T7846] binder: 7840:7846 unknown command 0
[  556.436958][ T7846] binder: 7840:7846 ioctl c0306201 2000000003c0 returned -22
[  556.518199][   T11] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  556.533675][   T11] keyspan 10-1:0.0: device disconnected
[  557.590371][ T5856] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  557.801357][ T5856] usb 10-1: Using ep0 maxpacket: 32
[  557.882938][ T5856] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  557.893362][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.983387][ T5856] usb 10-1: config 0 descriptor??
[  558.297154][ T5856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  558.329347][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  558.358834][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.442967][ T5856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  558.451118][ T5856] usb 10-1: media controller created
[  558.543244][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  558.608550][ T7862] usb usb1: usbfs: process 7862 (syz.8.454) did not claim interface 0 before use
[  558.692638][ T7689] 8021q: adding VLAN 0 to HW filter on device team0
[  558.835846][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.843683][ T6729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.167393][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.175126][ T6729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.332196][ T7868] bond_slave_0: entered promiscuous mode
[  559.338411][ T7868] bond_slave_1: entered promiscuous mode
[  559.344964][ T7868] vlan2: entered promiscuous mode
[  559.350492][ T7868] bond0: entered promiscuous mode
[  560.552894][ T5856] az6027: usb out operation failed. (-71)
[  560.612241][ T5856] az6027: usb out operation failed. (-71)
[  560.618236][ T5856] stb0899_attach: Driver disabled by Kconfig
[  560.626369][ T5856] az6027: no front-end attached
[  560.626369][ T5856] 
[  560.735946][ T5856] az6027: usb out operation failed. (-71)
[  560.742457][ T5856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  560.753846][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input14
[  560.917331][ T5856] dvb-usb: schedule remote query interval to 400 msecs.
[  560.925756][ T5856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  561.022567][ T5856] usb 10-1: USB disconnect, device number 7
[  561.162759][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.8.459'.
[  561.846381][ T5856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  562.124942][   T11] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  562.268329][ T7893] binder_alloc: 7891: binder_alloc_buf, no vma
[  562.602346][   T11] usb 9-1: Using ep0 maxpacket: 16
[  562.653920][   T11] usb 9-1: config index 0 descriptor too short (expected 1828, got 36)
[  562.662633][   T11] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  562.671415][   T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  562.680641][   T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  562.690585][   T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  562.701781][   T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  562.863305][   T11] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  562.872986][   T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.882135][   T11] usb 9-1: Product: syz
[  562.886572][   T11] usb 9-1: Manufacturer: syz
[  562.891689][   T11] usb 9-1: SerialNumber: syz
[  563.066844][   T11] usb 9-1: config 0 descriptor??
[  563.285955][   T11] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[  563.294322][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[  563.302507][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[  563.464523][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.477251][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[  563.485929][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[  563.494877][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[  563.502969][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[  563.511316][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[  563.580275][    T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  563.644133][   T11] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  563.665077][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[  563.674708][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[  563.682950][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[  563.691152][   T11] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[  563.706966][   T11] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  563.780048][    T9] usb 7-1: Using ep0 maxpacket: 32
[  563.917820][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  563.958135][    T9] usb 7-1: unable to read config index 0 descriptor/start: -71
[  563.969545][    T9] usb 7-1: can't read configurations, error -71
[  564.120294][ T7689] veth0_vlan: entered promiscuous mode
[  564.187936][ T7689] veth1_vlan: entered promiscuous mode
[  564.824922][ T5877] usb 9-1: USB disconnect, device number 4
[  564.873081][ T7689] veth0_macvtap: entered promiscuous mode
[  564.915240][ T5877] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  565.075773][ T7689] veth1_macvtap: entered promiscuous mode
[  565.133208][ T5877] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  565.146721][ T5877] keyspan 9-1:0.0: device disconnected
[  565.333768][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.472973][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.631096][ T7689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.640377][ T7689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.649427][ T7689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.658994][ T7689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.817677][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  567.070008][ T5877] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  567.310962][ T5877] usb 10-1: Using ep0 maxpacket: 32
[  567.355019][ T5877] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[  567.364065][ T5877] usb 10-1: config 0 has no interface number 0
[  567.370744][ T5877] usb 10-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  567.477372][ T5877] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  567.487668][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.496447][ T5877] usb 10-1: Product: syz
[  567.501053][ T5877] usb 10-1: Manufacturer: syz
[  567.506015][ T5877] usb 10-1: SerialNumber: syz
[  567.692844][ T5877] usb 10-1: config 0 descriptor??
[  567.763798][   T11] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  567.965957][   T11] usb 9-1: Using ep0 maxpacket: 32
[  568.106242][   T11] usb 9-1: unable to get BOS descriptor or descriptor too short
[  568.127625][   T11] usb 9-1: unable to read config index 0 descriptor/start: -71
[  568.136463][   T11] usb 9-1: can't read configurations, error -71
[  568.295809][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.479'.
[  568.900284][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  569.119349][    T9] usb 2-1: Using ep0 maxpacket: 16
[  569.164087][    T9] usb 2-1: config index 0 descriptor too short (expected 1828, got 36)
[  569.173922][    T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  569.182917][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  569.196165][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  569.207589][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  569.218707][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  569.419294][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  569.429125][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.439084][    T9] usb 2-1: Product: syz
[  569.449938][    T9] usb 2-1: Manufacturer: syz
[  569.454923][    T9] usb 2-1: SerialNumber: syz
[  569.626414][    T9] usb 2-1: config 0 descriptor??
[  569.674585][    T9] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  569.682500][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  569.690760][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  569.706816][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  569.716511][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  569.724523][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  569.732987][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  569.741076][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  569.888312][    T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  569.908480][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  569.918030][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  569.926244][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  569.934405][    T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  569.964541][    T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  570.271982][    T9] usb 10-1: USB disconnect, device number 8
[  571.101299][   T11] usb 2-1: USB disconnect, device number 2
[  571.126929][   T11] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  571.295886][   T11] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  571.309266][   T11] keyspan 2-1:0.0: device disconnected
[  573.561060][ T5877] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  573.770326][ T5877] usb 10-1: Using ep0 maxpacket: 32
[  573.821817][ T5877] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[  573.830688][ T5877] usb 10-1: config 0 has no interface number 0
[  573.837266][ T5877] usb 10-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  573.995220][ T5877] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  574.008658][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.018419][ T5877] usb 10-1: Product: syz
[  574.023166][ T5877] usb 10-1: Manufacturer: syz
[  574.028143][ T5877] usb 10-1: SerialNumber: syz
[  574.223554][ T5877] usb 10-1: config 0 descriptor??
[  574.927212][ T8020] netlink: 36 bytes leftover after parsing attributes in process `syz.8.496'.
[  575.585007][ T5877] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  575.860361][ T5877] usb 9-1: Using ep0 maxpacket: 16
[  575.990473][ T5877] usb 9-1: config index 0 descriptor too short (expected 1828, got 36)
[  575.999409][ T5877] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  576.008116][ T5877] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  576.017456][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  576.027840][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  576.039201][ T5877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  576.101083][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.109410][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.174261][ T5877] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  576.184114][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.192591][ T5877] usb 9-1: Product: syz
[  576.197018][ T5877] usb 9-1: Manufacturer: syz
[  576.202012][ T5877] usb 9-1: SerialNumber: syz
[  576.216591][ T5877] usb 9-1: config 0 descriptor??
[  576.235980][ T5877] keyspan 9-1:0.0: Keyspan 2 port adapter converter detected
[  576.244016][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87
[  576.256343][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7
[  576.268740][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81
[  576.277163][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1
[  576.285525][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2
[  576.294112][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85
[  576.302565][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5
[  576.329276][ T6729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.338447][ T6729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.430545][ T5877] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  576.442898][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 83
[  576.451179][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4
[  576.464282][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 86
[  576.474876][ T5877] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6
[  576.582862][ T5877] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  577.951819][   T11] usb 10-1: USB disconnect, device number 9
[  578.114851][ T5877] usb 9-1: USB disconnect, device number 7
[  578.231327][ T5877] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  578.261592][ T5877] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  578.274651][ T5877] keyspan 9-1:0.0: device disconnected
[  580.265286][    T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  580.500314][    T9] usb 9-1: Using ep0 maxpacket: 32
[  580.540317][    T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  580.548979][    T9] usb 9-1: config 0 has no interface number 0
[  580.561968][    T9] usb 9-1: config 0 interface 12 has no altsetting 0
[  580.644094][    T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  580.660000][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.670516][    T9] usb 9-1: Product: syz
[  580.674976][    T9] usb 9-1: Manufacturer: syz
[  580.680135][    T9] usb 9-1: SerialNumber: syz
[  580.826350][ T8080] netlink: 'syz.2.513': attribute type 12 has an invalid length.
[  580.834758][ T8080] netlink: 'syz.2.513': attribute type 29 has an invalid length.
[  580.843440][ T8080] netlink: 148 bytes leftover after parsing attributes in process `syz.2.513'.
[  580.869001][    T9] usb 9-1: config 0 descriptor??
[  581.236360][ T8085] binder: 8083:8085 ioctl 4018620d 0 returned -22
[  581.365466][ T5877] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  581.610680][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  581.710787][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.721861][ T5877] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  581.731552][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.941543][ T5877] usb 7-1: config 0 descriptor??
[  582.413572][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.424978][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.745509][    T9] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  582.755079][    T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  582.762923][    T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  582.773623][    T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  583.092973][    T9] usb 9-1: USB disconnect, device number 8
[  583.320320][ T8096] ALSA: mixer_oss: invalid OSS volume ''
[  585.900850][ T8121] netlink: 'syz.2.526': attribute type 12 has an invalid length.
[  585.908943][ T8121] netlink: 'syz.2.526': attribute type 29 has an invalid length.
[  585.918032][ T8121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.526'.
[  586.171612][ T8122] syzkaller1: entered promiscuous mode
[  586.177515][ T8122] syzkaller1: entered allmulticast mode
[  586.291119][ T8124] binder: 8123:8124 ioctl 4018620d 0 returned -22
[  587.117935][ T5877] usbhid 7-1:0.0: can't add hid device: -32
[  587.124739][ T5877] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[  587.620642][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  587.841479][ T5877] usb 3-1: Using ep0 maxpacket: 32
[  587.892787][ T5877] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  587.908817][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.010474][ T8138] ALSA: mixer_oss: invalid OSS volume ''
[  588.016075][ T5877] usb 3-1: config 0 descriptor??
[  589.351876][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  589.522126][ T5877] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  589.531396][ T5877] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  590.223979][ T8158] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.538'.
[  591.035311][ T8164] syzkaller1: entered promiscuous mode
[  591.041432][ T8164] syzkaller1: entered allmulticast mode
[  592.120518][ T8175] ALSA: mixer_oss: invalid OSS volume ''
[  592.593245][ T8181] syzkaller0: entered promiscuous mode
[  592.599164][ T8181] syzkaller0: entered allmulticast mode
[  592.780406][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  593.069998][    T9] usb 2-1: Using ep0 maxpacket: 32
[  593.093538][    T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  593.103282][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.203434][    T9] usb 2-1: config 0 descriptor??
[  594.400631][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  594.948756][ T8205] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.552'.
[  595.563508][ T8210] syzkaller1: entered promiscuous mode
[  595.569323][ T8210] syzkaller1: entered allmulticast mode
[  596.791554][ T8222] binder: 8220:8222 ioctl c0306201 0 returned -14
[  597.066801][ T8223] syzkaller0: entered promiscuous mode
[  597.072745][ T8223] syzkaller0: entered allmulticast mode
[  597.218040][ T8228] sock: sock_timestamping_bind_phc: sock not bind to device
[  598.125001][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  598.195459][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  598.196700][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  598.209916][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  598.241532][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  598.277752][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  598.294957][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  599.270518][ T8244] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.567'.
[  600.235671][ T8250] syzkaller1: entered promiscuous mode
[  600.241641][ T8250] syzkaller1: entered allmulticast mode
[  600.370549][ T5800] Bluetooth: hci4: command tx timeout
[  600.467944][ T8231] chnl_net:caif_netlink_parms(): no params data found
[  601.110232][ T5856] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  601.400783][ T5856] usb 10-1: Using ep0 maxpacket: 32
[  601.638275][ T5856] usb 10-1: unable to get BOS descriptor or descriptor too short
[  601.713247][ T5856] usb 10-1: unable to read config index 0 descriptor/start: -71
[  601.721605][ T5856] usb 10-1: can't read configurations, error -71
[  602.031320][   T11] usb 7-1: USB disconnect, device number 16
[  602.315719][ T4047] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.453725][ T5800] Bluetooth: hci4: command tx timeout
[  602.590691][ T4047] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  602.715448][ T8267] syzkaller0: entered promiscuous mode
[  602.721544][ T8267] syzkaller0: entered allmulticast mode
[  602.825971][ T4047] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.126339][ T4047] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.370219][   T11] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  603.425292][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.434649][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.442706][ T8231] bridge_slave_0: entered allmulticast mode
[  603.453038][ T8231] bridge_slave_0: entered promiscuous mode
[  603.526727][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.538658][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.549645][ T8231] bridge_slave_1: entered allmulticast mode
[  603.559872][ T8231] bridge_slave_1: entered promiscuous mode
[  603.710225][   T11] usb 10-1: Using ep0 maxpacket: 8
[  603.758352][   T11] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3
[  603.825921][   T11] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  603.836182][   T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.844766][   T11] usb 10-1: Product: syz
[  603.849306][   T11] usb 10-1: Manufacturer: syz
[  603.854406][   T11] usb 10-1: SerialNumber: syz
[  604.200366][   T11] usb 10-1: config 0 descriptor??
[  604.224442][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.234708][ T4047] bridge_slave_1: left allmulticast mode
[  604.241503][ T4047] bridge_slave_1: left promiscuous mode
[  604.248335][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.270060][ T8287] binder: 8286:8287 ioctl c0306201 0 returned -14
[  604.289989][   T11] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  604.298323][   T11] usb 10-1: setting power ON
[  604.303703][   T11] dvb-usb: bulk message failed: -22 (2/0)
[  604.352864][   T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  604.371695][ T4047] bridge_slave_0: left allmulticast mode
[  604.377956][ T4047] bridge_slave_0: left promiscuous mode
[  604.384843][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.465755][ T8277] dvb-usb: bulk message failed: -22 (3/0)
[  604.472533][ T8277] =====================================================
[  604.480108][ T8277] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0
[  604.487595][ T8277]  cxusb_i2c_xfer+0x1303/0x18e0
[  604.492847][ T8277]  __i2c_transfer+0xec7/0x30e0
[  604.497853][ T8277]  __i2c_smbus_xfer+0x1ba0/0x2f60
[  604.503458][ T8277]  i2c_smbus_xfer+0x31d/0x4d0
[  604.508412][ T8277]  i2cdev_ioctl_smbus+0x4a1/0x660
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  604.520797][ T8277]  i2cdev_ioctl+0xa14/0xf40
[  604.528233][ T8277]  __se_sys_ioctl+0x23c/0x400
[  604.533636][ T8277]  __x64_sys_ioctl+0x97/0xe0
[  604.538486][ T8277]  x64_sys_call+0x1ebe/0x3db0
[  604.543560][ T8277]  do_syscall_64+0xd9/0x1b0
[  604.548337][ T8277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.554655][ T8277] 
[  604.557111][ T8277] Local variable i.i838 created at:
[  604.563676][ T8277]  cxusb_i2c_xfer+0x304/0x18e0
[  604.568732][ T8277]  __i2c_transfer+0xec7/0x30e0
[  604.575445][ T8277] 
[  604.577963][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.9.574 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) 
[  604.580765][ T5800] Bluetooth: hci4: command tx timeout
[  604.590658][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  604.590732][ T8277] =====================================================
[  604.590773][ T8277] Disabling lock debugging due to kernel taint
[  604.590833][ T8277] Kernel panic - not syncing: kmsan.panic set ...
[  604.590920][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.9.574 Tainted: G    B               6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) 
[  604.591114][ T8277] Tainted: [B]=BAD_PAGE
[  604.591164][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  604.591249][ T8277] Call Trace:
[  604.591306][ T8277]  <TASK>
[  604.591352][ T8277]  __dump_stack+0x26/0x30
[  604.591521][ T8277]  dump_stack_lvl+0x53/0x270
[  604.591685][ T8277]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  604.591898][ T8277]  dump_stack+0x1e/0x25
[  604.592056][ T8277]  panic+0x4bd/0xd50
[  604.592312][ T8277]  kmsan_report+0x29d/0x2a0
[  604.592517][ T8277]  ? vprintk_default+0x3f/0x50
[  604.592701][ T8277]  ? __msan_warning+0x96/0x120
[  604.592867][ T8277]  ? cxusb_i2c_xfer+0x1303/0x18e0
[  604.593047][ T8277]  ? __i2c_transfer+0xec7/0x30e0
[  604.593180][ T8277]  ? __i2c_smbus_xfer+0x1ba0/0x2f60
[  604.593353][ T8277]  ? i2c_smbus_xfer+0x31d/0x4d0
[  604.593535][ T8277]  ? i2cdev_ioctl_smbus+0x4a1/0x660
[  604.593683][ T8277]  ? i2cdev_ioctl+0xa14/0xf40
[  604.593823][ T8277]  ? __se_sys_ioctl+0x23c/0x400
[  604.593993][ T8277]  ? __x64_sys_ioctl+0x97/0xe0
[  604.594142][ T8277]  ? x64_sys_call+0x1ebe/0x3db0
[  604.594331][ T8277]  ? do_syscall_64+0xd9/0x1b0
[  604.594536][ T8277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.594704][ T8277]  ? kmsan_get_metadata+0x105/0x1b0
[  604.594934][ T8277]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  604.595160][ T8277]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  604.595368][ T8277]  ? kmsan_get_metadata+0x105/0x1b0
[  604.595575][ T8277]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  604.595781][ T8277]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  604.596011][ T8277]  ? mutex_unlock+0x29/0x50
[  604.596193][ T8277]  ? kmsan_get_metadata+0x105/0x1b0
[  604.799673][ T8277]  __msan_warning+0x96/0x120
[  604.804534][ T8277]  cxusb_i2c_xfer+0x1303/0x18e0
[  604.809633][ T8277]  ? __i2c_smbus_xfer+0x15ef/0x2f60
[  604.815103][ T8277]  ? should_fail_ex+0x45/0x8a0
[  604.820082][ T8277]  ? kmsan_get_metadata+0x105/0x1b0
[  604.825553][ T8277]  ? kmsan_get_metadata+0x105/0x1b0
[  604.831027][ T8277]  ? __pfx_cxusb_i2c_xfer+0x10/0x10
[  604.836492][ T8277]  ? __pfx_cxusb_i2c_xfer+0x10/0x10
[  604.841926][ T8277]  __i2c_transfer+0xec7/0x30e0
[  604.846897][ T8277]  ? __kmalloc_noprof+0x9c8/0x1310
[  604.852219][ T8277]  ? __i2c_smbus_xfer+0x15ef/0x2f60
[  604.857688][ T8277]  __i2c_smbus_xfer+0x1ba0/0x2f60
[  604.863066][ T8277]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  604.869383][ T8277]  ? rt_mutex_lock+0x3e/0x70
[  604.874205][ T8277]  ? __pfx_i2c_adapter_lock_bus+0x10/0x10
[  604.880144][ T8277]  i2c_smbus_xfer+0x31d/0x4d0
[  604.885054][ T8277]  i2cdev_ioctl_smbus+0x4a1/0x660
[  604.890311][ T8277]  i2cdev_ioctl+0xa14/0xf40
[  604.895017][ T8277]  ? __pfx_kmsan_get_shadow_origin_ptr+0x5/0x10
[  604.901524][ T8277]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  604.906744][ T8277]  __se_sys_ioctl+0x23c/0x400
[  604.911652][ T8277]  __x64_sys_ioctl+0x97/0xe0
[  604.916459][ T8277]  x64_sys_call+0x1ebe/0x3db0
[  604.921372][ T8277]  do_syscall_64+0xd9/0x1b0
[  604.926111][ T8277]  ? irqentry_exit+0x16/0x60
[  604.930923][ T8277]  ? clear_bhb_loop+0x40/0x90
[  604.935818][ T8277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.941930][ T8277] RIP: 0033:0x7f919258e969
[  604.946520][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.966366][ T8277] RSP: 002b:00007f91933db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  604.975031][ T8277] RAX: ffffffffffffffda RBX: 00007f91927b5fa0 RCX: 00007f919258e969
[  604.983188][ T8277] RDX: 0000200000000400 RSI: 0000000000000720 RDI: 0000000000000004
[  604.991321][ T8277] RBP: 00007f9192610ab1 R08: 0000000000000000 R09: 0000000000000000
[  604.999447][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  605.007574][ T8277] R13: 0000000000000000 R14: 00007f91927b5fa0 R15: 00007fff59506948
[  605.015753][ T8277]  </TASK>
[  605.019070][ T8277] Kernel Offset: disabled
[  605.023497][ T8277] Rebooting in 86400 seconds..