last executing test programs:

28m40.8244175s ago: executing program 1 (id=115):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

28m37.847273533s ago: executing program 1 (id=120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$isdn(0x22, 0x2, 0x25)
r2 = socket$isdn(0x22, 0x2, 0x22)
dup3(r1, r2, 0x0)

28m22.399664373s ago: executing program 32 (id=120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$isdn(0x22, 0x2, 0x25)
r2 = socket$isdn(0x22, 0x2, 0x22)
dup3(r1, r2, 0x0)

15m16.332235202s ago: executing program 2 (id=1680):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r3, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e)
open(0x0, 0x41c42, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendfile(r5, r0, 0x0, 0x10000a007)

15m14.824041868s ago: executing program 2 (id=1684):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0xfffffffffffbfffd, 0x4, 0x0, 0x4, 0x5}, 0x0, &(0x7f0000000140)={0x1ff, 0x2, 0x5, 0x8, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0)

15m12.87366192s ago: executing program 2 (id=1687):
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
io_uring_setup(0x1581, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x8, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r4, &(0x7f00000000c0)={0x0, 0xc, 0x1})
readv(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1)
bind$bt_l2cap(r3, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
fsopen(0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15)
syz_usb_connect$cdc_ncm(0x0, 0x89, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x7, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "50ef0b4d1817"}, {0x5, 0x24, 0x0, 0x4c0}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x2}, {0x6, 0x24, 0x1a, 0xa, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x8, 0xd4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x3, 0xc}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x1, 0x3, 0x8, 0x20, 0x7}, 0x43, &(0x7f0000000600)={0x5, 0xf, 0x43, 0x2, [@generic={0x3b, 0x10, 0x2, "af86332384df49927e59c658a3c75a791b58c0264adce73e43383f39b0d8377b8446ab11c9eb019c1907c0420fdc7be5aabf5ef1116566a2"}, @ptm_cap={0x3}]}, 0x9, [{0x9c, &(0x7f0000000680)=@string={0x9c, 0x3, "f52f02a0286fe0b91fba7f32b638b31a13d6ddf3102e7e355b5a01ccf35529a98be5f45cc08d45b887c45e109596890d893b40a53408cf3fc637a57f6cc692bfa56b863840f7616483485c321339145bbd3ecfbfc2ffc77ad1403745b98f9e4579686b118c3b35480d02693a3968f2e9ccfe5c8fb957298e6df52595f924ebfdffc3cad07474e509f59d3ac055501fe69f08219a9d9ae15d1192"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000780)=@string={0x4, 0x3, 'y2'}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x437}}, {0xf3, &(0x7f0000000880)=@string={0xf3, 0x3, "a187b0e4808f8507d9399b2d88da20be859e0e3b24e59d23d9ae3c2c0ffa9b764e7719ac6e46dd2568a91dfaa6c84224511014a0b97f6e8b168737caafd5fa16b33920c63941e587a6e068799b01830df724520d9cd7154182177be280d9ccd679a3572ddaa8da90b38ba7adacf1d6107df2a1059f6b9d0605715013154d1ce2afa181f25463e526663c775ca386c1ce673b804a20cfc12871588283331882d3bc0b2248c2a2941bcae261ef88feb66ecf73b541b477a36efb3457b41436b1df69788bb3949c4c4751a0750636ca92462aacd4f69f5bbf4cb855c78a7c7c14e890c8729633b09e38182747b83663de23da"}}, {0x98, &(0x7f0000000980)=@string={0x98, 0x3, "37b87458fc5f7e5e13f3853f1a89fc0a1bdd9cfd4ec9892982316d4319eb1848e78a99261626d0f053e3e27aa3acd9d36bd0465d8d86bf8d5462cef13e7425899e9e4bb2850539e901825d01e84b1b3dc61a9ce0723866c9ddba58c2169bace4004378b845cf1c8f129cbece3818188ca966308544f8fc2df55ac4b69bb41d0d912ea01dc216be64b8e6341ce1c1088059f0a19ff9c2"}}, {0x50, &(0x7f0000000a40)=@string={0x50, 0x3, "138be2ea1a426d251ea9e7ecb53f5c6b83ea493ea2e1901202b5e95036eed0e1003bd2d11250253d62bc7c53df175a59a99e7505e82783f8b5c4a9cc3aecf3b3cc58c8a41b8717d71b86a2912405"}}]})
socket$alg(0x26, 0x5, 0x0)

15m9.543433451s ago: executing program 2 (id=1692):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2})
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0xffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
msgsnd(0x0, 0x0, 0x0, 0x0)

15m7.071668688s ago: executing program 2 (id=1694):
socket(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
modify_ldt$write2(0x11, 0x0, 0x0)

15m5.990269785s ago: executing program 2 (id=1699):
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$9p(&(0x7f0000000000), 0x80080)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0xfffffffffefffff8, 0x3fff})

14m50.811207745s ago: executing program 33 (id=1699):
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2$9p(&(0x7f0000000000), 0x80080)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r2, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r2, r2, 0x3, 0xfffffffffefffff8, 0x3fff})

12m34.388330389s ago: executing program 3 (id=1911):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20000800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$session_to_parent(0x12)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10, 0x800)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})

12m32.834589757s ago: executing program 3 (id=1913):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, 0x0, 0x118)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a00)=@allocspi={0xf8, 0x16, 0xcaa02a10c0257267, 0x70bd29, 0x25dfdbfc, {{{@in6=@mcast1, @in6=@local, 0x4e23, 0x1, 0x4e23, 0x52, 0xa, 0x0, 0xa0, 0x3a}, {@in=@private=0xa010100, 0x4d3, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xc}, {0x5, 0x7, 0x8, 0x94, 0x3, 0xae75, 0x6, 0x8}, {0x1, 0x400, 0x7}, {0x3, 0xb0f, 0xfffffffd}, 0x70bd2a, 0x3503, 0xa, 0x0, 0x9, 0x14}, 0x7, 0xfff}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)

12m31.199049221s ago: executing program 3 (id=1916):
socket$key(0xf, 0x3, 0x2)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x80080400)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fchdir(0xffffffffffffffff)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

12m29.377828139s ago: executing program 3 (id=1917):
socket$key(0xf, 0x3, 0x2)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x80080400)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

12m27.352218126s ago: executing program 3 (id=1921):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
ioctl$FIONREAD(r1, 0x541b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup(r4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x1f)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001})
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

12m23.745425773s ago: executing program 3 (id=1924):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff0400"/20, @ANYRES32=0x0, @ANYBLOB="8000fdfe00000000200012800b0001006272696467650000100002800a001400aaaaaaaaaabf4c"], 0x40}}, 0x0)

12m8.658076157s ago: executing program 34 (id=1924):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff0400"/20, @ANYRES32=0x0, @ANYBLOB="8000fdfe00000000200012800b0001006272696467650000100002800a001400aaaaaaaaaabf4c"], 0x40}}, 0x0)

8m48.642865141s ago: executing program 4 (id=2256):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x100000000, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1})
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000700)={0x7, 0x1, &(0x7f00000000c0)=[0x401], &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100)})

8m46.555671985s ago: executing program 4 (id=2260):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a800000010000d0428ad7000001000000000", @ANYRES32=r3, @ANYBLOB="208004003c40000005001000c900000008001e00dfbd00000500100005", @ANYRES32], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0)

8m44.642793413s ago: executing program 4 (id=2265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x20, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x40408d4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10)
connect$inet(r3, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)})

8m42.198411594s ago: executing program 4 (id=2270):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff0400"/20, @ANYRES32=0x0, @ANYBLOB="8000fdfe00000000200012800b0001006272696467650000100002800a001400aaaaaaaaaabf4c"], 0x40}}, 0x0)

8m37.020258573s ago: executing program 4 (id=2277):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xb8}}, 0x4004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280"], 0xa8}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x4000804)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

8m35.676172027s ago: executing program 4 (id=2281):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x5, 0x5, 0xb48, 0x7, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x7, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

8m20.485500555s ago: executing program 35 (id=2281):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x5, 0x5, 0xb48, 0x7, 'syz0\x00', 0x1}, 0x3, 0x10000000, 0x7, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

7m23.348376463s ago: executing program 0 (id=2414):
socket$key(0xf, 0x3, 0x2)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
listen(r3, 0x80080400)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

7m21.245762116s ago: executing program 0 (id=2420):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)

7m19.30931739s ago: executing program 0 (id=2422):
socket$inet6_sctp(0xa, 0x5, 0x84)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
write$P9_RGETLOCK(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="200000003701000008000000000000001c00000000000000", @ANYRES32=r0, @ANYBLOB="f6ff01ff"], 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

7m7.548263703s ago: executing program 0 (id=2443):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r8, 0x1, {}, 0xff}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0)
r9 = eventfd2(0x397, 0x80000)
socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$unix(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000680)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r9, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40000}}], 0x2, 0x20000000)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)

7m2.767911325s ago: executing program 0 (id=2454):
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8947, &(0x7f0000000140)={'bond0\x00'})
write$FUSE_BMAP(r3, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f0000000480)={0x18}, 0x18)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0)
write$FUSE_INIT(r3, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

6m54.894341872s ago: executing program 0 (id=2473):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)

6m38.459744896s ago: executing program 36 (id=2473):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)

36.776206071s ago: executing program 9 (id=3777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x5, 0xc72, 0x1, 0x1, 0xffd0, 0x300]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x7fff, 0x0, 0x3, 0x9, 0xcd8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x81)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)

36.643117131s ago: executing program 9 (id=3780):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

36.474031113s ago: executing program 9 (id=3784):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0)

33.947582297s ago: executing program 9 (id=3791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x5, 0xc72, 0x1, 0x1, 0xffd0, 0x300]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x7fff, 0x0, 0x3, 0x9, 0xcd8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x81)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)

33.907327172s ago: executing program 9 (id=3793):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

32.956845741s ago: executing program 9 (id=3798):
ioprio_set$pid(0x1, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
read$FUSE(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
sync()

17.580649981s ago: executing program 37 (id=3798):
ioprio_set$pid(0x1, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
read$FUSE(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
sync()

9.094559468s ago: executing program 6 (id=3895):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x5, 0xffffffff, 0x0, 0x2})

8.59245543s ago: executing program 7 (id=3898):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14)

8.507145092s ago: executing program 5 (id=3899):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
r8 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x0, r8})

8.368204545s ago: executing program 7 (id=3900):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

8.266448126s ago: executing program 6 (id=3901):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)

7.977909792s ago: executing program 7 (id=3902):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x2)
rt_sigtimedwait(&(0x7f0000000180)={[0x3ff]}, &(0x7f0000000240), 0x0, 0x8)
tkill(0x0, 0x7)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
r4 = socket(0x1e, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close(r4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})

6.882635192s ago: executing program 7 (id=3903):
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r4=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x10001}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e22, @empty}}, 0x10000000, 0x2, 0x0, 0x4, 0xa17433da3c5d69a5, 0x80000002, 0x81}, 0x9c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c01000016008502000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000457800000c00080008001a000000000014"], 0x11c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9110bf00000000009500000000000000ac773a7000a09b53722e7161abea6284b7a584bbb910284dd59b2bd09e4000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x4]}]}]}]}, 0x2c}}, 0x4004000)
r9 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x20000850)

6.699464456s ago: executing program 8 (id=3904):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbdd", 0xce, 0xc001, 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4)

6.31120959s ago: executing program 8 (id=3905):
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
socket(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

5.884658265s ago: executing program 6 (id=3906):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="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", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000480)="2d1e499ea863a663f2fee35e5cb9a736692b1d419449fd3bd8c60f68d30f9992e7bc1e028e2bc42b9a2ba34e221fb5a5412fd72c2bd5877bfccd1459c745ff8b91226fa40a193fb07687a8efbe2a0e3fe47d6e40c27d7789d1fe5c820c1906", 0x5f}, {&(0x7f0000000a40)="26843bdba2b1e043f5d56b2996d72d3437cdf15c683bbe7ef41efa19de1263895eaac814cbb3f4dc16a95ced7bc8eec3b66d0dcfdf33b95366ac1fe226296ad9d1c4e4cd0c139b98393610948a0510049d2bc993b73ccfc62053bb6aff8df4b26bda208eded9c58466f8693a6b2e0a5328489e2cef866fe630167b264db4d06a690ee849d3cb806c25f893c2389140516c98528475940eaa3e27fc70f40e69cb0b3f01af9c158355bdd6a8496928dac7a032c269c0942e0a17ae83bc2b147f72d755822ac59c7b619146c97395bd", 0xce}, {&(0x7f0000000940)="76e6e32324b59b3b6e8e9d452058c9154358cd754144c4e8171d6cd4e1fc58d7f12cc54bf9b8b17c3120ff3f1d0452fd4759deecc82d84670ab6978681d799bd6ad9eea006e5d19ddfe5f0d52416fb8a228f33f101b63612cb25797f4562326544705c2209ff59ace9ad272306e3449e013eb9bd03beb750e4daa9aa84f0290435878dc6b03027c75bbdedb5812cdd8df2960e17dfe2486542efedc65411f663422ac8", 0xa3}, {&(0x7f0000000600)="a77088ec85b29f52fd700515de7e0229847032853205f68880e3017b0bf360a12e26ae6e2562207bc3286207e68142a176bc3f6db19bfb339aba5ce2087397e4bb041c916ec4872f3d25a50f454613fc98f72c7c47bf0538fd984fe999ec02b7776dfbf4b82c3ff352020d3662795b9de8765bdd3a", 0x75}, {&(0x7f0000002bc0)="25fd338454c4e3b663aa7f4eff49d55dd6665f5bcdff2add6fa12c57f67ce9738c50cc76684da162096a7dd4f512375690308f14ab5b6fd05a45c7cf881f8ef8da653643f82b722519eef1f5be225008c2c978aa6d3f8fae9f74dbeac0e2381c4bb36d57fc9dcfdb5885c4d1fecbb5f92caf7253c9fb8f6fa10b8098bc646d6fdc7000bd2d4a6d9160ea5592acf68705db1072ccd148046c81fe01d9f1271ee3eeebac45b119a6c99f78bae9156757470f4a929516dcb51b207716bc56f395262083b6afaf0c90eee26c822fbac2cfd66df7af5c44bbeee0693080836d57f3b2b8e1ac47e506016a3ec30235a9a9c5490dd969", 0xf3}], 0x5}}], 0x2, 0x4084014)

5.807116587s ago: executing program 7 (id=3907):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xda90)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

4.984227905s ago: executing program 5 (id=3908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a340000001f0a010200000000000000000200000008000340000000000900010073797a30000000000c0006"], 0x5c}}, 0x0)

4.876328787s ago: executing program 6 (id=3909):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140), 0x14)

4.620595129s ago: executing program 5 (id=3910):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x5, 0xffffffff, 0x0, 0x2})

4.599491682s ago: executing program 6 (id=3911):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

4.276371804s ago: executing program 6 (id=3912):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.692148389s ago: executing program 5 (id=3913):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000000070c000000000000004002000000", @ANYRES32=0x0, @ANYBLOB="d00000000a000100000000000000000005000c0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090)
r2 = socket$packet(0x11, 0x3, 0x300)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x3}}, 0x20)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c0001800600060086dd0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
write$binfmt_script(r3, &(0x7f0000000180), 0xfefc)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f0000000200)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509158ba86c902007a00004a32000400160008000a0080000000e000e218d1ddf66ed538f25232506b72269a04b7d6b0b3b504152106d70cb801", 0x8a, 0x20000044, 0x0, 0x0)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0xf52af31239bb63a3}}], 0x1, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000400000b2d3c4f600000000000001000040000000000600000000000000caec1c030363893c03b352d5ac16287ba97de179771a4ad976afef8c8dbfb8c1c93f4126aa249e938f8f5909d2dd35a8d00db9c9721ecaf3a16ce1d54f70cc2b0192847fde670098bf9ed74c7cda1b42b7585aee7b17682214010ba4a7576dafdbfd97b4f74dc8cec7e30ab4468a432676213d9026cee311"])

3.675969831s ago: executing program 8 (id=3914):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbdd", 0xce, 0xc001, 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4)

3.198281982s ago: executing program 8 (id=3915):
pipe(&(0x7f0000000100))
close(0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x377}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

3.111956567s ago: executing program 1 (id=3869):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

2.17813443s ago: executing program 8 (id=3916):
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000140)={0x5, 0xffffffffffffffff, 0x1c, {0x9, 0x1}, 0x6}, 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r4=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0xfd}, 0x10001}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e22, @empty}}, 0x10000000, 0x2, 0x0, 0x4, 0xa17433da3c5d69a5, 0x80000002, 0x81}, 0x9c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c01000016008502000000000000000000000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000457800000c00080008001a000000000014"], 0x11c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9110bf00000000009500000000000000ac773a7000a09b53722e7161abea6284b7a584bbb910284dd59b2bd09e4000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x4]}]}]}]}, 0x2c}}, 0x4004000)
r9 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x20000850)

1.45519s ago: executing program 1 (id=3917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6011}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x2404c091)

1.337695936s ago: executing program 8 (id=3918):
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x101000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x2701, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r2}, &(0x7f0000000080)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8230}, 0x3})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.07079634s ago: executing program 1 (id=3919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a340000001f0a010200000000000000000200000008000340000000000900010073797a30000000000c0006"], 0x5c}}, 0x0)

528.008381ms ago: executing program 5 (id=3920):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

298.995683ms ago: executing program 1 (id=3921):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

245.715µs ago: executing program 5 (id=3922):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x5, 0xffffffff, 0x0, 0x2})

0s ago: executing program 7 (id=3923):
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
socket(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

kernel console output (not intermixed with test programs):

tadv_slave_0
[ 1501.005540][T17160] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.111215][T17160] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.149418][T17160] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.299513][T17160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.408879][T17160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1502.129665][T13121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1502.159741][T13121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1503.141497][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1503.160028][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1503.589486][T17494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1504.627414][T17498] 9pnet_fd: Insufficient options for proto=fd
[ 1509.714848][T17555] 9pnet_fd: Insufficient options for proto=fd
[ 1511.952817][T11004] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1512.222674][T11004] usb 6-1: device descriptor read/64, error -71
[ 1512.642760][T11004] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1512.983093][T11004] usb 6-1: device descriptor read/64, error -71
[ 1513.131457][T17582] netlink: 'syz.8.2628': attribute type 1 has an invalid length.
[ 1513.258711][T11004] usb usb6-port1: attempt power cycle
[ 1513.279957][T17582] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[ 1513.685136][T17582] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[ 1513.856362][T11004] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1513.902733][T11004] usb 6-1: device descriptor read/8, error -71
[ 1515.370953][T17615] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1518.284866][   T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1518.552629][   T50] usb 9-1: device descriptor read/64, error -71
[ 1518.852607][   T50] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1519.142614][   T50] usb 9-1: device descriptor read/64, error -71
[ 1519.385957][   T50] usb usb9-port1: attempt power cycle
[ 1519.882690][   T50] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1520.038920][   T50] usb 9-1: device descriptor read/8, error -71
[ 1520.519519][   T50] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1521.155440][   T50] usb 9-1: device descriptor read/8, error -71
[ 1521.292980][   T50] usb usb9-port1: unable to enumerate USB device
[ 1523.450127][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2648'.
[ 1524.127305][T17693] netlink: 332 bytes leftover after parsing attributes in process `syz.9.2650'.
[ 1524.176710][T11004] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1524.370697][T17698] overlayfs: failed to resolve './file0': -2
[ 1524.444545][T11004] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1525.143786][T11004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.203846][T11004] usb 6-1: config 0 descriptor??
[ 1525.225550][T11004] cp210x 6-1:0.0: cp210x converter detected
[ 1525.647148][T11004] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1525.916239][T17709] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2652'.
[ 1526.799269][   T30] audit: type=1326 audit(1748232690.420:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1526.821892][   T30] audit: type=1326 audit(1748232690.420:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1526.965467][T11004] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1526.989556][   T30] audit: type=1326 audit(1748232690.420:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1527.012022][   T30] audit: type=1326 audit(1748232690.420:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1527.093338][T11004] usb 6-1: USB disconnect, device number 54
[ 1527.132313][   T30] audit: type=1326 audit(1748232690.420:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1527.158046][T11004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1527.296259][T11004] cp210x 6-1:0.0: device disconnected
[ 1527.387428][   T30] audit: type=1326 audit(1748232690.420:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1527.412376][   T30] audit: type=1326 audit(1748232690.420:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1527.593160][   T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1528.122414][   T30] audit: type=1326 audit(1748232690.420:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1528.228696][   T30] audit: type=1326 audit(1748232690.420:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1528.292612][   T24] usb 9-1: Using ep0 maxpacket: 32
[ 1528.294661][   T30] audit: type=1326 audit(1748232690.420:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17701 comm="syz.9.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7fc00000
[ 1528.309921][   T24] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1528.376098][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1528.442007][   T24] usb 9-1: config 0 descriptor??
[ 1528.469549][   T24] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1529.775308][   T24] gspca_sunplus: reg_w_riv err -110
[ 1529.780672][   T24] sunplus 9-1:0.0: probe with driver sunplus failed with error -110
[ 1530.807656][T17754] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1531.932376][ T5884] usb 9-1: USB disconnect, device number 8
[ 1533.148985][T17767] syz.7.2666 (17767): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1533.384554][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2665'.
[ 1534.031238][T17772] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[ 1535.700518][T17792] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1545.899067][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.922260][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1550.833701][T17932] netlink: 'syz.6.2702': attribute type 1 has an invalid length.
[ 1551.368680][T17938] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[ 1551.385745][T17938] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[ 1551.564129][T17938] bond1: (slave vcan1): making interface the new active one
[ 1551.626465][T17938] bond1: (slave vcan1): Enslaving as an active interface with an up link
[ 1553.296699][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'.
[ 1554.902323][ T5884] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1555.795273][ T5884] usb 7-1: Using ep0 maxpacket: 8
[ 1555.811116][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1555.831096][ T5884] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1556.237282][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1556.250083][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1556.258708][ T5884] usb 7-1: Product: syz
[ 1556.263791][ T5884] usb 7-1: Manufacturer: syz
[ 1556.269387][ T5884] usb 7-1: SerialNumber: syz
[ 1557.252377][ T5884] usb 7-1: config 0 descriptor??
[ 1557.549819][ T5935] usb 7-1: USB disconnect, device number 7
[ 1559.529878][T18014] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1565.735465][T18076] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1566.889243][T18079] netlink: 'syz.8.2732': attribute type 1 has an invalid length.
[ 1566.912283][T18079] netlink: 'syz.8.2732': attribute type 2 has an invalid length.
[ 1566.942616][   T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1567.145616][   T24] usb 10-1: Using ep0 maxpacket: 8
[ 1567.223304][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.255881][   T24] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1567.295163][   T24] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1567.304918][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.419958][   T24] usb 10-1: Product: syz
[ 1567.557657][   T24] usb 10-1: Manufacturer: syz
[ 1567.675791][   T24] usb 10-1: SerialNumber: syz
[ 1567.902262][T11004] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1568.008843][   T24] usb 10-1: config 0 descriptor??
[ 1568.790787][T14386] usb 10-1: USB disconnect, device number 2
[ 1568.818955][T11004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1568.842878][T11004] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1568.915325][T11004] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1568.962070][T11004] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1569.927889][T18106] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1571.541214][T11004] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1571.620308][T11004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1571.689491][T11004] usb 8-1: Product: syz
[ 1571.719000][T11004] usb 8-1: config 0 descriptor??
[ 1572.023072][T11004] usb 8-1: can't set config #0, error -71
[ 1572.037498][T11004] usb 8-1: USB disconnect, device number 10
[ 1578.012422][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1578.293030][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1578.331341][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1578.588339][   T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1578.603026][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1578.612111][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1578.650336][   T24] usb 7-1: Product: syz
[ 1578.903238][   T24] usb 7-1: Manufacturer: syz
[ 1578.907919][   T24] usb 7-1: SerialNumber: syz
[ 1578.917071][   T24] usb 7-1: config 0 descriptor??
[ 1579.131054][T15691] usb 7-1: USB disconnect, device number 8
[ 1579.406670][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'.
[ 1579.688854][T18204] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1581.152325][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1581.310055][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'.
[ 1581.352248][ T5884] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1581.542526][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.370771][ T5884] usb 7-1: config 0 descriptor??
[ 1582.411969][ T5884] cp210x 7-1:0.0: cp210x converter detected
[ 1582.638691][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1582.682751][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1583.288702][ T5884] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1583.311867][ T5884] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1583.521641][T18238] usb 7-1: USB disconnect, device number 9
[ 1583.547904][T18238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1583.587455][T18238] cp210x 7-1:0.0: device disconnected
[ 1583.600372][T18244] netlink: 'syz.5.2772': attribute type 1 has an invalid length.
[ 1583.612907][ T5884] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1583.808320][T18247] veth0: entered promiscuous mode
[ 1583.814427][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2776'.
[ 1583.952284][ T5884] usb 10-1: Using ep0 maxpacket: 8
[ 1583.961085][ T5884] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1583.993642][ T5884] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1584.016839][T18244] netlink: 'syz.5.2772': attribute type 2 has an invalid length.
[ 1584.190651][ T5884] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1584.210614][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.227633][ T5884] usb 10-1: Product: syz
[ 1584.302203][ T5884] usb 10-1: Manufacturer: syz
[ 1584.350983][ T5884] usb 10-1: SerialNumber: syz
[ 1584.497452][ T5884] usb 10-1: config 0 descriptor??
[ 1584.767634][ T5884] usb 10-1: USB disconnect, device number 3
[ 1590.516093][T18305] veth0: entered promiscuous mode
[ 1590.522866][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2788'.
[ 1593.580709][T18346] hub 8-0:1.0: USB hub found
[ 1593.588646][T18346] hub 8-0:1.0: 1 port detected
[ 1594.652199][   T30] kauditd_printk_skb: 56 callbacks suppressed
[ 1594.652218][   T30] audit: type=1326 audit(1748232758.400:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18326 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6edd8e969 code=0x7fc00000
[ 1595.120567][T18357] hub 8-0:1.0: USB hub found
[ 1595.128293][T18357] hub 8-0:1.0: 1 port detected
[ 1598.388318][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2801'.
[ 1599.658137][T18387] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1601.356653][T18408] hub 8-0:1.0: USB hub found
[ 1601.362915][T18408] hub 8-0:1.0: 1 port detected
[ 1603.221512][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2813'.
[ 1603.756269][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2816'.
[ 1604.392346][T15691] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1604.587500][T15691] usb 9-1: Using ep0 maxpacket: 32
[ 1604.660340][T15691] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1604.709495][T15691] usb 9-1: config 0 has no interface number 0
[ 1604.859560][T15691] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1604.995724][T15691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.176093][T15691] usb 9-1: Product: syz
[ 1605.292644][T15691] usb 9-1: Manufacturer: syz
[ 1605.297305][T15691] usb 9-1: SerialNumber: syz
[ 1605.455924][T15691] usb 9-1: config 0 descriptor??
[ 1605.485095][T15691] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1605.502215][T15691] usb 9-1: selecting invalid altsetting 1
[ 1605.508006][T15691] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1605.538870][T15691] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1605.551293][T15691] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1605.604141][T15691] usb 9-1: media controller created
[ 1605.709749][T15691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1605.822197][T18464] usb 9-1: dvb_usb_ce6230: I2C read not implemented
[ 1606.834657][T15691] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1606.896945][T15691] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1607.096663][T15691] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1607.333127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.339670][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.928692][T15691] usb 9-1: USB disconnect, device number 9
[ 1609.741358][T18508] veth0: entered promiscuous mode
[ 1609.747150][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2833'.
[ 1610.246339][T18238] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1610.564419][T18238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1610.608965][T18238] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1610.662741][T18238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1610.716350][T18238] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1610.778410][T18238] usb 10-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1610.838089][T18238] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.862757][T18238] usb 10-1: Product: syz
[ 1610.874666][T18238] usb 10-1: Manufacturer: syz
[ 1610.879461][T18238] usb 10-1: SerialNumber: syz
[ 1611.533284][T18238] usb 10-1: config 0 descriptor??
[ 1612.156891][T18238] ums-isd200 10-1:0.0: USB Mass Storage device detected
[ 1613.731672][T18238] scsi host1: usb-storage 10-1:0.0
[ 1614.868933][T18238] usb 10-1: USB disconnect, device number 4
[ 1614.952488][T14386] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1615.225438][T14386] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1615.235813][T14386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.282553][T14386] usb 6-1: config 0 descriptor??
[ 1615.330254][T14386] cp210x 6-1:0.0: cp210x converter detected
[ 1615.543366][T18549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1615.579801][T18549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1615.887481][T14386] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1616.009253][T14386] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1616.701987][T14386] usb 6-1: USB disconnect, device number 55
[ 1616.801486][T14386] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1616.932652][T14386] cp210x 6-1:0.0: device disconnected
[ 1620.336568][   T30] audit: type=1326 audit(1748232784.140:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18612 comm="syz.8.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf398e969 code=0x7fc00000
[ 1620.801449][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'.
[ 1623.350037][T18661] hub 8-0:1.0: USB hub found
[ 1623.362592][T18661] hub 8-0:1.0: 1 port detected
[ 1624.077744][T18654] xt_CT: No such helper "snmp"
[ 1624.483654][T18667] netlink: 'syz.8.2868': attribute type 1 has an invalid length.
[ 1624.569713][T18667] bond1: (slave vcan3): The slave device specified does not support setting the MAC address
[ 1624.791860][T18667] bond1: (slave vcan3): Enslaving as a backup interface with an up link
[ 1627.534583][T18705] netlink: 'syz.5.2872': attribute type 1 has an invalid length.
[ 1627.639980][T18705] netlink: 'syz.5.2872': attribute type 2 has an invalid length.
[ 1630.246323][   T30] audit: type=1326 audit(1748232793.950:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1630.381757][T18736] hub 8-0:1.0: USB hub found
[ 1630.387803][T18736] hub 8-0:1.0: 1 port detected
[ 1630.992055][   T30] audit: type=1326 audit(1748232793.950:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.015799][   T30] audit: type=1326 audit(1748232794.870:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.205476][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2881'.
[ 1631.228827][   T30] audit: type=1326 audit(1748232794.870:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.331341][   T30] audit: type=1326 audit(1748232794.870:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.559472][   T30] audit: type=1326 audit(1748232795.020:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.670647][   T30] audit: type=1326 audit(1748232795.020:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.773341][   T30] audit: type=1326 audit(1748232795.020:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18729 comm="syz.9.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945c18e969 code=0x7ffc0000
[ 1631.908428][T18745] syzkaller0: entered promiscuous mode
[ 1631.942219][T18745] syzkaller0: entered allmulticast mode
[ 1636.075509][T18767] lo speed is unknown, defaulting to 1000
[ 1636.673192][T18834] batman_adv: batadv0: Adding interface: dummy0
[ 1636.680956][T18834] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1636.771818][T18834] batman_adv: batadv0: Interface activated: dummy0
[ 1636.795866][ T5884] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1636.828371][T18842] batadv0: mtu less than device minimum
[ 1636.846258][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.858420][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.869869][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.881322][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.892913][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.904353][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.915750][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.927221][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1636.938664][T18842] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1637.526493][ T5884] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1637.581100][ T5884] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1637.629734][ T5884] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1637.679347][ T5884] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1637.745855][ T5884] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1637.801531][ T5884] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1637.821079][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1637.890514][ T5884] usb 10-1: Product: syz
[ 1637.902213][ T5884] usb 10-1: Manufacturer: syz
[ 1637.947324][ T5884] cdc_wdm 10-1:1.0: skipping garbage
[ 1637.958377][ T5884] cdc_wdm 10-1:1.0: skipping garbage
[ 1637.976063][ T5884] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1637.986682][ T5884] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1638.209562][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.216383][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.222853][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.229574][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.235927][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.242612][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.248839][ T5882] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[ 1638.257065][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.257081][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.257540][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.257556][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.264318][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.264332][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.270535][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.270547][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.277312][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.277326][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.283727][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.283741][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.290466][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1638.290481][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1638.356456][T15691] usb 10-1: USB disconnect, device number 5
[ 1638.362578][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1638.745967][ T5882] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1638.765692][ T5882] usb 7-1: not running at top speed; connect to a high speed hub
[ 1638.780252][ T5882] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1638.883965][ T5882] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1638.953895][T18880] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[ 1639.041299][T18881] lo speed is unknown, defaulting to 1000
[ 1639.224322][ T5882] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1639.237975][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1639.253798][ T5882] usb 7-1: Product: syz
[ 1639.258073][ T5882] usb 7-1: Manufacturer: syz
[ 1639.275939][ T5882] usb 7-1: SerialNumber: syz
[ 1639.541273][T15691] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1639.552332][T18855] kvm: Disabled LAPIC found during irq injection
[ 1639.588636][ T5882] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[ 1639.723064][T15691] usb 6-1: Using ep0 maxpacket: 32
[ 1639.753522][T15691] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1639.775701][ T5893] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1640.104016][T15691] usb 6-1: config 0 has no interface number 0
[ 1640.170048][ T5882] usb 7-1: USB disconnect, device number 10
[ 1640.291145][T15691] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1640.306021][T15691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.318382][T15691] usb 6-1: Product: syz
[ 1640.337906][T15691] usb 6-1: Manufacturer: syz
[ 1640.357900][T15691] usb 6-1: SerialNumber: syz
[ 1640.372742][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 190, changing to 11
[ 1640.389827][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49771, setting to 1024
[ 1640.411287][T15691] usb 6-1: config 0 descriptor??
[ 1640.437152][ T5893] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1640.451627][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.462338][T15691] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1640.630792][ T5893] usb 8-1: config 0 descriptor??
[ 1642.785077][T15691] usb 6-1: qt2_attach - failed to power on unit: -71
[ 1642.791923][T15691] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[ 1642.924821][T15691] usb 6-1: USB disconnect, device number 56
[ 1643.327372][ T5893] usbhid 8-1:0.0: can't add hid device: -71
[ 1643.333860][ T5893] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1643.412605][ T5893] usb 8-1: USB disconnect, device number 11
[ 1644.133772][T18952] netlink: 'syz.6.2925': attribute type 10 has an invalid length.
[ 1644.961463][T18965] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1645.005167][T11004] IPVS: starting estimator thread 0...
[ 1645.070334][T18960] tipc: Started in network mode
[ 1645.205973][T18966] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1645.252434][T18960] tipc: Node identity 7f000001, cluster identity 4711
[ 1645.282649][ T5884] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[ 1645.342487][T18960] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1645.662295][   T96] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1645.690354][T18238] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[ 1646.323128][   T96] usb 7-1: Using ep0 maxpacket: 8
[ 1646.358949][   T96] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1646.380609][   T96] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.453980][ T5893] tipc: Node number set to 2130706433
[ 1646.572791][T18238] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1646.631657][   T96] usb 7-1: Product: syz
[ 1646.649419][   T96] usb 7-1: Manufacturer: syz
[ 1646.659672][T18238] usb 10-1: config 0 has no interface number 0
[ 1646.826813][   T96] usb 7-1: SerialNumber: syz
[ 1646.832233][T18238] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1646.858197][   T96] usb 7-1: config 0 descriptor??
[ 1646.863725][T18238] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1646.879380][   T96] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1647.082652][   T96] usb 7-1: setting power ON
[ 1647.087927][   T96] dvb-usb: bulk message failed: -22 (2/0)
[ 1647.108478][T18238] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1647.118074][T18238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.130190][   T96] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1647.149928][T18238] usb 10-1: config 0 descriptor??
[ 1647.209245][   T96] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1647.280962][   T96] usb 7-1: media controller created
[ 1647.468782][   T96] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1647.601475][   T96] usb 7-1: selecting invalid altsetting 6
[ 1647.661074][   T96] usb 7-1: digital interface selection failed (-22)
[ 1647.686193][   T96] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1647.738724][   T96] usb 7-1: setting power OFF
[ 1647.758134][   T96] dvb-usb: bulk message failed: -22 (2/0)
[ 1647.787835][   T96] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1647.849567][   T96] (NULL device *): no alternate interface
[ 1648.025508][T18998] netlink: 'syz.8.2932': attribute type 30 has an invalid length.
[ 1648.939677][   T96] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1649.022291][   T96] usb 7-1: USB disconnect, device number 11
[ 1649.719920][T18238] usb 10-1: can't set config #0, error -71
[ 1649.805503][T18238] usb 10-1: USB disconnect, device number 6
[ 1649.962239][ T5884] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1650.033098][ T5884] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1650.084782][ T5884] usb 8-1: can't read configurations, error -71
[ 1650.173917][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2937'.
[ 1650.192045][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2936'.
[ 1651.895946][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2945'.
[ 1652.662261][ T5893] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1653.250302][ T5893] usb 10-1: config 0 has an invalid interface number: 148 but max is 0
[ 1653.302239][ T5893] usb 10-1: config 0 has no interface number 0
[ 1653.419556][ T5893] usb 10-1: config 0 interface 148 has no altsetting 0
[ 1653.443261][ T5893] usb 10-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=12.d9
[ 1653.452464][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.460544][ T5893] usb 10-1: Product: syz
[ 1653.472265][ T5893] usb 10-1: Manufacturer: syz
[ 1653.482773][ T5893] usb 10-1: SerialNumber: syz
[ 1653.490474][ T5893] usb 10-1: config 0 descriptor??
[ 1655.706165][T19108] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2957'.
[ 1656.042914][T15691] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1656.258942][ T5893] ftdi_sio 10-1:0.148: FTDI USB Serial Device converter detected
[ 1656.303248][ T5893] ftdi_sio ttyUSB0: unknown device type: 0x12d9
[ 1656.332722][T15691] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1656.341850][T15691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.372305][ T5893] usb 10-1: USB disconnect, device number 7
[ 1656.399642][T15691] usb 7-1: Product: syz
[ 1656.419610][T15691] usb 7-1: Manufacturer: syz
[ 1656.425120][ T5893] ftdi_sio 10-1:0.148: device disconnected
[ 1656.454287][T15691] usb 7-1: SerialNumber: syz
[ 1656.488465][T15691] usb 7-1: config 0 descriptor??
[ 1657.756165][T18238] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1657.968870][T18238] usb 9-1: Using ep0 maxpacket: 8
[ 1658.245335][T19155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1658.255107][T19155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1659.957692][T19180] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2970'.
[ 1660.322749][T19180] bridge_slave_1: left allmulticast mode
[ 1660.359000][T19180] bridge_slave_1: left promiscuous mode
[ 1660.392794][T19180] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1660.780655][T19180] bridge_slave_0: left allmulticast mode
[ 1660.787371][T19180] bridge_slave_0: left promiscuous mode
[ 1660.815802][T19180] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1660.953121][T15691] usb 7-1: USB disconnect, device number 12
[ 1661.765268][T18238] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1661.781887][T18238] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1661.820750][T18238] usb 9-1: can't read configurations, error -71
[ 1661.892826][T19187] ip6erspan0: entered promiscuous mode
[ 1662.713110][T15691] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1662.914191][T15691] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1662.932322][T15691] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1663.007255][T15691] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1663.016389][T19209] capability: warning: `syz.6.2978' uses 32-bit capabilities (legacy support in use)
[ 1663.036876][T15691] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1663.096243][T15691] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1663.143987][T15691] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1663.176852][T15691] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1663.233961][T15691] usb 8-1: Product: syz
[ 1663.238202][T15691] usb 8-1: Manufacturer: syz
[ 1663.312027][T15691] cdc_wdm 8-1:1.0: skipping garbage
[ 1663.338437][T15691] cdc_wdm 8-1:1.0: skipping garbage
[ 1663.359331][T15691] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1663.403622][T15691] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1663.741236][   T53] kworker/u8:3 (53) used greatest stack depth: 19816 bytes left
[ 1663.764104][    C0] wdm_int_callback: 32 callbacks suppressed
[ 1663.764120][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.776604][    C0] wdm_int_callback: 32 callbacks suppressed
[ 1663.776616][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.789360][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.795960][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.802690][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.809296][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.815834][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.822436][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.829850][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.836480][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.844060][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.850688][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.857527][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.864152][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.871179][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.877780][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.884329][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.891010][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.897325][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1663.903931][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1663.928364][T11004] usb 8-1: USB disconnect, device number 14
[ 1663.934477][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1665.608720][T19253] binder: 19250:19253 ioctl c0306201 2000000003c0 returned -14
[ 1665.951367][T19252] syz.8.2987 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1667.064408][T19276] bridge_slave_0: left allmulticast mode
[ 1667.142355][T11004] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1667.185671][T19276] bridge_slave_0: left promiscuous mode
[ 1667.192222][T19276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1667.254679][T19286] netlink: 'syz.9.2994': attribute type 10 has an invalid length.
[ 1667.352741][T11004] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1667.399026][T11004] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1667.420869][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2994'.
[ 1667.445788][T11004] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1667.481107][T19276] bridge_slave_1: left allmulticast mode
[ 1667.486948][T11004] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1667.508854][T19276] bridge_slave_1: left promiscuous mode
[ 1667.542474][T11004] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1667.572622][T19276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1667.592349][ T5884] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1667.665032][T11004] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1667.715960][T19296] kvm: Disabled LAPIC found during irq injection
[ 1667.723667][T19276] bond0: (slave bond_slave_0): Releasing backup interface
[ 1667.760665][T11004] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1667.762535][T19276] bond0: (slave bond_slave_1): Releasing backup interface
[ 1667.791581][T11004] usb 8-1: Product: syz
[ 1667.801387][T11004] usb 8-1: Manufacturer: syz
[ 1667.833088][T19276] team0: Port device team_slave_0 removed
[ 1667.844774][T19276] team0: Port device team_slave_1 removed
[ 1667.851399][T19276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1667.860170][T19276] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1667.879249][T11004] cdc_wdm 8-1:1.0: skipping garbage
[ 1667.890632][T11004] cdc_wdm 8-1:1.0: skipping garbage
[ 1667.903925][T19276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1667.914218][ T5884] usb 9-1: Using ep0 maxpacket: 16
[ 1667.923476][T19276] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1667.980038][T19285] team0: Mode changed to "loadbalance"
[ 1667.994774][T11004] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1668.019267][T11004] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1668.086634][T11004] usb 8-1: USB disconnect, device number 15
[ 1668.113093][ T5884] usb 9-1: config 0 has no interfaces?
[ 1668.123929][T19286] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1668.132477][ T5884] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1668.159144][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.198608][T19286] team0: Port device bond0 added
[ 1668.264609][ T5884] usb 9-1: config 0 descriptor??
[ 1668.779097][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.785601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.176363][T19292] team0 (unregistering): Port device bond0 removed
[ 1669.942220][   T50] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1670.093828][   T50] usb 8-1: device descriptor read/64, error -71
[ 1670.432291][   T50] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1670.632376][   T50] usb 8-1: device descriptor read/64, error -71
[ 1670.640763][T19337] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3011'.
[ 1670.743738][   T50] usb usb8-port1: attempt power cycle
[ 1670.773790][ T5882] usb 9-1: USB disconnect, device number 12
[ 1671.104908][   T50] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1671.207182][   T50] usb 8-1: device descriptor read/8, error -71
[ 1671.350053][ T5882] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1671.492254][   T50] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1671.581615][ T5882] usb 9-1: config 0 has no interfaces?
[ 1671.637872][T18238] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1671.638291][   T50] usb 8-1: device descriptor read/8, error -71
[ 1671.658437][ T5882] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1671.677323][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1671.700988][ T5882] usb 9-1: Product: syz
[ 1671.706763][ T5882] usb 9-1: Manufacturer: syz
[ 1671.711544][ T5882] usb 9-1: SerialNumber: syz
[ 1671.743117][ T5882] usb 9-1: config 0 descriptor??
[ 1671.807013][   T50] usb usb8-port1: unable to enumerate USB device
[ 1671.829059][T18238] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1671.893067][T18238] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1672.018258][T18238] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1672.031358][T18238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1672.043020][T18238] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1672.064079][T18238] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1672.073933][T18238] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1672.094211][T18238] usb 7-1: Product: syz
[ 1672.142738][T18238] usb 7-1: Manufacturer: syz
[ 1672.236457][T18238] cdc_wdm 7-1:1.0: skipping garbage
[ 1672.330076][T18238] cdc_wdm 7-1:1.0: skipping garbage
[ 1672.344459][T18238] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1672.520805][T18238] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1672.602806][T18238] usb 7-1: USB disconnect, device number 13
[ 1674.697482][T11004] usb 9-1: USB disconnect, device number 13
[ 1675.212912][T11004] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1675.448870][T11004] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1675.478737][T11004] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1675.526589][T11004] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1675.571957][T11004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1675.627186][T11004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1675.690638][T11004] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1675.732193][T11004] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1675.775583][T11004] usb 9-1: Product: syz
[ 1675.779822][T11004] usb 9-1: Manufacturer: syz
[ 1675.853270][T11004] cdc_wdm 9-1:1.0: skipping garbage
[ 1675.858556][T11004] cdc_wdm 9-1:1.0: skipping garbage
[ 1675.916827][T11004] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1675.947614][T11004] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1676.060393][T11004] usb 9-1: USB disconnect, device number 14
[ 1676.212224][T18238] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1676.372244][T18238] usb 6-1: device descriptor read/64, error -71
[ 1676.622433][T18238] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1676.677331][T19467] sctp: [Deprecated]: syz.9.3043 (pid 19467) Use of int in maxseg socket option.
[ 1676.677331][T19467] Use struct sctp_assoc_value instead
[ 1676.793342][T18238] usb 6-1: device descriptor read/64, error -71
[ 1676.908755][T18238] usb usb6-port1: attempt power cycle
[ 1677.295429][T18238] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1677.345580][T19459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.402568][T18238] usb 6-1: device descriptor read/8, error -71
[ 1677.653156][T18238] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1677.812175][T18238] usb 6-1: device descriptor read/8, error -71
[ 1677.934929][T18238] usb usb6-port1: unable to enumerate USB device
[ 1678.039387][T19483] ptrace attach of "./syz-executor exec"[16124] was attempted by "./syz-executor exec"[19483]
[ 1679.682851][T18238] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1679.702474][T14386] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1679.872404][T18238] usb 6-1: Using ep0 maxpacket: 16
[ 1679.904347][T14386] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1679.938772][T14386] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1679.953519][T18238] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1680.008410][T18238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1680.034164][T14386] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1680.115225][T14386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1680.137470][T18238] usb 6-1: config 0 has no interface number 0
[ 1680.204591][T18238] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1680.213829][T14386] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1680.237412][T18238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.284914][T14386] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1680.311383][T18238] usb 6-1: Product: syz
[ 1680.337584][T18238] usb 6-1: Manufacturer: syz
[ 1680.366890][T14386] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1680.406952][T18238] usb 6-1: SerialNumber: syz
[ 1680.465980][T14386] usb 8-1: Product: syz
[ 1680.475234][T14386] usb 8-1: Manufacturer: syz
[ 1680.535025][T18238] usb 6-1: config 0 descriptor??
[ 1680.616482][T14386] cdc_wdm 8-1:1.0: skipping garbage
[ 1680.673760][T14386] cdc_wdm 8-1:1.0: skipping garbage
[ 1680.706773][T14386] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1680.780303][T14386] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1680.853733][T14386] usb 8-1: USB disconnect, device number 20
[ 1680.907179][T19507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1680.918281][T19507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1682.407169][T19549] lo speed is unknown, defaulting to 1000
[ 1683.673485][T18238] usb 6-1: USB disconnect, device number 61
[ 1684.517756][T19570] bond0: (slave wlan1): Releasing backup interface
[ 1684.852245][T18238] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1685.042341][T18238] usb 9-1: Using ep0 maxpacket: 16
[ 1685.059947][T18238] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1685.091359][T18238] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1685.119003][T18238] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1685.164945][T18238] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1685.198553][T18238] usb 9-1: config 7 interface 0 has no altsetting 0
[ 1685.221927][T18238] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 1685.243191][T18238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1685.663421][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3082'.
[ 1685.765152][T18238] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.0001/input/input22
[ 1685.865252][T14386] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1686.082451][T14386] usb 6-1: Using ep0 maxpacket: 8
[ 1686.115223][T14386] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1686.169460][T18238] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[ 1686.191821][T14386] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1686.241867][T14386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1686.279043][T18238] usb 9-1: USB disconnect, device number 15
[ 1686.289582][T14386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1686.310581][T14386] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1686.392696][T14386] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1686.423767][T14386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1686.685055][T14386] usb 6-1: usb_control_msg returned -32
[ 1686.760376][T14386] usbtmc 6-1:16.0: can't read capabilities
[ 1686.840108][T19609] fido_id[19609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1686.867970][T19616] lo speed is unknown, defaulting to 1000
[ 1687.080531][T19616] hfs: unable to load iocharset "I†#hÆIarsÌ8ÒÎŽ	wÑ·}+Ô[S‚“š_. ô,ƒs$n¡FÿBlÿbÆSR,Ð.R]^kŽR�¥“Lý/­ J}&Æìo9b6˜Ž\wÜm¨$xšÙçųñCdeOé«jocÚ…`1Ò†Ÿ‚m‰#C”X^ݾOø;;ï©ï¦󣫭Xp­!°ì³+ÿ¥Æ‡ÇK=ÊA	‡­Øa2H‹îKAµ² Š»r·‹p�æ"
[ 1688.796967][ T5893] usb 6-1: USB disconnect, device number 62
[ 1690.672267][ T5893] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[ 1690.883200][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1690.935386][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1690.981365][ T5893] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1691.012863][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.038241][ T5893] usb 6-1: Product: syz
[ 1691.066826][ T5893] usb 6-1: Manufacturer: syz
[ 1691.071495][ T5893] usb 6-1: SerialNumber: syz
[ 1691.149466][ T5893] usb 6-1: config 0 descriptor??
[ 1691.176689][T19667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1691.193048][ T5893] usb 6-1: ucan: probing device on interface #0
[ 1691.217953][ T5893] usb 6-1: ucan: invalid EP count (1)
[ 1691.260687][ T5893] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1693.540573][T15691] usb 6-1: USB disconnect, device number 63
[ 1693.813116][T11004] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1694.021028][T11004] usb 10-1: config 0 has no interfaces?
[ 1694.324143][T11004] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1694.451959][T11004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.500243][T11004] usb 10-1: Product: syz
[ 1694.569572][T11004] usb 10-1: Manufacturer: syz
[ 1694.574760][T11004] usb 10-1: SerialNumber: syz
[ 1694.606278][T11004] usb 10-1: config 0 descriptor??
[ 1694.873347][T19718] @: renamed from vlan0 (while UP)
[ 1696.782790][T11004] usb 10-1: USB disconnect, device number 8
[ 1697.351718][T19768] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3118'.
[ 1701.663152][T11004] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1701.885891][T11004] usb 6-1: config 0 has no interfaces?
[ 1701.933626][T11004] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1702.007122][T11004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.069487][T11004] usb 6-1: Product: syz
[ 1702.095438][T11004] usb 6-1: Manufacturer: syz
[ 1702.123162][T11004] usb 6-1: SerialNumber: syz
[ 1702.152234][T15691] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[ 1702.200219][T11004] usb 6-1: config 0 descriptor??
[ 1702.515033][T15691] usb 7-1: config index 0 descriptor too short (expected 8192, got 129)
[ 1702.542260][T15691] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1703.344589][T15691] usb 7-1: config 0 has no interfaces?
[ 1703.412232][T15691] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1703.455709][T15691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1703.498263][T15691] usb 7-1: Product: syz
[ 1703.513178][T15691] usb 7-1: Manufacturer: syz
[ 1703.527978][T15691] usb 7-1: SerialNumber: syz
[ 1703.554477][T15691] usb 7-1: config 0 descriptor??
[ 1703.840149][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1703.851121][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1705.865678][T19891] mmap: syz.8.3150 (19891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1705.889365][T19891] pim6reg: entered allmulticast mode
[ 1705.900316][T19891] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3150'.
[ 1705.909888][T19891] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3150'.
[ 1706.601737][ T5882] usb 6-1: USB disconnect, device number 64
[ 1706.787136][T19905] pim6reg: entered allmulticast mode
[ 1706.876446][T19908] input: syz1 as /devices/virtual/input/input23
[ 1707.236469][T15691] usb 7-1: USB disconnect, device number 14
[ 1707.269463][T19908] syzkaller0: entered promiscuous mode
[ 1707.313025][T19908] syzkaller0: entered allmulticast mode
[ 1711.323707][T15888] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1711.333091][T15888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1711.351365][T15888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1711.392477][T15888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1711.400170][T15888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1713.416629][T19954] bridge0: port 2(bridge_slave_1) entered learning state
[ 1713.482509][T15888] Bluetooth: hci6: command tx timeout
[ 1713.529886][T19976] tipc: Started in network mode
[ 1713.551044][T19976] tipc: Node identity 4, cluster identity 4711
[ 1713.564789][T19976] tipc: Node number set to 4
[ 1713.669185][T19958] lo speed is unknown, defaulting to 1000
[ 1713.902346][T11004] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1714.083370][T13121] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.162678][T11004] usb 9-1: Using ep0 maxpacket: 8
[ 1714.194589][T19991] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1714.241667][T19984] netlink: 'syz.8.3180': attribute type 13 has an invalid length.
[ 1714.377217][T13121] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.800609][T13121] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.039160][T13121] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.562613][T15888] Bluetooth: hci6: command tx timeout
[ 1716.423986][T13121] bridge_slave_1: left allmulticast mode
[ 1716.455294][T13121] bridge_slave_1: left promiscuous mode
[ 1716.485196][T13121] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1716.547448][T13121] bridge_slave_0: left allmulticast mode
[ 1716.560588][T13121] bridge_slave_0: left promiscuous mode
[ 1716.584687][T13121] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1717.661603][T15888] Bluetooth: hci6: command tx timeout
[ 1718.197738][T13121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1718.444152][T13121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1718.466190][T13121] bond0 (unregistering): Released all slaves
[ 1718.543090][T11004] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1718.558249][T20056] tipc: Started in network mode
[ 1718.563597][T20056] tipc: Node identity 1255, cluster identity 4711
[ 1718.571283][T11004] usb 9-1: no configurations
[ 1718.590405][T11004] usb 9-1: can't read configurations, error -22
[ 1718.602495][T20056] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1718.896862][T19958] chnl_net:caif_netlink_parms(): no params data found
[ 1719.570280][T19958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.577882][T19958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.586974][T19958] bridge_slave_0: entered allmulticast mode
[ 1719.595668][T19958] bridge_slave_0: entered promiscuous mode
[ 1719.605157][T20090] syz_tun: entered allmulticast mode
[ 1719.640267][T20090] syz_tun: left allmulticast mode
[ 1719.732368][T15888] Bluetooth: hci6: command tx timeout
[ 1720.174627][T13121] hsr_slave_0: left promiscuous mode
[ 1720.227692][T13121] hsr_slave_1: left promiscuous mode
[ 1720.247922][T13121] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1720.298562][T13121] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1720.345406][T13121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1720.380089][T13121] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1720.401310][T13121] batman_adv: batadv0: Removing interface: macvtap0
[ 1720.445204][T13121] veth1_macvtap: left promiscuous mode
[ 1720.488490][T13121] veth1_vlan: left promiscuous mode
[ 1720.503218][T13121] veth0_vlan: left promiscuous mode
[ 1721.362879][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3211'.
[ 1721.814084][T13121] team0 (unregistering): Port device team_slave_1 removed
[ 1721.888424][T13121] team0 (unregistering): Port device team_slave_0 removed
[ 1722.293714][T19958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1722.301319][T19958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.314997][T19958] bridge_slave_1: entered allmulticast mode
[ 1722.323056][T19958] bridge_slave_1: entered promiscuous mode
[ 1722.343516][ T5882] lo speed is unknown, defaulting to 1000
[ 1722.343765][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3211'.
[ 1722.396893][ T5882] infiniband syz0: ib_query_port failed (-19)
[ 1722.574329][T19958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1722.638791][T19958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1722.905953][T19958] team0: Port device team_slave_0 added
[ 1722.941131][T19958] team0: Port device team_slave_1 added
[ 1723.116582][T19958] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1723.134377][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1723.186837][T19958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1723.224101][T19958] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1723.237651][T13121] IPVS: stop unused estimator thread 0...
[ 1723.248027][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1723.365135][T19958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1723.689979][T19958] hsr_slave_0: entered promiscuous mode
[ 1723.732351][T19958] hsr_slave_1: entered promiscuous mode
[ 1723.749245][T19958] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1723.768698][T19958] Cannot create hsr debugfs directory
[ 1725.752170][ T5893] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1726.039993][T19958] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1726.090833][T19958] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1726.182161][ T5893] usb 10-1: Using ep0 maxpacket: 8
[ 1726.247071][T19958] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1726.337808][T20206] netlink: 'syz.9.3227': attribute type 13 has an invalid length.
[ 1726.748996][T20206] gretap0: refused to change device tx_queue_len
[ 1726.755852][T20206] net_ratelimit: 10 callbacks suppressed
[ 1726.755893][T20206] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1726.885909][T19958] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1727.938735][T19958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1727.973133][T14386] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1728.066048][T19958] 8021q: adding VLAN 0 to HW filter on device team0
[ 1728.146746][T13103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1728.154058][T13103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1728.193388][T14386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10
[ 1728.256873][T14386] usb 9-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[ 1728.314354][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1728.321566][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1728.329159][T14386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.368040][T14386] usb 9-1: config 0 descriptor??
[ 1728.601575][T14386] usbhid 9-1:0.0: can't add hid device: -71
[ 1728.651098][T14386] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1728.735221][T14386] usb 9-1: USB disconnect, device number 18
[ 1729.255158][ T5893] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1729.304761][ T5893] usb 10-1: no configurations
[ 1729.309512][ T5893] usb 10-1: can't read configurations, error -22
[ 1729.617076][T19958] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1729.677793][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3242'.
[ 1730.208880][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.218909][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.652001][T20294] netlink: 'syz.9.3246': attribute type 30 has an invalid length.
[ 1731.788591][T19958] veth0_vlan: entered promiscuous mode
[ 1731.849124][T19958] veth1_vlan: entered promiscuous mode
[ 1732.025366][T19958] veth0_macvtap: entered promiscuous mode
[ 1732.066810][T19958] veth1_macvtap: entered promiscuous mode
[ 1732.174849][T20324] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1732.200938][ T5882] IPVS: starting estimator thread 0...
[ 1732.292612][T20325] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1732.356693][T19958] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1732.456104][T19958] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1732.472183][T14386] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1732.490975][T19958] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.572453][T19958] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.723892][T19958] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.738812][T19958] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.951892][T13121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1733.988893][T13121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1734.461344][T13107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1734.533432][T13107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1735.472018][T20365] syzkaller0: entered promiscuous mode
[ 1735.499270][T20365] syzkaller0: entered allmulticast mode
[ 1735.822015][T14386] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1735.852871][T14386] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1735.860638][T14386] usb 7-1: can't read configurations, error -71
[ 1737.302196][T15691] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[ 1737.500079][T15691] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1737.593717][T15691] usb 7-1: config 0 has no interface number 0
[ 1737.654544][T15691] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1737.858762][T15691] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1738.029302][T15691] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1738.048517][T15691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1738.150621][T15691] usb 7-1: config 0 descriptor??
[ 1738.288344][T20406] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1738.347336][T15691] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1741.466669][T20404] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1741.872569][ T5882] usb 7-1: USB disconnect, device number 17
[ 1742.582231][ T5882] tipc: Node number set to 307560448
[ 1743.470698][T20461] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3291'.
[ 1744.403169][T20469] syzkaller0: entered promiscuous mode
[ 1744.417662][T20469] syzkaller0: entered allmulticast mode
[ 1748.529002][T20509] tipc: Started in network mode
[ 1748.537403][T20509] tipc: Node identity 7f000001, cluster identity 4711
[ 1748.558320][T20509] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1749.552397][T11004] tipc: Node number set to 2130706433
[ 1749.704865][T20541] tipc: Started in network mode
[ 1749.720160][T20541] tipc: Node identity 7f000001, cluster identity 4711
[ 1749.732946][T20541] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1750.157709][T20558] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3323'.
[ 1750.762400][T18238] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1750.852580][T11004] tipc: Node number set to 2130706433
[ 1750.870436][T20575] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1750.932194][T18238] usb 10-1: device descriptor read/64, error -71
[ 1751.172334][T18238] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1751.392378][T18238] usb 10-1: device descriptor read/64, error -71
[ 1751.522587][T18238] usb usb10-port1: attempt power cycle
[ 1751.872975][T18238] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1751.934110][T18238] usb 10-1: device descriptor read/8, error -71
[ 1752.222266][T18238] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1752.336180][T18238] usb 10-1: device descriptor read/8, error -71
[ 1752.453625][T18238] usb usb10-port1: unable to enumerate USB device
[ 1754.038365][T18238] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1754.382436][T18238] usb 7-1: Using ep0 maxpacket: 16
[ 1754.425586][T18238] usb 7-1: config 0 has no interfaces?
[ 1754.431165][T18238] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1754.579916][T18238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.731991][T18238] usb 7-1: config 0 descriptor??
[ 1756.996883][T15691] usb 7-1: USB disconnect, device number 18
[ 1757.252250][T11004] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1757.270392][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3370'.
[ 1757.327458][T20688] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1757.442223][T11004] usb 6-1: Using ep0 maxpacket: 16
[ 1757.478793][T11004] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1757.493268][T11004] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1757.537626][T11004] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1757.567927][T11004] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1757.601718][T11004] usb 6-1: config 7 interface 0 has no altsetting 0
[ 1757.622037][T11004] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 1757.631314][T11004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1758.124691][T11004] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0002/input/input24
[ 1758.281129][T11004] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[ 1758.376404][T11004] usb 6-1: USB disconnect, device number 65
[ 1758.564040][T20712] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1758.800554][T20711] fido_id[20711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1759.989586][T20734] team0: No ports can be present during mode change
[ 1760.032348][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'.
[ 1760.634622][T20734] team0 (unregistering): Port device team_slave_0 removed
[ 1760.649696][T20734] team0 (unregistering): Port device team_slave_1 removed
[ 1760.689481][T20736] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1762.885325][T20790] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1763.101723][T20789] team0: No ports can be present during mode change
[ 1763.122185][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3403'.
[ 1764.159781][T20792] team0 (unregistering): Port device team_slave_0 removed
[ 1764.231995][T20792] team0 (unregistering): Port device team_slave_1 removed
[ 1764.354577][T15691] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1764.532531][T15691] usb 7-1: Using ep0 maxpacket: 8
[ 1764.544427][T15691] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1764.562337][T15691] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1764.579133][T15691] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1764.622180][T15691] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1764.645442][T15691] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1764.671478][T15691] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1764.701044][T15691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1764.958720][T15691] usb 7-1: usb_control_msg returned -32
[ 1764.972249][ T5882] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1764.988829][T15691] usbtmc 7-1:16.0: can't read capabilities
[ 1765.125194][ T5882] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1765.145366][ T5882] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1765.200950][ T5882] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1765.218157][ T5882] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[ 1765.238528][ T5882] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1765.248181][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1765.268973][ T5882] usb 10-1: Product: syz
[ 1765.279968][ T5882] usb 10-1: Manufacturer: syz
[ 1765.329723][ T5882] cdc_wdm 10-1:1.0: skipping garbage
[ 1765.340562][ T5882] cdc_wdm 10-1:1.0: skipping garbage
[ 1765.794858][ T5882] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1765.849487][ T5882] usb 10-1: USB disconnect, device number 15
[ 1767.355198][ T5882] usb 7-1: USB disconnect, device number 19
[ 1768.109988][T20848] bridge_slave_0: left allmulticast mode
[ 1768.162155][T20848] bridge_slave_0: left promiscuous mode
[ 1768.169363][T20848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1768.273000][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'.
[ 1768.290693][T20848] bridge_slave_1: left allmulticast mode
[ 1768.315567][T20848] bridge_slave_1: left promiscuous mode
[ 1768.331383][T20848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.457934][T20848] bond0: (slave bond_slave_0): Releasing backup interface
[ 1768.986848][T20848] bond0: (slave bond_slave_1): Releasing backup interface
[ 1769.147893][T20848] team0: Port device team_slave_0 removed
[ 1769.170133][T20848] team0: Port device team_slave_1 removed
[ 1769.191073][T20848] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1769.225592][T20848] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1769.262034][T20848] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1769.274317][T20848] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1769.382347][T18238] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1769.394566][T20855] team0: Mode changed to "loadbalance"
[ 1769.528287][T18238] usb 7-1: device descriptor read/64, error -71
[ 1769.773745][T18238] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1769.922347][T18238] usb 7-1: device descriptor read/64, error -71
[ 1770.042812][T18238] usb usb7-port1: attempt power cycle
[ 1770.417646][T18238] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1770.463623][T18238] usb 7-1: device descriptor read/8, error -71
[ 1770.759436][T18238] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1771.117276][T18238] usb 7-1: device descriptor read/8, error -71
[ 1771.232450][T18238] usb usb7-port1: unable to enumerate USB device
[ 1773.452363][ T5882] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1773.652169][ T5882] usb 9-1: device descriptor read/64, error -71
[ 1773.982797][ T5882] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1774.342825][ T5882] usb 9-1: device descriptor read/64, error -71
[ 1774.481829][ T5882] usb usb9-port1: attempt power cycle
[ 1774.843881][ T5882] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1774.884565][ T5882] usb 9-1: device descriptor read/8, error -71
[ 1775.132368][ T5882] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1775.163601][ T5882] usb 9-1: device descriptor read/8, error -71
[ 1775.290765][ T5882] usb usb9-port1: unable to enumerate USB device
[ 1776.702297][T14386] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1776.868437][T14386] usb 6-1: config 0 has no interfaces?
[ 1776.885408][T14386] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1776.898615][T14386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1776.920383][T14386] usb 6-1: Product: syz
[ 1776.945595][T14386] usb 6-1: Manufacturer: syz
[ 1776.957972][T14386] usb 6-1: SerialNumber: syz
[ 1776.980107][T14386] usb 6-1: config 0 descriptor??
[ 1777.415377][T20979] @: renamed from vlan0 (while UP)
[ 1778.514233][T21001] input: syz1 as /devices/virtual/input/input25
[ 1778.706709][T21001] syzkaller0: entered promiscuous mode
[ 1778.748816][T21001] syzkaller0: entered allmulticast mode
[ 1779.725155][ T5882] usb 6-1: USB disconnect, device number 66
[ 1780.365011][T12501] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1780.522707][T12501] usb 8-1: device descriptor read/64, error -71
[ 1780.772412][T12501] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1780.922441][T12501] usb 8-1: device descriptor read/64, error -71
[ 1781.052877][T12501] usb usb8-port1: attempt power cycle
[ 1781.413860][T12501] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 1781.448930][T12501] usb 8-1: device descriptor read/8, error -71
[ 1781.702236][T12501] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 1781.729368][T12501] usb 8-1: device descriptor read/8, error -71
[ 1781.844325][T12501] usb usb8-port1: unable to enumerate USB device
[ 1783.532476][T21054] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3488'.
[ 1785.664183][ T5882] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1785.822404][ T5882] usb 10-1: device descriptor read/64, error -71
[ 1785.854159][T21096] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3502'.
[ 1786.092465][ T5882] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1786.232237][ T5882] usb 10-1: device descriptor read/64, error -71
[ 1786.349591][ T5882] usb usb10-port1: attempt power cycle
[ 1786.702329][ T5882] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1786.763785][ T5882] usb 10-1: device descriptor read/8, error -71
[ 1787.552299][ T5882] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1787.579973][ T5882] usb 10-1: device descriptor read/8, error -71
[ 1787.712858][ T5882] usb usb10-port1: unable to enumerate USB device
[ 1788.983680][T21154] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3521'.
[ 1791.190235][T21217] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3542'.
[ 1791.647854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.656807][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.788886][T21222] syzkaller0: entered promiscuous mode
[ 1791.796420][T21222] syzkaller0: entered allmulticast mode
[ 1792.052455][ T5882] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1792.176495][T21240] input: syz1 as /devices/virtual/input/input26
[ 1792.214777][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1792.323767][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1792.339224][ T5882] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1792.370325][ T5882] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1792.383069][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1792.398697][ T5882] usb 9-1: config 0 descriptor??
[ 1792.888091][ T5882] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[ 1792.913906][ T5882] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[ 1792.958524][ T5882] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1793.478829][ T5882] usb 9-1: USB disconnect, device number 23
[ 1795.098602][T21274] bridge_slave_0: left allmulticast mode
[ 1795.112432][T21274] bridge_slave_0: left promiscuous mode
[ 1795.165548][T21274] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1795.260115][T21285] netlink: 'syz.8.3555': attribute type 10 has an invalid length.
[ 1795.266064][T21283] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3560'.
[ 1795.290488][T21274] bridge_slave_1: left allmulticast mode
[ 1795.335116][T21274] bridge_slave_1: left promiscuous mode
[ 1795.339598][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3555'.
[ 1795.355023][T21274] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1795.420280][T21274] bond0: (slave bond_slave_0): Releasing backup interface
[ 1795.441163][T21274] bond0: (slave bond_slave_1): Releasing backup interface
[ 1795.457963][T21274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1795.466417][T21274] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1795.493654][T21274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1795.510737][T21274] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1795.687859][T21274] bond1: (slave vcan1): Releasing backup interface
[ 1795.729559][T21274] bond1: (slave vcan2): making interface the new active one
[ 1795.769770][T21274] bond1: (slave vcan2): Releasing backup interface
[ 1795.789663][T21274] bond1: (slave vcan3): making interface the new active one
[ 1795.829186][T21274] bond1: (slave vcan3): Releasing backup interface
[ 1795.882304][ T5893] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1796.043530][ T5893] usb 6-1: Using ep0 maxpacket: 8
[ 1796.060652][ T5893] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1796.082159][ T5893] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1796.120577][ T5893] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1796.215075][ T5893] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1796.260569][ T5893] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1796.347387][ T5893] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1796.396366][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.634135][T21301] syzkaller0: entered promiscuous mode
[ 1796.641926][T21301] syzkaller0: entered allmulticast mode
[ 1796.658472][ T5893] usb 6-1: usb_control_msg returned -32
[ 1796.669937][ T5893] usbtmc 6-1:16.0: can't read capabilities
[ 1797.219760][T21325] netlink: 'syz.6.3574': attribute type 10 has an invalid length.
[ 1797.280611][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3574'.
[ 1798.654259][T14386] usb 6-1: USB disconnect, device number 67
[ 1799.044135][T21323] bridge_slave_0: left allmulticast mode
[ 1799.050287][T21323] bridge_slave_0: left promiscuous mode
[ 1799.062612][T21323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1799.076783][T21323] bridge_slave_1: left allmulticast mode
[ 1799.094081][T21323] bridge_slave_1: left promiscuous mode
[ 1799.099900][T21323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1799.131765][T21323] bond0: (slave bond_slave_0): Releasing backup interface
[ 1799.159214][T21323] bond0: (slave bond_slave_1): Releasing backup interface
[ 1799.200123][T21323] team0: Port device team_slave_0 removed
[ 1799.213211][T21323] team0: Port device team_slave_1 removed
[ 1799.221778][T21323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1799.229600][T21323] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1799.238627][T21323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1799.247231][T21323] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1799.264829][T21323] bond1: (slave vcan1): Releasing backup interface
[ 1799.314712][T21325] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1799.336244][T21325] team0: Port device bond0 added
[ 1799.543159][T21326] team0 (unregistering): Port device bond0 removed
[ 1800.072683][T18238] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1800.231175][T21358] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1800.249062][T18238] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1800.281041][T18238] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1800.341842][T18238] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1800.392886][T18238] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1800.457737][T18238] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1800.497975][T18238] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1800.498007][T18238] usb 10-1: Product: syz
[ 1800.498025][T18238] usb 10-1: Manufacturer: syz
[ 1800.531925][T18238] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1800.739904][ T5893] usb 10-1: USB disconnect, device number 20
[ 1801.189927][T21376] netlink: 'syz.8.3593': attribute type 10 has an invalid length.
[ 1801.247434][T21384] input: syz1 as /devices/virtual/input/input28
[ 1801.277341][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3593'.
[ 1801.495281][T21384] syzkaller0: entered promiscuous mode
[ 1801.511568][T21384] syzkaller0: entered allmulticast mode
[ 1806.126965][T21441] binder: BINDER_SET_CONTEXT_MGR already set
[ 1806.148178][T21441] binder: 21440:21441 ioctl 4018620d 200000000040 returned -16
[ 1806.342232][T12501] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1806.516617][T12501] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1806.532176][T12501] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1806.542758][T12501] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1806.551851][T12501] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1806.568633][T12501] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1806.578466][T12501] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1806.588357][T12501] usb 10-1: Product: syz
[ 1806.592780][T12501] usb 10-1: Manufacturer: syz
[ 1806.613580][T12501] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1806.818951][T12501] usb 10-1: USB disconnect, device number 21
[ 1807.442125][T12501] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1807.562951][T21478] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3621'.
[ 1807.632248][T21478] openvswitch: netlink: Flow key attr not present in new flow.
[ 1807.632528][T12501] usb 8-1: Using ep0 maxpacket: 8
[ 1807.764159][T21481] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1807.817686][T12501] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1807.829281][T12501] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1807.839591][T12501] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1807.849765][T12501] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1807.901689][T12501] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1808.012283][T12501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1808.494664][T12501] usb 8-1: GET_CAPABILITIES returned 0
[ 1808.525926][T12501] usbtmc 8-1:16.0: can't read capabilities
[ 1808.646859][T21488] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1808.847473][T18238] usb 8-1: USB disconnect, device number 25
[ 1809.502287][T15691] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1809.700020][T15691] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1809.730054][T15691] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1809.813408][T15691] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1809.822978][T15691] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1809.838768][T15691] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1810.038266][T21519] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1810.162429][T15691] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1810.178201][T15691] usb 10-1: Product: syz
[ 1810.182748][T15691] usb 10-1: Manufacturer: syz
[ 1810.194184][T15691] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1810.386534][ T5882] usb 9-1: new low-speed USB device number 24 using dummy_hcd
[ 1810.498293][T18238] usb 10-1: USB disconnect, device number 22
[ 1811.663446][ T5882] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1811.671503][ T5882] usb 9-1: config 0 has no interface number 0
[ 1811.762259][ T5882] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1811.830659][ T5882] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1812.028638][ T5882] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1812.194915][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1812.208588][ T5882] usb 9-1: config 0 descriptor??
[ 1812.221128][T21519] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1812.253388][ T5882] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1812.696705][T21540] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1813.840533][ T5935] usb 9-1: USB disconnect, device number 24
[ 1814.772409][T15691] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1814.898547][T21572] ip6erspan0: entered promiscuous mode
[ 1814.935263][T15691] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1814.949054][T15691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1814.971944][T15691] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1815.000587][T15691] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1815.010357][T15691] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1815.025080][T15691] usb 6-1: Product: syz
[ 1815.029360][T15691] usb 6-1: Manufacturer: syz
[ 1815.055676][T15691] cdc_wdm 6-1:1.0: skipping garbage
[ 1815.061146][T15691] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1815.266631][T15691] usb 6-1: USB disconnect, device number 68
[ 1817.243099][T21613] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3664'.
[ 1817.298003][T21614] fuse: Bad value for 'fd'
[ 1817.644293][T21620] input: syz1 as /devices/virtual/input/input29
[ 1818.062425][ T5935] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1818.217386][ T5935] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1818.227941][ T5935] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1818.248023][ T5935] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1818.266085][ T5935] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1818.299702][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1818.322409][ T5935] usb 7-1: Product: syz
[ 1818.326689][ T5935] usb 7-1: Manufacturer: syz
[ 1818.349438][ T5935] cdc_wdm 7-1:1.0: skipping garbage
[ 1818.362447][ T5935] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1818.583911][ T5935] usb 7-1: USB disconnect, device number 24
[ 1818.668754][T21644] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3676'.
[ 1818.679401][T21644] fuse: Bad value for 'fd'
[ 1819.543994][T21679] input: syz1 as /devices/virtual/input/input30
[ 1819.557218][T21681] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3687'.
[ 1819.585715][T21681] fuse: Bad value for 'fd'
[ 1819.720233][T21686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3689'.
[ 1819.779690][T21688] batman_adv: batadv0: Interface deactivated: dummy0
[ 1819.795036][T21688] batman_adv: batadv0: Removing interface: dummy0
[ 1819.850202][T21688] bond0: (slave bond_slave_0): Releasing backup interface
[ 1819.926436][T21688] bond0: (slave bond_slave_1): Releasing backup interface
[ 1820.012326][T21688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1820.019899][T21688] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1820.077599][T21688] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1820.085418][T21688] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1820.172302][ T5882] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1820.348148][ T5882] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1820.385282][ T5882] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1820.418600][ T5882] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1820.435367][ T5882] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1820.448488][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1820.465030][ T5882] usb 9-1: Product: syz
[ 1820.478021][ T5882] usb 9-1: Manufacturer: syz
[ 1820.513672][ T5882] cdc_wdm 9-1:1.0: skipping garbage
[ 1820.518959][ T5882] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1820.527474][T15691] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1820.672310][T15691] usb 8-1: device descriptor read/64, error -71
[ 1820.722011][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3702'.
[ 1820.751029][ T5882] usb 9-1: USB disconnect, device number 25
[ 1820.914464][T15691] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 1821.066357][T15691] usb 8-1: device descriptor read/64, error -71
[ 1821.182995][T15691] usb usb8-port1: attempt power cycle
[ 1821.404038][T21748] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1821.553783][T15691] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1821.621907][T15691] usb 8-1: device descriptor read/8, error -71
[ 1821.692308][ T5882] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[ 1822.292273][T15691] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1822.331089][ T5882] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1822.369956][ T5882] usb 6-1: config 0 has no interface number 0
[ 1822.414570][T21750] input: syz1 as /devices/virtual/input/input31
[ 1822.426285][ T5882] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1822.438561][T15691] usb 8-1: device descriptor read/8, error -71
[ 1822.449474][ T5882] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1822.461177][ T5882] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1822.482182][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1822.499368][ T5882] usb 6-1: config 0 descriptor??
[ 1822.562725][T15691] usb usb8-port1: unable to enumerate USB device
[ 1822.573174][T21748] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1822.592394][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3710'.
[ 1822.691499][ T5882] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1823.598883][T21769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3714'.
[ 1824.199457][T14386] usb 6-1: USB disconnect, device number 69
[ 1826.041082][T14386] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1826.222489][T14386] usb 6-1: device descriptor read/64, error -71
[ 1826.462356][T14386] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1826.602345][T14386] usb 6-1: device descriptor read/64, error -71
[ 1826.754065][T14386] usb usb6-port1: attempt power cycle
[ 1827.135798][T21829] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1827.154537][T14386] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1827.243313][T21828] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3730'.
[ 1827.485266][T14386] usb 6-1: device descriptor read/8, error -71
[ 1827.712925][ T5935] usb 8-1: new low-speed USB device number 30 using dummy_hcd
[ 1827.732432][T14386] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1827.783059][T14386] usb 6-1: device descriptor read/8, error -71
[ 1827.955597][ T5935] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1828.032191][T14386] usb usb6-port1: unable to enumerate USB device
[ 1828.059870][ T5935] usb 8-1: config 0 has no interface number 0
[ 1828.067373][ T5935] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1828.087565][ T5935] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1828.099348][ T5935] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1828.112238][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.131507][ T5935] usb 8-1: config 0 descriptor??
[ 1828.140806][T21829] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1828.230586][ T5935] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1830.288551][ T5882] usb 8-1: USB disconnect, device number 30
[ 1830.526699][T21876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3743'.
[ 1831.286654][T14386] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1831.405172][T21890] dvmrp0: entered allmulticast mode
[ 1831.426564][T21891] netlink: 'syz.7.3747': attribute type 2 has an invalid length.
[ 1831.657267][T14386] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[ 1831.689242][T14386] usb 6-1: config 0 has no interface number 0
[ 1831.721676][T14386] usb 6-1: config 0 interface 148 has no altsetting 0
[ 1831.761897][T14386] usb 6-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=12.d9
[ 1831.771602][T14386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.822382][T14386] usb 6-1: Product: syz
[ 1831.830204][T14386] usb 6-1: Manufacturer: syz
[ 1831.840363][T14386] usb 6-1: SerialNumber: syz
[ 1831.861013][T14386] usb 6-1: config 0 descriptor??
[ 1832.152336][ T5893] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1832.352313][ T5893] usb 10-1: device descriptor read/64, error -71
[ 1832.622234][ T5893] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1832.712194][T12501] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1832.762362][ T5893] usb 10-1: device descriptor read/64, error -71
[ 1832.865933][T12501] usb 7-1: Using ep0 maxpacket: 8
[ 1832.879962][T12501] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1832.892327][ T5893] usb usb10-port1: attempt power cycle
[ 1832.897956][T12501] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1832.910396][T12501] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1832.934087][T12501] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1832.953441][T12501] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1832.963248][T12501] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1833.187370][T12501] usb 7-1: GET_CAPABILITIES returned 0
[ 1833.208900][T12501] usbtmc 7-1:16.0: can't read capabilities
[ 1833.246324][ T5893] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1833.272922][ T5893] usb 10-1: device descriptor read/8, error -71
[ 1833.285528][T21910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3754'.
[ 1833.391685][T12501] usb 7-1: USB disconnect, device number 25
[ 1833.512485][ T5893] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1833.532851][ T5893] usb 10-1: device descriptor read/8, error -71
[ 1833.752685][ T5893] usb usb10-port1: unable to enumerate USB device
[ 1833.918910][T14386] ftdi_sio 6-1:0.148: FTDI USB Serial Device converter detected
[ 1833.928904][T14386] ftdi_sio ttyUSB0: unknown device type: 0x12d9
[ 1833.955227][T14386] usb 6-1: USB disconnect, device number 74
[ 1833.987780][T14386] ftdi_sio 6-1:0.148: device disconnected
[ 1834.613518][T21937] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3765'.
[ 1834.673132][ T5935] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1834.691038][T15888] Bluetooth: hci6: command 0x0406 tx timeout
[ 1834.848976][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1834.879219][ T5935] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1835.137558][ T5935] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1835.182227][ T5935] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1835.211999][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.224696][ T5935] usb 7-1: config 0 descriptor??
[ 1835.648728][ T5935] usbhid 7-1:0.0: can't add hid device: -71
[ 1835.682230][ T5935] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1835.722544][ T5935] usb 7-1: USB disconnect, device number 26
[ 1836.230867][T21964] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1836.433627][T12501] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1836.543223][T21974] vcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1836.602150][T12501] usb 9-1: device descriptor read/64, error -71
[ 1836.711048][T21978] syzkaller0: entered promiscuous mode
[ 1836.724995][T21978] syzkaller0: entered allmulticast mode
[ 1836.756108][T21984] ip6erspan0: entered promiscuous mode
[ 1836.862204][T12501] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1837.012229][T12501] usb 9-1: device descriptor read/64, error -71
[ 1837.132837][T12501] usb usb9-port1: attempt power cycle
[ 1837.484355][T12501] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1837.523366][T12501] usb 9-1: device descriptor read/8, error -71
[ 1837.764682][T12501] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1837.795310][T12501] usb 9-1: device descriptor read/8, error -71
[ 1837.902993][T12501] usb usb9-port1: unable to enumerate USB device
[ 1838.122623][T15691] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1838.294025][T15691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1838.305665][T15691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1838.316158][T15691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1838.330033][T15691] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1838.341731][T15691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1838.368285][T15691] usb 7-1: config 0 descriptor??
[ 1838.797753][T15691] usbhid 7-1:0.0: can't add hid device: -71
[ 1838.809630][T15691] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1838.821678][T15691] usb 7-1: USB disconnect, device number 27
[ 1838.999298][T22003] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1839.201901][T22010] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1840.857299][T22036] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1841.141184][T15691] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1841.545013][T15691] usb 8-1: config 0 has no interfaces?
[ 1841.602614][T22047] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1841.630270][T15691] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1841.699428][T15691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1841.708178][T15691] usb 8-1: Product: syz
[ 1841.712627][T15691] usb 8-1: Manufacturer: syz
[ 1841.717269][T15691] usb 8-1: SerialNumber: syz
[ 1841.820007][T15691] usb 8-1: config 0 descriptor??
[ 1843.270714][T22062] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1843.794240][T22074] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1844.322393][T11004] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 1844.627632][T11004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1844.667473][T15691] usb 8-1: USB disconnect, device number 31
[ 1844.672783][T11004] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1844.718009][T11004] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1844.732339][T11004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1844.750936][T11004] usb 7-1: Product: syz
[ 1844.757284][T11004] usb 7-1: Manufacturer: syz
[ 1844.768320][T11004] usb 7-1: SerialNumber: syz
[ 1844.788238][T11004] usb 7-1: config 0 descriptor??
[ 1844.811625][T22079] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1844.822744][T11004] usb 7-1: ucan: probing device on interface #0
[ 1844.841258][T11004] usb 7-1: ucan: invalid EP count (1)
[ 1844.861040][T11004] usb 7-1: ucan: probe failed; try to update the device firmware
[ 1845.064427][T22076] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3819'.
[ 1845.615306][T22097] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1846.242274][ T5935] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1846.428466][T22115] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1846.467280][ T5935] usb 6-1: Using ep0 maxpacket: 32
[ 1846.483004][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1846.498141][ T5935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1846.519861][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1846.631169][T11004] usb 7-1: USB disconnect, device number 28
[ 1846.804309][ T5935] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1846.982649][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.021749][ T5935] usb 6-1: config 0 descriptor??
[ 1847.490052][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0004/input/input32
[ 1847.621167][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0004/input/input33
[ 1847.724969][ T5935] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0
[ 1847.857834][T22133] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1847.889551][ T5935] usb 6-1: USB disconnect, device number 75
[ 1848.022683][T22131] fido_id[22131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1848.108284][T22135] input: syz1 as /devices/virtual/input/input34
[ 1848.408104][T22135] syzkaller0: entered promiscuous mode
[ 1848.472774][T22135] syzkaller0: entered allmulticast mode
[ 1848.562613][T22146] input: syz1 as /devices/virtual/input/input35
[ 1850.909216][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3847'.
[ 1851.462239][ T5893] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 1851.687091][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1851.903992][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1852.032183][ T5893] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1852.089135][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1852.098145][ T5893] usb 7-1: Product: syz
[ 1852.139434][ T5893] usb 7-1: Manufacturer: syz
[ 1852.148065][ T5893] usb 7-1: SerialNumber: syz
[ 1852.167222][ T5893] usb 7-1: config 0 descriptor??
[ 1852.208791][T22173] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1852.255184][ T5893] usb 7-1: ucan: probing device on interface #0
[ 1852.352602][ T5893] usb 7-1: ucan: invalid EP count (1)
[ 1852.417193][ T5893] usb 7-1: ucan: probe failed; try to update the device firmware
[ 1853.089185][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.095794][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.502299][T15691] usb 9-1: new low-speed USB device number 30 using dummy_hcd
[ 1853.676044][T15691] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1853.719934][T15691] usb 9-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1853.773623][T15691] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1853.803869][T15691] usb 9-1: string descriptor 0 read error: -22
[ 1853.842307][T15691] usb 9-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[ 1853.881979][T15691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1854.130844][T15691] usbhid 9-1:1.0: can't add hid device: -71
[ 1854.140968][T15691] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[ 1854.166771][T15691] usb 9-1: USB disconnect, device number 30
[ 1854.993130][T22229] binder_alloc: 22228: binder_alloc_buf, no vma
[ 1855.239587][ T5935] usb 7-1: USB disconnect, device number 29
[ 1855.932187][ T5935] usb 9-1: new low-speed USB device number 31 using dummy_hcd
[ 1856.133911][T15888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1856.147534][T15888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1856.156775][T15888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1856.165120][T15888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1856.174828][ T5935] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[ 1856.184975][ T5935] usb 9-1: config 0 has no interface number 0
[ 1856.185038][T15888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1856.196885][ T5935] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1856.222571][ T5935] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1856.233774][ T5935] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1856.288008][ T5935] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1856.331826][ T5935] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1856.352330][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1856.396065][ T5935] usb 9-1: config 0 descriptor??
[ 1856.627296][T22241] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1856.648292][ T5935] ldusb 9-1:0.55: Interrupt in endpoint not found
[ 1857.025296][T22247] chnl_net:caif_netlink_parms(): no params data found
[ 1857.645416][T22247] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1857.657293][T22247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1857.755981][T22247] bridge_slave_0: entered allmulticast mode
[ 1857.794280][T15691] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1857.811474][T22247] bridge_slave_0: entered promiscuous mode
[ 1857.828358][T22247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1857.838575][T22247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1857.862434][T22247] bridge_slave_1: entered allmulticast mode
[ 1857.879820][T22247] bridge_slave_1: entered promiscuous mode
[ 1857.964346][T15691] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1857.994177][T15691] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1858.019415][T22247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1858.019496][T15691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1858.097074][T15691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1858.099162][T22247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1858.141743][T15691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1858.181304][T15691] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1858.211769][T15691] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1858.230092][T15691] usb 7-1: Product: syz
[ 1858.266603][T15691] usb 7-1: Manufacturer: syz
[ 1858.286711][T15691] cdc_wdm 7-1:1.0: skipping garbage
[ 1858.291760][T22271] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3877'.
[ 1858.302770][ T5824] Bluetooth: hci1: command tx timeout
[ 1858.323475][T15691] cdc_wdm 7-1:1.0: skipping garbage
[ 1858.341350][T15691] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1858.351950][T15691] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1858.358777][T22247] team0: Port device team_slave_0 added
[ 1858.375628][T22273] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1858.382792][T22247] team0: Port device team_slave_1 added
[ 1858.547563][T22247] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1858.575666][T22247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1858.627633][T22247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1858.647615][T22247] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1858.657755][T22247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1858.726680][T22247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1858.837992][T22247] hsr_slave_0: entered promiscuous mode
[ 1858.869556][T22247] hsr_slave_1: entered promiscuous mode
[ 1858.881428][T22247] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1858.890687][T22247] Cannot create hsr debugfs directory
[ 1859.288384][ T5882] usb 7-1: USB disconnect, device number 30
[ 1859.332736][T18238] usb 9-1: USB disconnect, device number 31
[ 1859.534029][T22290] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1860.657645][ T5824] Bluetooth: hci1: command tx timeout
[ 1860.782222][T18238] usb 6-1: new low-speed USB device number 76 using dummy_hcd
[ 1861.582652][T18238] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1861.597442][T18238] usb 6-1: config 0 has no interface number 0
[ 1861.603876][T18238] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1861.615733][T18238] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1861.626909][T18238] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1861.637035][T18238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1861.656696][T18238] usb 6-1: config 0 descriptor??
[ 1861.790642][T22294] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1861.814168][T18238] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1862.053858][T15691] usb 6-1: USB disconnect, device number 76
[ 1862.431296][T22307] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1862.549760][T22321] netlink: 'syz.5.3890': attribute type 10 has an invalid length.
[ 1862.689273][ T5824] Bluetooth: hci1: command tx timeout
[ 1863.680313][T22336] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3892'.
[ 1864.002431][T22342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3894'.
[ 1864.365188][T22247] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1864.399484][T22247] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1864.437479][T22247] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1864.471137][T22247] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1864.542139][ T5935] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1864.761390][ T5935] usb 9-1: Using ep0 maxpacket: 8
[ 1864.766557][T15888] Bluetooth: hci1: command tx timeout
[ 1864.821604][T22360] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1864.844417][T22361] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1864.908565][ T5935] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1864.920488][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1864.932496][ T5935] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1864.942633][ T5935] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1864.955948][ T5935] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1864.965201][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.242678][T12501] usb 6-1: new low-speed USB device number 77 using dummy_hcd
[ 1865.248435][ T5935] usb 9-1: GET_CAPABILITIES returned 0
[ 1865.266543][ T5935] usbtmc 9-1:16.0: can't read capabilities
[ 1865.373032][T22247] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1865.545030][T15691] usb 9-1: USB disconnect, device number 32
[ 1865.628568][T12501] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1865.642732][T22247] 8021q: adding VLAN 0 to HW filter on device team0
[ 1865.728154][T12501] usb 6-1: config 0 has no interface number 0
[ 1865.752226][T12501] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1865.771021][T12501] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1865.829480][T12501] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1866.044045][T12501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1866.073162][T12501] usb 6-1: config 0 descriptor??
[ 1866.139176][T22360] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1866.212605][T12501] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1866.217591][T22378] netlink: 'syz.6.3901': attribute type 10 has an invalid length.
[ 1866.298233][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1866.305437][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1866.357058][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1866.364286][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1866.559755][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3901'.
[ 1867.436752][T22247] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1867.846146][T22247] veth0_vlan: entered promiscuous mode
[ 1867.923199][T12501] usb 6-1: USB disconnect, device number 77
[ 1867.945123][T22247] veth1_vlan: entered promiscuous mode
[ 1868.123086][T22247] veth0_macvtap: entered promiscuous mode
[ 1868.158520][T22247] veth1_macvtap: entered promiscuous mode
[ 1868.256486][T22247] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1868.315434][T22247] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1868.356320][T22247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1868.408594][T22247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1868.450148][T22247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1868.492575][T22247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1868.539167][T22415] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1868.880826][T13121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1868.932189][T13121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1869.286408][T13121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1869.302093][T13121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1869.947520][T12501] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1870.068970][T22435] bridge_slave_0: left allmulticast mode
[ 1870.131600][T22435] bridge_slave_0: left promiscuous mode
[ 1870.148888][T12501] usb 6-1: Using ep0 maxpacket: 8
[ 1870.170649][T22435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1870.186309][T12501] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1870.212909][T12501] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1870.237799][T22435] bridge_slave_1: left allmulticast mode
[ 1870.268656][T22435] bridge_slave_1: left promiscuous mode
[ 1870.275373][T12501] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1870.298796][T22435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1870.322216][T12501] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1870.370055][T22435] bond0: (slave bond_slave_0): Releasing backup interface
[ 1870.392738][T12501] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1870.421106][T22435] bond0: (slave bond_slave_1): Releasing backup interface
[ 1870.424368][T12501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1870.654984][T22435] team0: Port device team_slave_0 removed
[ 1870.705357][T12501] usb 6-1: GET_CAPABILITIES returned 0
[ 1870.731320][T12501] usbtmc 6-1:16.0: can't read capabilities
[ 1870.837880][T22435] team0: Port device team_slave_1 removed
[ 1870.921615][T22435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1870.993603][T22435] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1871.037587][T22435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1871.112183][T22435] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1871.279357][T22436] team0: Mode changed to "loadbalance"
[ 1871.572358][ T5893] usb 6-1: USB disconnect, device number 78
[ 1871.733485][T22456] binder: BINDER_SET_CONTEXT_MGR already set
[ 1871.798454][T22456] binder: 22455:22456 ioctl 4018620d 200000000040 returned -16
[ 1872.288213][T22463] cgroup: fork rejected by pids controller in /syz8
[ 1873.622157][ T5893] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1873.854792][ T5893] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1873.874494][ T5893] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1873.921198][ T5893] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1873.954597][ T5893] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1873.977842][T22528] team0: Unable to change to the same mode the team is in
[ 1874.012310][ T5893] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1874.035408][ T5893] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1874.051086][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1874.114194][ T5893] usb 9-1: Product: syz
[ 1874.118422][ T5893] usb 9-1: Manufacturer: syz
[ 1874.173678][ T5893] cdc_wdm 9-1:1.0: skipping garbage
[ 1874.178965][ T5893] cdc_wdm 9-1:1.0: skipping garbage
[ 1874.208925][ T5893] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1874.228753][ T5893] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1874.352349][T18238] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1874.382150][T12501] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1874.582283][T12501] usb 6-1: Using ep0 maxpacket: 8
[ 1874.622148][T18238] usb 7-1: Using ep0 maxpacket: 16
[ 1874.635617][T12501] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1874.659226][T18238] usb 7-1: config 0 has no interfaces?
[ 1874.669161][T18238] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1874.681780][T12501] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1874.688624][T18238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.759256][T18238] usb 7-1: config 0 descriptor??
[ 1874.776951][T12501] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1874.852482][T12501] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1874.972474][T12501] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1875.234563][T12501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1875.461914][T12501] usb 6-1: GET_CAPABILITIES returned 0
[ 1875.467889][T12501] usbtmc 6-1:16.0: can't read capabilities
[ 1875.774960][ T5893] usb 6-1: USB disconnect, device number 79
[ 1876.354696][T12501] usb 9-1: USB disconnect, device number 33
[ 1877.882880][ T5935] usb 7-1: USB disconnect, device number 31
[ 1914.536913][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.546671][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1975.969396][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1975.976061][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1983.167590][T15888] Bluetooth: hci1: command 0x0406 tx timeout
[ 1992.607358][   T31] INFO: task syz.9.3798:22022 blocked for more than 143 seconds.
[ 1992.615233][   T31]       Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0
[ 1992.627448][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1992.637341][   T31] task:syz.9.3798      state:D stack:27640 pid:22022 tgid:22019 ppid:17160  task_flags:0x400040 flags:0x00004006
[ 1992.650470][   T31] Call Trace:
[ 1992.653921][   T31]  <TASK>
[ 1992.656933][   T31]  __schedule+0x168f/0x4c70
[ 1992.661556][   T31]  ? schedule+0x165/0x360
[ 1992.666084][   T31]  ? __pfx___schedule+0x10/0x10
[ 1992.671054][   T31]  ? schedule+0x91/0x360
[ 1992.678197][   T31]  schedule+0x165/0x360
[ 1992.683020][   T31]  ? rwsem_down_read_slowpath+0x568/0x880
[ 1992.688792][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1992.694344][   T31]  rwsem_down_read_slowpath+0x552/0x880
[ 1992.699934][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[ 1992.706142][   T31]  ? super_lock+0x2a9/0x3b0
[ 1992.710714][   T31]  down_read+0x98/0x2e0
[ 1992.714994][   T31]  super_lock+0x2a9/0x3b0
[ 1992.719365][   T31]  ? __pfx_super_lock+0x10/0x10
[ 1992.724331][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1992.729403][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1992.734741][   T31]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[ 1992.740322][   T31]  iterate_supers+0x80/0x180
[ 1992.744994][   T31]  ksys_sync+0x94/0x150
[ 1992.749592][   T31]  ? __pfx_ksys_sync+0x10/0x10
[ 1992.754479][   T31]  ? do_syscall_64+0xba/0x210
[ 1992.759197][   T31]  __ia32_sys_sync+0xe/0x20
[ 1992.764888][   T31]  do_syscall_64+0xf6/0x210
[ 1992.769434][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1992.774250][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.780185][   T31] RIP: 0033:0x7f945c18e969
[ 1992.786038][   T31] RSP: 002b:00007f945cf1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1992.794831][   T31] RAX: ffffffffffffffda RBX: 00007f945c3b5fa0 RCX: 00007f945c18e969
[ 1992.803039][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1992.811178][   T31] RBP: 00007f945c3b5fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1992.819704][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1992.827860][   T31] R13: 0000000000000000 R14: 00007f945c3b5fa0 R15: 00007fffc86a65a8
[ 1992.835934][   T31]  </TASK>
[ 1992.838991][   T31] 
[ 1992.838991][   T31] Showing all locks held in the system:
[ 1992.847554][   T31] 1 lock held by khungtaskd/31:
[ 1992.853257][   T31]  #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1992.863521][   T31] 2 locks held by klogd/5178:
[ 1992.868255][   T31]  #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1992.878421][   T31]  #1: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1992.888593][   T31] 2 locks held by getty/5586:
[ 1992.893468][   T31]  #0: ffff88803118e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1992.903524][   T31]  #1: ffffc900030162f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1992.914868][   T31] 1 lock held by syz-executor/5821:
[ 1992.920113][   T31]  #0: ffff88805abc00e0 (&type->s_umount_key#51){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[ 1992.930936][   T31] 3 locks held by kworker/0:4/14386:
[ 1992.936494][   T31]  #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1992.946672][   T31]  #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0
[ 1992.958786][   T31]  #2: ffff8880b8825558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[ 1992.968022][   T31] 1 lock held by syz.9.3798/22022:
[ 1992.973251][   T31]  #0: ffff88805abc00e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[ 1992.983296][   T31] 
[ 1992.985697][   T31] =============================================
[ 1992.985697][   T31] 
[ 1992.994253][   T31] NMI backtrace for cpu 0
[ 1992.994278][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) 
[ 1992.994311][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1992.994323][   T31] Call Trace:
[ 1992.994331][   T31]  <TASK>
[ 1992.994339][   T31]  dump_stack_lvl+0x189/0x250
[ 1992.994368][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1992.994399][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1992.994426][   T31]  ? __pfx__printk+0x10/0x10
[ 1992.994476][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1992.994501][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1992.994518][   T31]  ? _printk+0xcf/0x120
[ 1992.994554][   T31]  ? __pfx__printk+0x10/0x10
[ 1992.994588][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1992.994611][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1992.994635][   T31]  watchdog+0xfee/0x1030
[ 1992.994663][   T31]  ? watchdog+0x1de/0x1030
[ 1992.994696][   T31]  kthread+0x711/0x8a0
[ 1992.994722][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1992.994745][   T31]  ? __pfx_kthread+0x10/0x10
[ 1992.994769][   T31]  ? __pfx_kthread+0x10/0x10
[ 1992.994791][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1992.994816][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1992.994841][   T31]  ? __pfx_kthread+0x10/0x10
[ 1992.994864][   T31]  ret_from_fork+0x4b/0x80
[ 1992.994883][   T31]  ? __pfx_kthread+0x10/0x10
[ 1992.994907][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1992.994954][   T31]  </TASK>
[ 1992.994984][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1993.145642][    C1] NMI backtrace for cpu 1
[ 1993.145667][    C1] CPU: 1 UID: 0 PID: 13103 Comm: kworker/u8:0 Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) 
[ 1993.145689][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1993.145700][    C1] Workqueue: bat_events batadv_nc_worker
[ 1993.145725][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40
[ 1993.145749][    C1] Code: f3 0f 1e fa 31 c0 83 3d 27 6e 2e 04 00 74 1e 83 3d ea 9b 2e 04 00 74 15 65 48 8b 0c 25 08 a0 72 92 31 c0 83 b9 ec 0a 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
[ 1993.145765][    C1] RSP: 0018:ffffc9001ba8fab8 EFLAGS: 00000246
[ 1993.145779][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88801cbd8000
[ 1993.145800][    C1] RDX: 0000000000000000 RSI: ffffffff8bc122e0 RDI: ffffffff8bc122a0
[ 1993.145812][    C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: 0000000000000000
[ 1993.145827][    C1] R10: 0000000000000000 R11: ffffffff8b1d8c52 R12: dffffc0000000000
[ 1993.145839][    C1] R13: ffffffff8b1d8c52 R14: ffff88805cb90d80 R15: 000000000000017d
[ 1993.145851][    C1] FS:  0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000
[ 1993.145866][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1993.145878][    C1] CR2: 000055bff2c4a990 CR3: 000000000dd38000 CR4: 00000000003526f0
[ 1993.145892][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1993.145902][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1993.145912][    C1] Call Trace:
[ 1993.145919][    C1]  <TASK>
[ 1993.145925][    C1]  batadv_nc_worker+0x1f4/0x610
[ 1993.145946][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[ 1993.145973][    C1]  process_scheduled_works+0xade/0x17a0
[ 1993.146013][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1993.146047][    C1]  worker_thread+0x8a0/0xda0
[ 1993.146074][    C1]  kthread+0x711/0x8a0
[ 1993.146095][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1993.146109][    C1]  ? __pfx_kthread+0x10/0x10
[ 1993.146128][    C1]  ? __pfx_kthread+0x10/0x10
[ 1993.146145][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1993.146163][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1993.146182][    C1]  ? __pfx_kthread+0x10/0x10
[ 1993.146200][    C1]  ret_from_fork+0x4b/0x80
[ 1993.146215][    C1]  ? __pfx_kthread+0x10/0x10
[ 1993.146233][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1993.146268][    C1]  </TASK>
[ 1993.240355][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1993.240379][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00175-g0f8c0258bf04 #0 PREEMPT(full) 
[ 1993.240406][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1993.240420][   T31] Call Trace:
[ 1993.240431][   T31]  <TASK>
[ 1993.240442][   T31]  dump_stack_lvl+0x99/0x250
[ 1993.240485][   T31]  ? __asan_memcpy+0x40/0x70
[ 1993.240515][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1993.240546][   T31]  ? __pfx__printk+0x10/0x10
[ 1993.240596][   T31]  panic+0x2db/0x790
[ 1993.240632][   T31]  ? __pfx_panic+0x10/0x10
[ 1993.240660][   T31]  ? __pfx_delay_tsc+0x10/0x10
[ 1993.240679][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[ 1993.240716][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1993.240741][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1993.240772][   T31]  watchdog+0x102d/0x1030
[ 1993.240802][   T31]  ? watchdog+0x1de/0x1030
[ 1993.240838][   T31]  kthread+0x711/0x8a0
[ 1993.240868][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1993.240894][   T31]  ? __pfx_kthread+0x10/0x10
[ 1993.240922][   T31]  ? __pfx_kthread+0x10/0x10
[ 1993.240946][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1993.240971][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1993.240999][   T31]  ? __pfx_kthread+0x10/0x10
[ 1993.241023][   T31]  ret_from_fork+0x4b/0x80
[ 1993.241045][   T31]  ? __pfx_kthread+0x10/0x10
[ 1993.241070][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1993.241120][   T31]  </TASK>
[ 1993.245894][   T31] Kernel Offset: disabled