last executing test programs:

18m53.547221761s ago: executing program 32 (id=1347):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
splice(r0, &(0x7f0000000040)=0x6d73, 0xffffffffffffffff, &(0x7f0000000080)=0x401, 0x1, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000480)={0x5, 0x0, [{0x7, 0x80, 0xb, 0x7, 0x80000001, 0xfffffffc, 0x8}, {0x80000001, 0x4, 0x5, 0x6, 0x1, 0x9, 0x3ff}, {0x4, 0xc35a, 0x2, 0x3, 0xe16f, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x0, 0x9, 0x73c, 0x5}, {0xa, 0x744, 0x4, 0xffff587c, 0x1, 0x6b, 0x7}]})
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
brk(0x689d80000000)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0x10, 0x0, 0x2, 0x3, 0x20, 0x20, 0x1, 0x7, 0x0, 0x0, 0x0})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
close_range(r5, 0xffffffffffffffff, 0x0)
r8 = getpid()
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[@ANYBLOB="2000000076000700000000000000000003000000000000000800010004"], 0x20}}, 0x0)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
fcntl$setownex(r7, 0xf, &(0x7f0000000200)={0x0, r8})
r10 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000140)='-*\'\x00', 0x0, r3)

18m51.396453697s ago: executing program 33 (id=1362):
syz_usb_connect(0x5, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)

14m52.552945644s ago: executing program 3 (id=3064):
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0xb5, 0x0, 0xee01}, {}, {}, 0x1, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x4000)

14m52.438723954s ago: executing program 3 (id=3065):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

14m40.66802548s ago: executing program 3 (id=3111):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@access_client}, {@debug={'debug', 0x3d, 0xb9}}], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14m40.206551597s ago: executing program 5 (id=3116):
socket$kcm(0x11, 0x2, 0x300)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

14m39.926708901s ago: executing program 3 (id=3119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0)

14m39.884423857s ago: executing program 3 (id=3120):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f8}}], 0x1, 0x804)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xac055000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
dup(r5)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000a14000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r6, 0x0)

14m39.399495833s ago: executing program 5 (id=3122):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe8000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014000090789def82"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x13)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffff7, 0x193383)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a000000000085100000020000008500000076000000950000004000f0009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

14m38.317715227s ago: executing program 5 (id=3131):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
accept(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x3, 0x3, 0x42}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r4, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r7, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)

14m38.29260994s ago: executing program 2 (id=3132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x81, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@cache_readahead}, {@access_client}, {@debug={'debug', 0x3d, 0xb9}}], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14m37.350643605s ago: executing program 2 (id=3136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

14m37.206839119s ago: executing program 3 (id=3137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280)

14m37.020211068s ago: executing program 2 (id=3139):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xac055000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000a14000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r8, 0x0)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0})
write$UHID_INPUT(r7, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006)

14m36.937205174s ago: executing program 5 (id=3140):
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0xb5, 0x0, 0xee01}, {}, {}, 0x1, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000)

14m35.758707089s ago: executing program 5 (id=3141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x4a}}, 0x44)
sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10)
setsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, 0x0)

14m35.643580663s ago: executing program 5 (id=3142):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000"], 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

14m35.584344642s ago: executing program 2 (id=3143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

14m35.413515599s ago: executing program 2 (id=3145):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)

14m35.271382429s ago: executing program 2 (id=3146):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf250000", @ANYRES32=r2, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0)

14m22.15119402s ago: executing program 34 (id=3137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280)

14m20.180177543s ago: executing program 35 (id=3146):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf250000", @ANYRES32=r2, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0)

14m20.111382658s ago: executing program 36 (id=3142):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000"], 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

7m5.372379064s ago: executing program 1 (id=4582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

7m4.972421038s ago: executing program 1 (id=4583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x2, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xffffffffffffffea, 0x0, 0x0, 0x200000, 0x4, 0x6}, &(0x7f0000000280)={0x0, 0x989680}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
socket$alg(0x26, 0x5, 0x0)

7m3.010011903s ago: executing program 1 (id=4585):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

7m2.400069219s ago: executing program 1 (id=4588):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x880)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000540))
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000340)=""/158, 0x9e}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304948)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000000)="240000001e005f800240000000000000020000000100000f0000080008000100000000ff", 0x24)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2)
write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x1, 0x3, 0x3}, 0x7}}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a11000005"], 0x18}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"])
mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x2)

7m0.932290146s ago: executing program 1 (id=4591):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f8}}], 0x1, 0x804)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xac055000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = dup(r5)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000a14000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r7, 0x0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0})
write$UHID_INPUT(r6, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006)
unshare(0x4000400)

6m59.818393876s ago: executing program 1 (id=4593):
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

6m43.441412979s ago: executing program 37 (id=4593):
socket$inet6_sctp(0xa, 0x5, 0x84)
recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/4, 0x4}], 0x4}, 0x2002)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e21, 0xbe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e23, @remote}], 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="010203007f0000ab6500000000000000000000000000f9ff"], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a4000000ae905000300020000000900020073797a310000000005000100070000007406ef595b885cedabed14949bb79fd19ceea15183fc7f3643c95c0cc0a5dca60f82237f1340e9ed3d1b07ab87aec3f4bdbd0ec21479f80d6f1a9525eab299d4128f3010604b1a80729ac77184c0da8c2a0d2deb1b23a90f2f9dbad198dfc294676cf97c1c67a2ffd1fba69e17662b9ba39e4661f96a0f2ec3bad3dfd8c51fbf8490d7f2b7"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

6m39.921481076s ago: executing program 9 (id=4655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f0000000000000000070000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r2], 0x2c}}, 0x0)

6m37.163613844s ago: executing program 9 (id=4661):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="400f06"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x40, 0x8, 0x2c, "3147c3d0c3b7d2ccbd3bd733a4d1ee461dc566db32887f8a635066e04534a9c251df9d72ae2179a902cefe9b"}, 0x0, 0x0, 0x0, 0x0})

6m33.823611687s ago: executing program 9 (id=4672):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0x8f0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000)

6m32.266024998s ago: executing program 9 (id=4676):
syz_io_uring_setup(0x235, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
socket$kcm(0xa, 0x2, 0x3a)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x9, 0xc)
socket$unix(0x1, 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
accept$packet(r0, 0x0, &(0x7f0000000080))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x1})

6m28.731374499s ago: executing program 9 (id=4684):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x2, "fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)={0x0, 0x10, 0x4, "9500499c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x5, "67deed2620"}, 0x0, 0x0, 0x0, 0x0})

6m25.330844175s ago: executing program 9 (id=4688):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket(0x8, 0x5, 0x0)

6m9.081041322s ago: executing program 38 (id=4688):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket(0x8, 0x5, 0x0)

39.779017346s ago: executing program 8 (id=5457):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

39.646792894s ago: executing program 8 (id=5458):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002380)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252000000008000300", @ANYBLOB="24002d8008000200030000000500040000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4804)

39.640079458s ago: executing program 8 (id=5459):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x2, "ecae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x6, "67deed2620ca"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

37.74161674s ago: executing program 8 (id=5464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

37.025290635s ago: executing program 8 (id=5470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

36.225091601s ago: executing program 8 (id=5472):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket(0x10, 0x80002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50)
close(r2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

11.280689422s ago: executing program 4 (id=5530):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x89e1, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x145102)
mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x1010, r2, 0xb000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0xffff, r5, 0x0}])

10.990850751s ago: executing program 4 (id=5532):
socket(0x40000000015, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0xffffffffffffffd)

10.81054615s ago: executing program 7 (id=5535):
listen(0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252000000008000300", @ANYBLOB="24002d8008000200030000000500040000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4804)

10.379479015s ago: executing program 4 (id=5537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10.25845587s ago: executing program 7 (id=5538):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000300)={0x40, 0xb, 0x4, "ecae0aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b40)={0x0, 0x38, 0x4, "50db0822"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)={0x40, 0x31, 0x6, "67deed2620ca"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)

9.568811235s ago: executing program 0 (id=5540):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000000c0)='./bus\x00', 0x118)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0)

9.290754181s ago: executing program 6 (id=5542):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9.046985619s ago: executing program 4 (id=5543):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)

7.382246934s ago: executing program 4 (id=5544):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

7.218228869s ago: executing program 6 (id=5545):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, 0x0, 0x0)
connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)

7.186260472s ago: executing program 0 (id=5546):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x0)

5.871754289s ago: executing program 7 (id=5547):
socket(0x10, 0x3, 0x0)
socket$inet6(0x10, 0x2, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)

5.806019783s ago: executing program 6 (id=5548):
listen(0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252000000008000300", @ANYBLOB="24002d8008000200030000000500040000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x4804)

5.641033193s ago: executing program 6 (id=5549):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01030000030000000008000b00", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

5.408179449s ago: executing program 4 (id=5550):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

4.203285511s ago: executing program 7 (id=5551):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)="de547e22bade76f1a0"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x4000000000000002, 0x80, 0xbbc, 0x20000004, 0x1, 0x4234, 0xbe61, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.842778489s ago: executing program 0 (id=5552):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4048894)
close(0x3)

2.766996877s ago: executing program 6 (id=5553):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000000c0)='./bus\x00', 0x118)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0)

2.696335512s ago: executing program 7 (id=5554):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a3ff200140600fe8000000000000000000000000000bbfe8000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5014000090789def82"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x13)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffff7, 0x193383)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a000000000085100000020000008500000076000000950000004000f0009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

2.557624683s ago: executing program 0 (id=5555):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.200335374s ago: executing program 7 (id=5556):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000540), 0x3021090, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, 'cache=mmap'}}, {@seclabel}, {@seclabel}, {@dont_appraise}]}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

941.564359ms ago: executing program 0 (id=5557):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$rds(0x15, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x89e1, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x145102)
mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x1010, r2, 0xb000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0xffff, r5, 0x0}])

683.34021ms ago: executing program 0 (id=5558):
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0)

0s ago: executing program 6 (id=5559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
fchdir(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})

kernel console output (not intermixed with test programs):

hcd
[ 1263.287528][ T9308] usb 7-1: device descriptor read/8, error -71
[ 1263.460197][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1263.540547][ T9308] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[ 1263.562306][ T9308] usb 7-1: device descriptor read/8, error -71
[ 1263.579844][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1263.679689][ T9308] usb usb7-port1: unable to enumerate USB device
[ 1263.702795][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1264.043449][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1264.274231][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1264.961244][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1265.169787][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1265.488384][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1265.828973][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1266.077654][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1266.493206][T20279] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1266.493430][T20279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1267.226547][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1267.271577][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1267.430593][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1267.624917][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1267.696218][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1267.700559][T19815] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[ 1267.877502][T19815] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1267.877537][T19815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.877560][T19815] usb 7-1: Product: syz
[ 1267.877577][T19815] usb 7-1: Manufacturer: syz
[ 1267.877593][T19815] usb 7-1: SerialNumber: syz
[ 1267.925522][T19815] usb 7-1: config 0 descriptor??
[ 1268.167327][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1268.253266][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1268.412676][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1268.802135][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1268.805561][T19815] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1269.193818][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.254607][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.320989][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.381811][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.430505][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.482680][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.588077][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.625125][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1269.893707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1270.253460][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1270.314278][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1270.378704][T19815] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1271.656639][ T9285] usb 7-1: USB disconnect, device number 45
[ 1273.152026][T20325] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1273.152588][T20325] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1274.427885][ T9285] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1274.630956][ T9285] usb 7-1: Using ep0 maxpacket: 8
[ 1274.634026][ T9285] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1274.634055][ T9285] usb 7-1: config 0 has no interface number 0
[ 1274.634105][ T9285] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1274.634132][ T9285] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1274.634161][ T9285] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1274.634190][ T9285] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1274.634236][ T9285] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1274.634261][ T9285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.638978][T20054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1274.660265][ T9285] usb 7-1: config 0 descriptor??
[ 1274.687544][T20054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1274.696995][T20054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1274.709075][T20054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1274.709903][T20054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1274.717001][ T9285] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1274.931350][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1274.931422][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1277.672895][T15784] usb 7-1: USB disconnect, device number 46
[ 1277.678381][T15784] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1277.716213][T10860] Bluetooth: hci3: command tx timeout
[ 1279.763524][T20371] overlayfs: overlapping lowerdir path
[ 1279.871628][T20054] Bluetooth: hci3: command tx timeout
[ 1281.702184][T20377] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1281.702225][T20377] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1281.702241][T20377] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1282.107211][T20054] Bluetooth: hci3: command tx timeout
[ 1282.229477][  T989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1282.546377][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1282.630943][ T9307] usb 8-1: new full-speed USB device number 55 using dummy_hcd
[ 1282.814170][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1282.867487][ T9307] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1282.867521][ T9307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.867543][ T9307] usb 8-1: Product: syz
[ 1282.867559][ T9307] usb 8-1: Manufacturer: syz
[ 1282.867575][ T9307] usb 8-1: SerialNumber: syz
[ 1282.886189][ T9307] usb 8-1: config 0 descriptor??
[ 1283.041379][  T989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.134813][ T9307] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1283.151189][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4729'.
[ 1283.151219][T20403] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4729'.
[ 1283.151238][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4729'.
[ 1283.388418][T20338] chnl_net:caif_netlink_parms(): no params data found
[ 1284.057796][  T989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.178436][T20417] bridge_slave_0: left allmulticast mode
[ 1284.178469][T20417] bridge_slave_0: left promiscuous mode
[ 1284.178800][T20417] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1284.303261][T20417] bridge_slave_1: left allmulticast mode
[ 1284.303289][T20417] bridge_slave_1: left promiscuous mode
[ 1284.303539][T20417] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1284.317549][T20054] Bluetooth: hci3: command tx timeout
[ 1284.500227][T20417] bond0: (slave bond_slave_0): Releasing backup interface
[ 1284.611308][T20417] bond0: (slave bond_slave_1): Releasing backup interface
[ 1284.690734][T20417] team0: Port device team_slave_0 removed
[ 1284.752968][T20417] team0: Port device team_slave_1 removed
[ 1284.753418][T20417] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1284.853501][ T9307] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1284.859360][T20417] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1284.889130][T20417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1285.384504][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1285.406906][  T989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.949153][ T9308] usb 8-1: USB disconnect, device number 55
[ 1286.257593][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4739'.
[ 1286.257622][T20449] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4739'.
[ 1286.257641][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4739'.
[ 1286.453103][T20338] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.453240][T20338] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.453505][T20338] bridge_slave_0: entered allmulticast mode
[ 1286.461356][T20338] bridge_slave_0: entered promiscuous mode
[ 1286.716480][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1286.913986][T20051] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1286.973844][T20338] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.974384][T20338] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1286.974632][T20338] bridge_slave_1: entered allmulticast mode
[ 1286.977368][T20338] bridge_slave_1: entered promiscuous mode
[ 1287.012905][T20051] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1287.355862][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1288.011967][T20476] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1288.305351][T20051] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1289.421130][T20051] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1289.854994][T20487] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.855371][T20487] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.414764][T20487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1290.424991][T20487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1291.416146][T20338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1291.451490][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4752'.
[ 1291.451516][T20498] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4752'.
[ 1291.451535][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4752'.
[ 1291.451756][T20498] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4752'.
[ 1291.490114][T14286] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1291.511476][T20338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1291.522600][T14286] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1291.663549][T14286] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1291.780880][T14286] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1291.795205][T20338] team0: Port device team_slave_0 added
[ 1292.002464][T20338] team0: Port device team_slave_1 added
[ 1292.344464][ T9285] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1292.541347][ T9285] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1292.541378][ T9285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.541392][ T9285] usb 7-1: Product: syz
[ 1292.541402][ T9285] usb 7-1: Manufacturer: syz
[ 1292.541412][ T9285] usb 7-1: SerialNumber: syz
[ 1292.545178][ T9285] usb 7-1: config 0 descriptor??
[ 1292.822960][ T9285] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1294.393333][ T9285] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1294.409144][  T989] bond0 (unregistering): Released all slaves
[ 1294.825061][T20338] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1294.825079][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1294.825104][T20338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1294.850441][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4757'.
[ 1294.851729][T20338] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1294.851756][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1294.851782][T20338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1295.528659][ T9285] usb 7-1: USB disconnect, device number 47
[ 1296.783216][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1296.963216][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1297.232479][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1297.591788][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1297.608735][T20537] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1297.608782][T20537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1297.608803][T20537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1297.769302][T20338] hsr_slave_0: entered promiscuous mode
[ 1297.813828][T20338] hsr_slave_1: entered promiscuous mode
[ 1297.814845][T20338] debugfs: 'hsr0' already exists in 'hsr'
[ 1297.814872][T20338] Cannot create hsr debugfs directory
[ 1298.492417][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1298.768824][T20547] binder: 20546:20547 unknown command 0
[ 1298.768853][T20547] binder: 20546:20547 ioctl c0306201 200000000080 returned -22
[ 1298.793945][  T989] hsr_slave_0: left promiscuous mode
[ 1298.834394][  T989] hsr_slave_1: left promiscuous mode
[ 1298.925742][  T989] veth1_macvtap: left promiscuous mode
[ 1298.925849][  T989] veth0_macvtap: left promiscuous mode
[ 1298.926089][  T989] veth1_vlan: left promiscuous mode
[ 1298.926260][  T989] veth0_vlan: left promiscuous mode
[ 1298.997411][T20549] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4766'.
[ 1299.294050][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.487502][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.625942][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.803338][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.871951][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1299.996966][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1300.315361][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.280070][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.388552][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.441046][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.525229][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.581258][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.620488][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.930286][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1301.986653][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1302.043751][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1302.149441][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1303.679669][T10860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1303.684796][T10860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1303.686161][T10860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1303.697383][T10860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1303.713091][T10860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1305.957219][T20054] Bluetooth: hci0: command tx timeout
[ 1308.182462][T20054] Bluetooth: hci0: command tx timeout
[ 1309.580774][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1309.979088][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.260939][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.477152][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.522860][T20054] Bluetooth: hci0: command tx timeout
[ 1310.547108][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.711582][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1310.743574][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1311.080832][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1311.332158][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1311.811268][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.597236][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.660205][T20680] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1312.893320][T20054] Bluetooth: hci0: command tx timeout
[ 1313.065343][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1313.205491][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1313.669826][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1314.427630][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1314.463670][T20573] chnl_net:caif_netlink_parms(): no params data found
[ 1315.196724][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1316.371082][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1316.445596][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1316.571002][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1316.951288][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1317.830566][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1318.384667][T20736] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1319.254147][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1319.366732][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1319.936011][T20573] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.936152][T20573] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1319.936402][T20573] bridge_slave_0: entered allmulticast mode
[ 1319.997190][T20573] bridge_slave_0: entered promiscuous mode
[ 1320.188688][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1320.245456][T20573] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1320.260797][T20573] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.263576][T20573] bridge_slave_1: entered allmulticast mode
[ 1320.353771][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1320.357657][T20573] bridge_slave_1: entered promiscuous mode
[ 1321.242939][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1321.458823][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1321.647773][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1321.940160][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1321.974738][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1322.290104][T20770] veth0_to_team: entered promiscuous mode
[ 1322.290131][T20770] veth0_to_team: entered allmulticast mode
[ 1322.588241][T20338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1323.881469][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1324.331306][T20338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1324.654648][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1325.750877][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1325.820396][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1325.871382][T20573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1325.959320][T20338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1325.997838][T20573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1325.998460][T20338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1326.688129][T20573] team0: Port device team_slave_0 added
[ 1326.737016][T20573] team0: Port device team_slave_1 added
[ 1327.107516][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1327.281111][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1327.566560][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1328.272003][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1328.786593][T20573] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1328.786607][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1328.786627][T20573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1329.017838][T20573] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1329.017852][T20573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1329.017873][T20573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1329.839817][ T9285] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 1330.001964][ T9285] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1330.001998][ T9285] usb 7-1: config 0 has no interface number 0
[ 1330.002030][ T9285] usb 7-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1330.002046][ T9285] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1330.004414][ T9285] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1330.004443][ T9285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.004462][ T9285] usb 7-1: Product: syz
[ 1330.004476][ T9285] usb 7-1: Manufacturer: syz
[ 1330.004491][ T9285] usb 7-1: SerialNumber: syz
[ 1330.252885][T20573] hsr_slave_0: entered promiscuous mode
[ 1330.277966][T20573] hsr_slave_1: entered promiscuous mode
[ 1331.071712][ T9285] usb 7-1: config 0 descriptor??
[ 1331.076639][ T9285] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[ 1331.254305][  T989] bridge_slave_1: left allmulticast mode
[ 1331.254335][  T989] bridge_slave_1: left promiscuous mode
[ 1331.254612][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.472543][  T989] bridge_slave_0: left allmulticast mode
[ 1331.472576][  T989] bridge_slave_0: left promiscuous mode
[ 1331.472931][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1331.989934][ T9308] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1332.629845][ T9308] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1332.629883][ T9308] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1332.629912][ T9308] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1332.629957][ T9308] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1332.629982][ T9308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1332.888837][T20881] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1333.010591][ T9285] usb 7-1: USB disconnect, device number 48
[ 1334.535525][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1334.602391][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1334.655745][  T989] bond0 (unregistering): Released all slaves
[ 1335.209308][ T9308] aiptek 8-1:17.0: Aiptek using 400 ms programming speed
[ 1335.212959][ T9308] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input20
[ 1335.563518][  T989] hsr_slave_0: left promiscuous mode
[ 1335.583538][  T989] hsr_slave_1: left promiscuous mode
[ 1335.584545][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1335.607366][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1337.378686][ T9285] usb 8-1: USB disconnect, device number 56
[ 1337.378827][    C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1337.465894][  T989] team0 (unregistering): Port device team_slave_1 removed
[ 1337.626476][  T989] team0 (unregistering): Port device team_slave_0 removed
[ 1337.826643][T10860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1337.842648][T10860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1337.845589][T10860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1337.847975][T10860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1337.848922][T10860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1338.399256][T20930] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1338.399303][T20930] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1338.399324][T20930] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1338.449102][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4834'.
[ 1338.449130][T20933] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4834'.
[ 1338.449148][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4834'.
[ 1338.449484][T20933] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4834'.
[ 1339.201819][T20949] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1340.641096][T10860] Bluetooth: hci1: command tx timeout
[ 1340.646529][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1340.646612][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1342.370605][T20972] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1342.370649][T20972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1342.370671][T20972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1342.834607][T20054] Bluetooth: hci1: command tx timeout
[ 1343.934125][T20998] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4841'.
[ 1344.783185][T20934] chnl_net:caif_netlink_parms(): no params data found
[ 1345.059296][T20054] Bluetooth: hci1: command tx timeout
[ 1346.232876][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4848'.
[ 1346.232929][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4848'.
[ 1346.232945][T21033] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4848'.
[ 1346.515838][T21032] bridge_slave_0: left allmulticast mode
[ 1346.515869][T21032] bridge_slave_0: left promiscuous mode
[ 1346.516143][T21032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1346.624434][T21032] bridge_slave_1: left allmulticast mode
[ 1346.624463][T21032] bridge_slave_1: left promiscuous mode
[ 1346.624714][T21032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1346.761972][T21032] bond0: (slave bond_slave_0): Releasing backup interface
[ 1346.858030][T21032] bond0: (slave bond_slave_1): Releasing backup interface
[ 1346.942426][T21032] team0: Port device team_slave_0 removed
[ 1346.987683][T21032] team0: Port device team_slave_1 removed
[ 1346.988408][T21032] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1347.038585][T21032] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1347.081077][T21032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1347.284655][T20054] Bluetooth: hci1: command tx timeout
[ 1349.532185][T20934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.532451][T20934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.532694][T20934] bridge_slave_0: entered allmulticast mode
[ 1349.535809][T20934] bridge_slave_0: entered promiscuous mode
[ 1351.071261][T20573] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1351.129864][T20934] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1351.129979][T20934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1351.130206][T20934] bridge_slave_1: entered allmulticast mode
[ 1351.155821][T20934] bridge_slave_1: entered promiscuous mode
[ 1351.161169][T20573] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1351.328649][T20573] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1351.489109][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.489538][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1352.759469][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1353.072799][T20573] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1353.089865][T21124] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1353.165061][T20934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1353.192720][T20934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1353.476170][T21132] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4869'.
[ 1353.612910][T20934] team0: Port device team_slave_0 added
[ 1353.639474][T20934] team0: Port device team_slave_1 added
[ 1353.849079][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.768163][T20934] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1354.768184][T20934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1354.768216][T20934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1354.822231][T20934] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1354.822251][T20934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1354.822281][T20934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1355.071295][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1355.283423][ T9308] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1355.307837][  T989] bridge_slave_1: left allmulticast mode
[ 1355.307866][  T989] bridge_slave_1: left promiscuous mode
[ 1355.308097][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1355.563018][  T989] bridge_slave_0: left allmulticast mode
[ 1355.563051][  T989] bridge_slave_0: left promiscuous mode
[ 1355.563311][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.594078][ T9308] usb 8-1: Using ep0 maxpacket: 16
[ 1356.342483][ T9308] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1356.342517][ T9308] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1356.349047][ T9308] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1356.349078][ T9308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.349099][ T9308] usb 8-1: Product: syz
[ 1356.349114][ T9308] usb 8-1: Manufacturer: syz
[ 1356.349130][ T9308] usb 8-1: SerialNumber: syz
[ 1356.372702][ T9308] usb 8-1: config 0 descriptor??
[ 1356.388536][ T9308] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1356.388574][ T9308] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 1356.617163][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1357.536731][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1357.537082][ T9308] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1357.538462][ T9308] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[ 1357.664126][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1358.171811][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1358.396931][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1358.581944][  T989] bond0 (unregistering): Released all slaves
[ 1358.629260][ T9308] em28xx 8-1:0.0: Unknown AC97 audio processor detected!
[ 1358.630683][ T9308] em28xx 8-1:0.0: couldn't setup AC97 register 2
[ 1358.631382][ T9308] em28xx 8-1:0.0: couldn't setup AC97 register 4
[ 1358.632488][ T9308] em28xx 8-1:0.0: couldn't setup AC97 register 6
[ 1358.633024][ T9308] em28xx 8-1:0.0: couldn't setup AC97 register 54
[ 1358.633471][ T9308] em28xx 8-1:0.0: couldn't setup AC97 register 56
[ 1358.652372][ T9308] usb 8-1: USB disconnect, device number 57
[ 1358.700800][T20934] hsr_slave_0: entered promiscuous mode
[ 1358.701741][T20934] hsr_slave_1: entered promiscuous mode
[ 1358.702359][T20934] debugfs: 'hsr0' already exists in 'hsr'
[ 1358.702383][T20934] Cannot create hsr debugfs directory
[ 1359.021797][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1359.064232][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1359.163517][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1359.278194][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1359.324265][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1359.981078][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1360.047368][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1360.287973][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1360.406719][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1360.528238][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1360.798537][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1361.249765][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1361.344150][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4893'.
[ 1361.344188][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4893'.
[ 1361.344198][T21209] netlink: 'syz.7.4893': attribute type 1 has an invalid length.
[ 1361.344207][T21209] netlink: 10 bytes leftover after parsing attributes in process `syz.7.4893'.
[ 1361.344220][T21209] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1361.739788][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1361.764748][  T989] hsr_slave_0: left promiscuous mode
[ 1361.786219][  T989] hsr_slave_1: left promiscuous mode
[ 1361.786935][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1361.840985][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1362.229510][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.283893][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.391078][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.562203][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.621135][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.686861][  T989] team0 (unregistering): Port device team_slave_1 removed
[ 1362.789214][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.856096][  T989] team0 (unregistering): Port device team_slave_0 removed
[ 1362.896607][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.941832][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.173445][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.234458][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.273450][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4897'.
[ 1363.655274][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.727202][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1363.896622][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.451470][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.659009][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1364.706535][T21208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1364.791412][ T9308] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1365.041014][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1365.384346][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.032606][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.090399][ T9308] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1366.090431][ T9308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.090452][ T9308] usb 7-1: Product: syz
[ 1366.090467][ T9308] usb 7-1: Manufacturer: syz
[ 1366.090482][ T9308] usb 7-1: SerialNumber: syz
[ 1366.394803][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.625120][ T9308] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1366.625572][ T9308] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1366.700871][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.782983][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1366.856145][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1367.117368][ T9308] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1367.117430][ T9308] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1367.118461][ T9308] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1367.129936][T20573] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1367.203982][ T9308] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32
[ 1367.218308][T20573] 8021q: adding VLAN 0 to HW filter on device team0
[ 1367.400183][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.400378][ T9029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1368.007854][T21253] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1368.226957][ T5876] usb 7-1: USB disconnect, device number 49
[ 1368.532034][T10860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1368.559154][T10860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1368.560679][T10860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1368.562512][T10860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1368.565348][T10860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1368.632592][ T5876] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1368.828296][ T5876] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1368.828339][ T5876] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1368.828368][ T5876] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1368.828413][ T5876] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1368.828438][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.925519][T21258] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1370.813010][T20054] Bluetooth: hci3: command tx timeout
[ 1371.062375][T20934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1371.142211][T20934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1371.845360][T20934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1371.905240][T20934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1372.034749][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4912'.
[ 1372.475074][ T5876] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1372.480693][ T5876] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input21
[ 1372.765965][ T5876] usb 7-1: USB disconnect, device number 50
[ 1372.766047][    C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1373.038128][T20054] Bluetooth: hci3: command tx timeout
[ 1373.350333][ T9308] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1373.390322][ T5876] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1373.429495][T21265] chnl_net:caif_netlink_parms(): no params data found
[ 1373.518849][ T9308] usb 8-1: Using ep0 maxpacket: 16
[ 1373.523177][ T9308] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1373.523202][ T9308] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1373.537580][ T9308] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1373.537617][ T9308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.537644][ T9308] usb 8-1: Product: syz
[ 1373.537662][ T9308] usb 8-1: Manufacturer: syz
[ 1373.537681][ T9308] usb 8-1: SerialNumber: syz
[ 1373.624132][ T5876] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1373.624165][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.624188][ T5876] usb 7-1: Product: syz
[ 1373.624213][ T5876] usb 7-1: Manufacturer: syz
[ 1373.624227][ T5876] usb 7-1: SerialNumber: syz
[ 1373.787109][ T9308] usb 8-1: 0:2 : does not exist
[ 1373.834527][T20934] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1373.848337][ T9308] usb 8-1: USB disconnect, device number 58
[ 1373.994378][T21228] udevd[21228]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1374.128738][ T5876] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1374.128818][ T5876] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1374.754366][ T5876] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1374.754422][ T5876] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1374.755248][ T5876] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1374.796380][T21265] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1374.796527][T21265] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1374.796795][T21265] bridge_slave_0: entered allmulticast mode
[ 1374.806094][T21265] bridge_slave_0: entered promiscuous mode
[ 1374.837326][T21340] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1374.861692][ T5876] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32
[ 1374.884421][T21265] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.884630][T21265] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1374.884841][T21265] bridge_slave_1: entered allmulticast mode
[ 1374.887956][T21265] bridge_slave_1: entered promiscuous mode
[ 1375.039767][ T6210] bridge_slave_1: left allmulticast mode
[ 1375.039869][ T6210] bridge_slave_1: left promiscuous mode
[ 1375.040053][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.104717][ T6210] bridge_slave_0: left allmulticast mode
[ 1375.104748][ T6210] bridge_slave_0: left promiscuous mode
[ 1375.105033][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.262490][T20054] Bluetooth: hci3: command tx timeout
[ 1376.080176][T19822] usb 7-1: USB disconnect, device number 51
[ 1377.497349][T20054] Bluetooth: hci3: command tx timeout
[ 1377.497954][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1377.586568][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1377.675392][ T6210] bond0 (unregistering): Released all slaves
[ 1377.831435][T20934] 8021q: adding VLAN 0 to HW filter on device team0
[ 1377.979038][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4923'.
[ 1378.037141][T21265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1378.064206][T21265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1378.470640][T19822] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 1378.658216][T19822] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1378.658252][T19822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.658274][T19822] usb 8-1: Product: syz
[ 1378.658291][T19822] usb 8-1: Manufacturer: syz
[ 1378.658307][T19822] usb 8-1: SerialNumber: syz
[ 1378.973251][ T6210] hsr_slave_0: left promiscuous mode
[ 1378.994615][ T6210] hsr_slave_1: left promiscuous mode
[ 1378.995806][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1379.164014][T19822] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1379.164069][T19822] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1379.164961][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1379.602195][T19822] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1379.602251][T19822] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1379.603149][T19822] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1379.628930][T19822] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1380.177281][ T6210] team0 (unregistering): Port device team_slave_1 removed
[ 1380.398652][ T6210] team0 (unregistering): Port device team_slave_0 removed
[ 1380.719325][T21399] netlink: 'syz.8.4931': attribute type 4 has an invalid length.
[ 1381.489920][T15784] usb 8-1: USB disconnect, device number 59
[ 1382.892302][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1382.893819][ T9022] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1383.134569][T21265] team0: Port device team_slave_0 added
[ 1383.140417][T21265] team0: Port device team_slave_1 added
[ 1383.373384][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1383.373520][ T9022] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1383.524898][T21415] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4936'.
[ 1383.651680][T21265] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1383.651699][T21265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1383.651728][T21265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1383.663657][T21265] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1383.663679][T21265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1383.663714][T21265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1383.987184][T21419] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4938'.
[ 1384.198426][T21265] hsr_slave_0: entered promiscuous mode
[ 1384.199797][T21265] hsr_slave_1: entered promiscuous mode
[ 1387.771229][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4946'.
[ 1388.449444][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4948'.
[ 1388.824382][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1389.946094][T20934] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1390.410961][T20934] veth0_vlan: entered promiscuous mode
[ 1390.488313][T20934] veth1_vlan: entered promiscuous mode
[ 1390.642828][T20934] veth0_macvtap: entered promiscuous mode
[ 1390.675615][T20934] veth1_macvtap: entered promiscuous mode
[ 1390.796823][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1390.885154][T20934] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1390.993489][T20934] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1391.277710][ T9023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.285682][ T9023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.289889][ T9023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.290929][ T9023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.648309][T21265] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1391.719460][T21265] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1391.817907][T21265] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1391.936690][T21265] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1392.142992][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1392.143012][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1392.377303][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1392.377358][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1392.737042][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1392.958903][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1393.107707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1393.193579][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1393.811793][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1393.954400][T21265] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1393.955041][T21556] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4957'.
[ 1394.062803][T21560] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4956'.
[ 1394.127857][T21265] 8021q: adding VLAN 0 to HW filter on device team0
[ 1394.161518][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1394.162879][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1394.236622][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1394.237118][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1394.545957][T21571] netlink: 'syz.6.4958': attribute type 13 has an invalid length.
[ 1394.545977][T21571] netlink: 'syz.6.4958': attribute type 17 has an invalid length.
[ 1394.554536][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4959'.
[ 1394.863967][T21571] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1394.874533][T21571] 8021q: adding VLAN 0 to HW filter on device team0
[ 1395.155085][T21571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1395.397284][T21587] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1396.897521][T21265] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1397.895345][T21265] veth0_vlan: entered promiscuous mode
[ 1397.917623][T21265] veth1_vlan: entered promiscuous mode
[ 1397.980698][T21626] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4968'.
[ 1398.003781][T21265] veth0_macvtap: entered promiscuous mode
[ 1398.019496][T21265] veth1_macvtap: entered promiscuous mode
[ 1398.070304][T21265] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1398.105265][T21265] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1398.152672][ T3204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1398.154028][ T3204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1398.154494][ T3204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1398.156737][ T3204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1398.362863][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4969'.
[ 1398.679092][T21639] fuse: Bad value for 'rootmode'
[ 1398.856588][T15505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1398.856737][T15505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1399.207518][T14286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1399.207541][T14286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1402.552536][T21673] fuse: Bad value for 'rootmode'
[ 1403.999880][T21680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4979'.
[ 1406.325502][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1406.325606][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1407.422346][T21731] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1409.928052][T21757] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1416.929979][T21824] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1418.722396][T21864] netlink: 'syz.6.5013': attribute type 13 has an invalid length.
[ 1418.722420][T21864] netlink: 'syz.6.5013': attribute type 17 has an invalid length.
[ 1418.762396][T21864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1419.494614][T21887] netlink: 'syz.7.5018': attribute type 13 has an invalid length.
[ 1419.494637][T21887] netlink: 'syz.7.5018': attribute type 17 has an invalid length.
[ 1420.130812][T21887] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1420.249932][T21887] 8021q: adding VLAN 0 to HW filter on device team0
[ 1420.445285][T21887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1421.519011][ T9307] usb 7-1: new full-speed USB device number 52 using dummy_hcd
[ 1421.702620][ T9307] usb 7-1: config 0 has an invalid interface number: 239 but max is 0
[ 1421.702652][ T9307] usb 7-1: config 0 has no interface number 0
[ 1421.704535][ T9307] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64
[ 1421.704568][ T9307] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[ 1421.716941][ T9307] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1421.716981][ T9307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1421.717006][ T9307] usb 7-1: Product: syz
[ 1421.717024][ T9307] usb 7-1: Manufacturer: syz
[ 1421.717042][ T9307] usb 7-1: SerialNumber: syz
[ 1421.740825][ T9307] usb 7-1: config 0 descriptor??
[ 1422.013873][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5025'.
[ 1422.109758][T21942] fuse: Bad value for 'rootmode'
[ 1422.444122][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1423.268747][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1423.358876][ T9307] asix 7-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1423.359163][ T9307] asix 7-1:0.239: probe with driver asix failed with error -71
[ 1423.474455][ T9307] usb 7-1: USB disconnect, device number 52
[ 1425.338196][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1425.781441][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1427.080807][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1427.222775][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1427.431470][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1428.041043][T22009] fuse: root generation should be zero
[ 1429.302749][T10860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1429.335398][T10860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1429.345175][T10860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1429.353563][T10860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1429.355077][T10860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1429.455413][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1431.561745][T20054] Bluetooth: hci0: command tx timeout
[ 1432.731323][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5050'.
[ 1432.731351][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5050'.
[ 1433.786481][T20054] Bluetooth: hci0: command tx timeout
[ 1434.734575][T22097] overlayfs: failed to resolve './file1': -2
[ 1436.013469][T20054] Bluetooth: hci0: command tx timeout
[ 1437.530693][T22117] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1438.236252][T20054] Bluetooth: hci0: command tx timeout
[ 1438.665498][T20054] Bluetooth: hci5: unexpected event for opcode 0x080e
[ 1439.686728][T22034] chnl_net:caif_netlink_parms(): no params data found
[ 1441.130560][T22188] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1442.741102][T22189] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1443.141017][T22201] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1443.819224][T22202] netlink: 'syz.8.5084': attribute type 4 has an invalid length.
[ 1446.925280][T14286] bond0 (unregistering): Released all slaves
[ 1447.558212][T22206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1447.574256][T22206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1448.286127][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1448.298851][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1450.512104][T22211] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1450.794174][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5095'.
[ 1450.912589][T18322] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1450.914085][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5096'.
[ 1450.914111][T22243] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5096'.
[ 1450.914131][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5096'.
[ 1450.914402][T22243] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5096'.
[ 1451.551681][T18322] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1451.670876][T22034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.671016][T22034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1451.671257][T22034] bridge_slave_0: entered allmulticast mode
[ 1451.690145][T22034] bridge_slave_0: entered promiscuous mode
[ 1451.718655][T18322] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1451.991389][T18322] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1451.991668][T22034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1451.991793][T22034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1451.992042][T22034] bridge_slave_1: entered allmulticast mode
[ 1451.996188][T22034] bridge_slave_1: entered promiscuous mode
[ 1453.314608][T22034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1453.314687][T22274] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5103'.
[ 1453.314712][T22274] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5103'.
[ 1453.469479][T22034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1453.666326][T14286] hsr_slave_0: left promiscuous mode
[ 1453.701263][T14286] hsr_slave_1: left promiscuous mode
[ 1455.590673][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'.
[ 1457.292840][T22334] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1462.943522][T22298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5108'.
[ 1462.943546][T22298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5108'.
[ 1462.943562][T22298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5108'.
[ 1462.943766][T22298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5108'.
[ 1464.526546][T22382] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5121'.
[ 1464.526569][T22382] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5121'.
[ 1464.829091][T22034] team0: Port device team_slave_0 added
[ 1464.868020][T22034] team0: Port device team_slave_1 added
[ 1465.728014][T22034] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1465.728033][T22034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1465.728062][T22034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1465.731862][T22034] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1465.731878][T22034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1465.731905][T22034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1465.933568][T22397] fuse: Bad value for 'rootmode'
[ 1467.390414][T22399] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5127'.
[ 1467.390443][T22399] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5127'.
[ 1467.390461][T22399] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5127'.
[ 1467.390686][T22399] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5127'.
[ 1469.143267][T22034] hsr_slave_0: entered promiscuous mode
[ 1469.145090][T22034] hsr_slave_1: entered promiscuous mode
[ 1469.146115][T22034] debugfs: 'hsr0' already exists in 'hsr'
[ 1469.146140][T22034] Cannot create hsr debugfs directory
[ 1469.352774][T22427] overlayfs: failed to resolve './file1': -2
[ 1469.642125][T20054] Bluetooth: hci1: command 0x0406 tx timeout
[ 1469.703314][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5136'.
[ 1470.019065][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1470.901428][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1471.326299][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5139'.
[ 1471.326324][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5139'.
[ 1471.655673][T22455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5140'.
[ 1471.655699][T22455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5140'.
[ 1471.655716][T22455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5140'.
[ 1471.655947][T22455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5140'.
[ 1472.037056][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1472.037139][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1472.152684][T22469] fuse: Bad value for 'rootmode'
[ 1472.186832][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1472.638378][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1474.032858][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1474.401644][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1477.352561][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5152'.
[ 1477.647953][T22526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5153'.
[ 1477.647977][T22526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5153'.
[ 1478.528316][T22034] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1478.635300][T22034] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1478.724400][T22034] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1478.806735][T22034] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1478.884094][T22541] netlink: 'syz.7.5155': attribute type 4 has an invalid length.
[ 1479.217511][T22034] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1479.556103][T22034] 8021q: adding VLAN 0 to HW filter on device team0
[ 1480.368715][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.368849][ T9029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1480.462418][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.462560][ T9029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1481.305102][ T9285] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 1481.476301][ T9285] usb 8-1: Using ep0 maxpacket: 32
[ 1481.483235][ T9285] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1481.483264][ T9285] usb 8-1: config 0 has no interface number 0
[ 1481.483314][ T9285] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1481.573577][ T9285] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1481.573611][ T9285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.573633][ T9285] usb 8-1: Product: syz
[ 1481.573650][ T9285] usb 8-1: Manufacturer: syz
[ 1481.573666][ T9285] usb 8-1: SerialNumber: syz
[ 1481.617267][ T9285] usb 8-1: config 0 descriptor??
[ 1481.635136][ T9285] smsc75xx v1.0.0
[ 1482.287580][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1482.287613][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1483.013467][T22034] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1483.111685][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[ 1483.111719][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[ 1483.111740][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1483.112155][ T9285] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[ 1483.165776][T15784] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[ 1484.385330][T15784] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1484.385361][T15784] usb 5-1: config 0 has no interface number 0
[ 1484.385408][T15784] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64
[ 1484.385436][T15784] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[ 1484.389250][T15784] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1484.389277][T15784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.389297][T15784] usb 5-1: Product: syz
[ 1484.389311][T15784] usb 5-1: Manufacturer: syz
[ 1484.389326][T15784] usb 5-1: SerialNumber: syz
[ 1484.408054][T15784] usb 5-1: config 0 descriptor??
[ 1484.624527][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5163'.
[ 1484.669367][T15784] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1484.669653][T15784] asix 5-1:0.239: probe with driver asix failed with error -71
[ 1484.712205][T15784] usb 5-1: USB disconnect, device number 28
[ 1485.352073][T22034] veth0_vlan: entered promiscuous mode
[ 1485.440197][T22034] veth1_vlan: entered promiscuous mode
[ 1485.634848][T19822] usb 8-1: USB disconnect, device number 60
[ 1485.676840][T22034] veth0_macvtap: entered promiscuous mode
[ 1485.765001][ T5876] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1485.819072][T22034] veth1_macvtap: entered promiscuous mode
[ 1485.951632][ T5876] usb 5-1: Using ep0 maxpacket: 32
[ 1485.996850][ T5876] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1485.996880][ T5876] usb 5-1: config 0 has no interface number 0
[ 1486.108770][T22034] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1486.366670][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1486.366702][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1486.366724][ T5876] usb 5-1: Product: syz
[ 1486.366739][ T5876] usb 5-1: Manufacturer: syz
[ 1486.366754][ T5876] usb 5-1: SerialNumber: syz
[ 1486.457167][T22034] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1486.469136][ T5876] usb 5-1: config 0 descriptor??
[ 1486.509139][T22627] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1486.558834][ T5876] smsc95xx v2.0.0
[ 1486.616529][T22629] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1486.682995][T21552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.685114][T21552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.687494][T21552] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.687543][T21552] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.113520][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1487.113553][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1488.853519][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1488.853708][ T5876] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61
[ 1489.352602][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1489.352627][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1489.455769][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1489.455791][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1489.949245][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1492.016089][T15784] usb 5-1: USB disconnect, device number 29
[ 1492.221727][T15478] usb 7-1: new full-speed USB device number 53 using dummy_hcd
[ 1492.515269][T15478] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1492.515301][T15478] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1492.755611][T15478] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1492.755642][T15478] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1492.755663][T15478] usb 7-1: Product: syz
[ 1492.755677][T15478] usb 7-1: Manufacturer: syz
[ 1492.755692][T15478] usb 7-1: SerialNumber: syz
[ 1492.871955][T15478] usb 7-1: config 0 descriptor??
[ 1492.897042][T15478] usb 7-1: selecting invalid altsetting 0
[ 1493.246930][T22682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5177'.
[ 1493.249726][T15478] usb 7-1: USB disconnect, device number 53
[ 1493.315075][T22594] udevd[22594]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1496.071235][T10860] Bluetooth: hci2: command 0x0406 tx timeout
[ 1498.452697][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1498.798956][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.442427][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1499.597830][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5192'.
[ 1501.195931][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1501.785709][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1501.810278][T20054] Bluetooth: hci3: command 0x0406 tx timeout
[ 1502.398876][T22777] netlink: 'syz.7.5197': attribute type 4 has an invalid length.
[ 1502.544540][T22790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5201'.
[ 1502.663115][ T9285] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[ 1503.011857][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1503.084601][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1503.116251][ T9285] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1503.116282][ T9285] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1504.143472][ T9285] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1504.143503][ T9285] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1504.143523][ T9285] usb 1-1: Product: syz
[ 1504.143537][ T9285] usb 1-1: Manufacturer: syz
[ 1504.143550][ T9285] usb 1-1: SerialNumber: syz
[ 1504.157681][ T9285] usb 1-1: config 0 descriptor??
[ 1504.253434][ T9285] usb 1-1: selecting invalid altsetting 0
[ 1504.968801][ T9308] usb 1-1: USB disconnect, device number 30
[ 1505.099285][T17569] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1506.324086][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5208'.
[ 1506.425310][T22828] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5210'.
[ 1506.425368][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'.
[ 1506.425384][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5210'.
[ 1506.439759][T17569] usb 8-1: Using ep0 maxpacket: 32
[ 1506.442488][T17569] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1506.442519][T17569] usb 8-1: config 0 has no interface number 0
[ 1506.442572][T17569] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1506.447534][T17569] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1506.447567][T17569] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1506.447592][T17569] usb 8-1: Product: syz
[ 1506.447608][T17569] usb 8-1: Manufacturer: syz
[ 1506.447625][T17569] usb 8-1: SerialNumber: syz
[ 1506.480231][T17569] usb 8-1: config 0 descriptor??
[ 1506.514658][T17569] smsc75xx v1.0.0
[ 1507.971290][T22855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5214'.
[ 1508.327307][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[ 1508.327343][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1508.332020][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1508.332052][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1508.332074][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1508.332094][T17569] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1508.332388][T17569] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[ 1508.397578][T22866] fuse: Bad value for 'rootmode'
[ 1508.413560][T17569] usb 8-1: USB disconnect, device number 61
[ 1508.924342][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5219'.
[ 1509.525809][T22894] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1510.291710][T22913] kvm: user requested TSC rate below hardware speed
[ 1511.771106][T22922] fuse: Bad value for 'rootmode'
[ 1511.828738][T19815] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1511.994128][T19815] usb 8-1: Using ep0 maxpacket: 32
[ 1512.008758][T22924] netlink: 'syz.6.5228': attribute type 13 has an invalid length.
[ 1512.008785][T22924] netlink: 'syz.6.5228': attribute type 17 has an invalid length.
[ 1512.027340][T19815] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1512.027373][T19815] usb 8-1: config 0 has no interface number 0
[ 1512.027432][T19815] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1512.031120][T19815] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1512.031153][T19815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.031176][T19815] usb 8-1: Product: syz
[ 1512.031193][T19815] usb 8-1: Manufacturer: syz
[ 1512.031209][T19815] usb 8-1: SerialNumber: syz
[ 1512.109932][T19815] usb 8-1: config 0 descriptor??
[ 1512.163806][T19815] smsc75xx v1.0.0
[ 1512.631054][T22924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1512.730215][T22939] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5233'.
[ 1512.799678][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1512.799711][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1512.800839][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1512.800866][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1512.800886][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1512.800904][T19815] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1512.801178][T19815] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[ 1513.348510][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5238'.
[ 1514.297054][T22970] fuse: Bad value for 'rootmode'
[ 1515.076511][T17568] usb 8-1: USB disconnect, device number 62
[ 1515.520641][T23003] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5245'.
[ 1515.914306][T19815] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1515.970115][T23022] fuse: Bad value for 'rootmode'
[ 1516.077633][T19815] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1516.077669][T19815] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1516.080948][T19815] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1516.080979][T19815] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1516.081001][T19815] usb 5-1: Product: syz
[ 1516.081015][T19815] usb 5-1: Manufacturer: syz
[ 1516.081030][T19815] usb 5-1: SerialNumber: syz
[ 1516.146931][T19815] usb 5-1: config 0 descriptor??
[ 1516.168925][T19815] usb 5-1: selecting invalid altsetting 0
[ 1516.425725][T19815] usb 5-1: USB disconnect, device number 30
[ 1521.641464][T23086] fuse: Bad value for 'rootmode'
[ 1522.197669][T23095] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1525.554034][T23125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1525.649588][T23125] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1526.219872][T23143] Bluetooth: MGMT ver 1.23
[ 1527.292292][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1527.368527][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1527.438782][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1527.811361][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1528.829923][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1529.508490][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1529.803031][T23174] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1529.815933][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1530.575061][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1530.716147][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1531.483660][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1531.581828][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1531.965533][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1532.642521][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1535.728464][T23245] fuse: Bad value for 'rootmode'
[ 1538.149392][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1538.159347][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1540.974140][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1541.058237][T23301] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1541.125153][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1541.572128][T23307] netlink: 'syz.0.5305': attribute type 1 has an invalid length.
[ 1541.572154][T23307] netlink: 'syz.0.5305': attribute type 3 has an invalid length.
[ 1541.572170][T23307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5305'.
[ 1541.843220][T23311] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5307'.
[ 1542.202683][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1542.442258][T23320] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1543.026134][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1543.477341][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1545.116862][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1545.442302][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1546.033388][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1546.096571][T15541] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[ 1546.335308][T15541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1546.335372][T15541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1546.335414][T15541] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1546.335440][T15541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.354396][T15541] usb 8-1: config 0 descriptor??
[ 1546.727098][T15478] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1546.861392][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861441][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861465][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861506][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861531][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861557][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.861591][T15541] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 1546.877506][T15541] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[ 1546.941035][T15478] usb 1-1: Using ep0 maxpacket: 16
[ 1546.948120][T15478] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1546.948148][T15478] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1546.981240][T15478] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1546.981275][T15478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.981297][T15478] usb 1-1: Product: syz
[ 1546.981313][T15478] usb 1-1: Manufacturer: syz
[ 1546.981338][T15478] usb 1-1: SerialNumber: syz
[ 1547.055729][T15541] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[ 1547.265074][T15478] usb 1-1: 0:2 : does not exist
[ 1547.271407][T15541] cp2112 0003:10C4:EA90.0009: error requesting SMBus config
[ 1547.271815][T15478] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1547.305965][T15541] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71
[ 1547.340338][T15541] usb 8-1: USB disconnect, device number 63
[ 1547.551632][T15478] usb 1-1: USB disconnect, device number 31
[ 1547.619488][T23353] udevd[23353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1548.328141][T23401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1549.988901][T23417] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1550.031165][T23417] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1551.457828][T23431] netlink: 'syz.6.5325': attribute type 4 has an invalid length.
[ 1555.141231][T15478] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1557.874728][T23491] fuse: Bad value for 'rootmode'
[ 1558.716723][T17569] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1559.000235][T17569] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1559.000267][T17569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1559.000288][T17569] usb 1-1: Product: syz
[ 1559.000303][T17569] usb 1-1: Manufacturer: syz
[ 1559.000318][T17569] usb 1-1: SerialNumber: syz
[ 1559.542803][T17569] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1559.542873][T17569] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1559.545642][T23499] netlink: 'syz.0.5340': attribute type 1 has an invalid length.
[ 1559.545901][T23499] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1559.545917][T23499] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1559.598035][T17569] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1559.598096][T17569] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1559.598973][T17569] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1559.663325][T17569] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1559.681967][T17569] usb 1-1: USB disconnect, device number 32
[ 1559.700581][T15541] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1559.871914][T15541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1559.871947][T15541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1559.871994][T15541] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1559.872018][T15541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.975530][T15541] usb 5-1: config 0 descriptor??
[ 1561.271608][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271646][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271675][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271703][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271729][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271756][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.271783][T15541] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[ 1561.344870][T15541] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1561.462107][T15541] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE
[ 1561.678380][T15541] cp2112 0003:10C4:EA90.000A: error requesting SMBus config
[ 1561.735840][T15541] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32
[ 1561.754683][T15541] usb 5-1: USB disconnect, device number 32
[ 1561.762309][T23539] fido_id[23539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:10C4:EA90.000A/report_descriptor': No such file or directory
[ 1561.871471][T10860] Bluetooth: hci0: command 0x0406 tx timeout
[ 1562.444213][T23550] fuse: Bad value for 'rootmode'
[ 1563.400018][T23565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1563.437055][T23565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1564.076105][T19822] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1564.288544][T19822] usb 1-1: Using ep0 maxpacket: 16
[ 1564.291059][T19822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1564.291091][T19822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1564.295363][T19822] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1564.295392][T19822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.295412][T19822] usb 1-1: Product: syz
[ 1564.295426][T19822] usb 1-1: Manufacturer: syz
[ 1564.295441][T19822] usb 1-1: SerialNumber: syz
[ 1564.365530][T19822] usb 1-1: config 0 descriptor??
[ 1564.391864][T19822] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1564.391901][T19822] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1565.103945][T19822] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1565.105368][T19822] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1565.826285][T19822] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1566.045092][T19822] em28xx 1-1:0.0: couldn't setup AC97 register 2
[ 1566.045554][T19822] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1566.045995][T19822] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1566.046386][T19822] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1566.046796][T19822] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1566.054862][T19822] usb 1-1: USB disconnect, device number 33
[ 1566.500288][T23602] netlink: 'syz.8.5360': attribute type 4 has an invalid length.
[ 1568.320727][T15541] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1568.449102][T23629] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1568.481269][T15541] usb 8-1: Using ep0 maxpacket: 16
[ 1568.488475][T15541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1568.488508][T15541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1568.488532][T15541] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1568.488577][T15541] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1568.488602][T15541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.573864][T15541] usb 8-1: config 0 descriptor??
[ 1568.609505][T19822] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1568.780683][T19822] usb 7-1: Using ep0 maxpacket: 32
[ 1568.783171][T19822] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1568.783199][T19822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1568.783274][T19822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1568.783298][T19822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 1568.783321][T19822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1568.786015][T19822] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1568.786032][T19822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1568.786045][T19822] usb 7-1: Product: syz
[ 1568.786054][T19822] usb 7-1: Manufacturer: syz
[ 1568.786113][T19822] usb 7-1: SerialNumber: syz
[ 1568.882040][T19822] usb 7-1: config 0 descriptor??
[ 1569.075864][T15541] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000B/input/input23
[ 1569.135974][T15541] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[ 1569.864162][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.864215][T19822] input input22: Device does not respond to id packet M
[ 1569.864653][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.864697][T19822] input input22: Device does not respond to id packet P
[ 1569.873834][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.873881][T19822] input input22: Device does not respond to id packet B
[ 1569.874452][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.874493][T19822] input input22: Device does not respond to id packet N
[ 1569.874935][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.875385][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.875890][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.876350][T19822] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1569.876846][T19822] iforce 7-1:0.0: usb_submit_urb failed -90
[ 1569.877393][T19822] iforce 7-1:0.0: usb_submit_urb failed -90
[ 1569.880796][T19822] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22
[ 1569.945259][T17569] usb 8-1: USB disconnect, device number 64
[ 1570.052350][T19822] usb 7-1: USB disconnect, device number 55
[ 1570.126858][T23643] fido_id[23643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[ 1572.028367][T23666] binder: 23665:23666 ioctl 4018620d 0 returned -22
[ 1572.030859][T23666] binder: 23665:23666 unknown command 0
[ 1572.030880][T23666] binder: 23665:23666 ioctl c0306201 200000000080 returned -22
[ 1572.079426][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5377'.
[ 1572.470409][T19822] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[ 1573.542248][T23685] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1573.568397][T23685] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1574.936697][T19822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1574.936730][T19822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1574.936770][T19822] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1574.936793][T19822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.995708][T19822] usb 8-1: config 0 descriptor??
[ 1575.510773][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.510836][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.510889][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.510960][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.511020][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.511072][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.511109][T19822] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1575.515309][T19822] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[ 1575.716066][T19822] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00
[ 1575.929874][T19822] cp2112 0003:10C4:EA90.000C: error requesting SMBus config
[ 1575.932722][T19822] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -32
[ 1575.969399][T19822] usb 8-1: USB disconnect, device number 65
[ 1576.114696][T23702] fido_id[23702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1576.729385][T23696] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1576.733701][T23696] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1579.896460][T23696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1579.933779][T23696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1581.261112][T21552] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.344125][T21552] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.344183][T21552] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.344223][T21552] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.513294][T23774] binder: 23773:23774 unknown command 0
[ 1581.513317][T23774] binder: 23773:23774 ioctl c0306201 200000000080 returned -22
[ 1585.976327][T19822] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1585.999802][T17569] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1586.171973][T17569] usb 5-1: Using ep0 maxpacket: 16
[ 1586.177320][T19822] usb 1-1: Using ep0 maxpacket: 16
[ 1586.686441][T17569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.686471][T17569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1586.695300][T19822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1586.695331][T19822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1586.711853][T19822] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1586.711887][T19822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.711911][T19822] usb 1-1: Product: syz
[ 1586.711927][T19822] usb 1-1: Manufacturer: syz
[ 1586.711944][T19822] usb 1-1: SerialNumber: syz
[ 1586.725140][T17569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1586.725168][T17569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.725189][T17569] usb 5-1: Product: syz
[ 1586.725215][T17569] usb 5-1: Manufacturer: syz
[ 1586.725229][T17569] usb 5-1: SerialNumber: syz
[ 1587.262825][T17569] usb 5-1: 0:2 : does not exist
[ 1587.270695][T17569] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1588.349170][T17569] usb 5-1: USB disconnect, device number 33
[ 1588.565480][T19822] usb 1-1: 0:2 : does not exist
[ 1588.571003][T19822] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1588.870464][T23797] udevd[23797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1589.012606][T23828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1589.027634][T19822] usb 1-1: USB disconnect, device number 34
[ 1589.206843][T23837] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1590.134662][T23833] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1592.941159][T19822] usb 8-1: new high-speed USB device number 66 using dummy_hcd
[ 1593.110247][T19822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1593.110284][T19822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1593.110339][T19822] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1593.110364][T19822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.167439][T19822] usb 8-1: config 0 descriptor??
[ 1593.422328][T22830] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1593.593450][T22830] usb 7-1: Using ep0 maxpacket: 16
[ 1593.595905][T22830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1593.595930][T22830] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1593.599074][T22830] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1593.599103][T22830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.599125][T22830] usb 7-1: Product: syz
[ 1593.599140][T22830] usb 7-1: Manufacturer: syz
[ 1593.599155][T22830] usb 7-1: SerialNumber: syz
[ 1593.604027][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[ 1593.668264][T19822] usbhid 8-1:0.0: can't add hid device: -71
[ 1593.668405][T19822] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1593.678252][T19822] usb 8-1: USB disconnect, device number 66
[ 1593.850747][T23875] netlink: 'syz.4.5426': attribute type 1 has an invalid length.
[ 1593.924481][T23877] binder: 23876:23877 unknown command 0
[ 1593.924502][T23877] binder: 23876:23877 ioctl c0306201 200000000080 returned -22
[ 1594.017953][T22830] usb 7-1: 0:2 : does not exist
[ 1594.035345][T22830] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1594.748953][T22830] usb 7-1: USB disconnect, device number 56
[ 1594.856679][T23819] udevd[23819]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1595.914306][T17569] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1596.074645][T17569] usb 7-1: Using ep0 maxpacket: 8
[ 1596.084826][T17569] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1596.084859][T17569] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.084881][T17569] usb 7-1: Product: syz
[ 1596.084896][T17569] usb 7-1: Manufacturer: syz
[ 1596.084912][T17569] usb 7-1: SerialNumber: syz
[ 1596.137937][T17569] usb 7-1: config 0 descriptor??
[ 1596.431398][T23914] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5438'.
[ 1596.572556][T17569] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 1596.770047][T23920] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1597.334793][T17569] usb write operation failed. (-71)
[ 1597.405615][T17569] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1597.406264][T17569] dvbdev: DVB: registering new adapter (Terratec H7)
[ 1597.406322][T17569] usb 7-1: media controller created
[ 1597.439607][T17569] usb read operation failed. (-71)
[ 1597.443765][T17569] usb write operation failed. (-71)
[ 1597.470380][T17569] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 1597.538269][T17569] usb 7-1: USB disconnect, device number 57
[ 1598.202671][T23936] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1601.946557][T23963] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5453'.
[ 1602.331757][T17569] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1603.068243][T17569] usb 7-1: Using ep0 maxpacket: 32
[ 1604.268825][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1604.268918][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1604.605806][T17569] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1604.605841][T17569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1604.605866][T17569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1604.605889][T17569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1604.605915][T17569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1604.641569][T23994] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1604.664623][T17569] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1604.664654][T17569] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1604.664677][T17569] usb 7-1: Product: syz
[ 1604.664692][T17569] usb 7-1: Manufacturer: syz
[ 1604.664708][T17569] usb 7-1: SerialNumber: syz
[ 1604.685636][T17569] usb 7-1: config 0 descriptor??
[ 1604.767295][T24001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5467'.
[ 1605.475991][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.476042][T17569] input input24: Device does not respond to id packet M
[ 1605.478587][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.478649][T17569] input input24: Device does not respond to id packet P
[ 1605.479091][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.479134][T17569] input input24: Device does not respond to id packet B
[ 1605.481450][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.481500][T17569] input input24: Device does not respond to id packet N
[ 1605.486475][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.493714][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.494199][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.495049][T17569] iforce 7-1:0.0: usb_submit_urb failed: -71
[ 1605.518304][T17569] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24
[ 1605.535250][T15478] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1605.658866][T17569] usb 7-1: USB disconnect, device number 58
[ 1605.701651][T15478] usb 1-1: Using ep0 maxpacket: 32
[ 1605.703564][T15478] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1605.703596][T15478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1605.703620][T15478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1605.703642][T15478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1605.703667][T15478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1605.706192][T15478] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1605.706222][T15478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.706242][T15478] usb 1-1: Product: syz
[ 1605.706258][T15478] usb 1-1: Manufacturer: syz
[ 1605.706272][T15478] usb 1-1: SerialNumber: syz
[ 1605.725711][T15478] usb 1-1: config 0 descriptor??
[ 1606.453718][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.453791][T15478] input input25: Device does not respond to id packet M
[ 1606.459926][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.459978][T15478] input input25: Device does not respond to id packet P
[ 1606.460432][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.460476][T15478] input input25: Device does not respond to id packet B
[ 1606.460949][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.461001][T15478] input input25: Device does not respond to id packet N
[ 1606.461676][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.462247][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.462739][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.463741][T15478] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1606.467698][T15478] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25
[ 1607.542259][T15478] usb 1-1: USB disconnect, device number 35
[ 1607.687737][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5476'.
[ 1608.052561][T10860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1608.073223][T10860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1608.088670][T10860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1608.095629][T10860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1608.110790][T10860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1609.120250][T19822] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[ 1609.289072][T19822] usb 8-1: Using ep0 maxpacket: 16
[ 1609.291402][T19822] usb 8-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf
[ 1609.291432][T19822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1609.334707][T19822] usb 8-1: config 0 descriptor??
[ 1609.354963][T24046] netlink: 'syz.4.5480': attribute type 1 has an invalid length.
[ 1610.164877][T24061] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1610.959508][T10860] Bluetooth: hci4: command tx timeout
[ 1611.307700][T19822] pegasus 8-1:0.0: probe with driver pegasus failed with error -71
[ 1611.327189][T19822] usb 8-1: USB disconnect, device number 67
[ 1613.543379][T10860] Bluetooth: hci4: command tx timeout
[ 1613.840889][T24073] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1613.840946][T24073] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1613.840967][T24073] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1615.188106][T24034] chnl_net:caif_netlink_parms(): no params data found
[ 1616.468772][T10860] Bluetooth: hci4: command tx timeout
[ 1616.476900][ T9285] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1616.657387][ T9285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1616.657421][ T9285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1616.657478][ T9285] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1616.657503][ T9285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.676711][ T9285] usb 1-1: config 0 descriptor??
[ 1617.138212][ T9285] usbhid 1-1:0.0: can't add hid device: -32
[ 1617.138337][ T9285] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 1617.158925][ T9285] usb 1-1: USB disconnect, device number 36
[ 1617.529310][T19822] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[ 1617.615524][T24034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1617.615758][T24034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1617.616018][T24034] bridge_slave_0: entered allmulticast mode
[ 1617.619366][T24034] bridge_slave_0: entered promiscuous mode
[ 1617.656787][T24034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1617.657017][T24034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1617.672933][T24034] bridge_slave_1: entered allmulticast mode
[ 1617.675701][T24034] bridge_slave_1: entered promiscuous mode
[ 1617.689630][T19822] usb 8-1: Using ep0 maxpacket: 32
[ 1617.692222][T19822] usb 8-1: config 0 has an invalid interface number: 133 but max is 0
[ 1617.692249][T19822] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.692270][T19822] usb 8-1: config 0 has no interface number 0
[ 1617.692325][T19822] usb 8-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[ 1617.692352][T19822] usb 8-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88
[ 1617.692380][T19822] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1617.692404][T19822] usb 8-1: config 0 interface 133 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[ 1617.692429][T19822] usb 8-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1617.793885][T19822] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[ 1617.793916][T19822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.793937][T19822] usb 8-1: Product: syz
[ 1617.793952][T19822] usb 8-1: Manufacturer: syz
[ 1617.793969][T19822] usb 8-1: SerialNumber: syz
[ 1617.835859][T19822] usb 8-1: config 0 descriptor??
[ 1617.837011][T24112] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1618.077461][T24034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1618.108919][T24034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1618.129824][T19822] usb 8-1: probing VID:PID(0424:012C)   
[ 1618.132031][T19822] usb 8-1: vub300 testing BULK OUT EndPoint(0) 0B
[ 1618.132056][T19822] usb 8-1: vub300 testing BULK IN EndPoint(1) 88
[ 1618.132076][T19822] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1618.132157][T19822] vub300 8-1:0.133: probe with driver vub300 failed with error -22
[ 1618.452404][T19822] usb 8-1: USB disconnect, device number 68
[ 1618.684790][T10860] Bluetooth: hci4: command tx timeout
[ 1618.917166][T24034] team0: Port device team_slave_0 added
[ 1618.928844][T24034] team0: Port device team_slave_1 added
[ 1620.714240][T24034] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1620.714260][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.714289][T24034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.749499][T24034] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1620.749520][T24034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.749552][T24034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1620.793165][ T9308] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1620.855555][T17568] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[ 1620.951860][ T9308] usb 7-1: Using ep0 maxpacket: 32
[ 1620.955332][ T9308] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1620.955366][ T9308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1620.955391][ T9308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1620.955414][ T9308] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1620.960288][ T9308] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1620.960321][ T9308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1620.960343][ T9308] usb 7-1: Product: syz
[ 1620.960359][ T9308] usb 7-1: Manufacturer: syz
[ 1620.960375][ T9308] usb 7-1: SerialNumber: syz
[ 1620.975207][ T9308] usb 7-1: config 0 descriptor??
[ 1621.021717][T17568] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 19894, setting to 64
[ 1621.021759][T17568] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1621.029953][T17568] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1621.029985][T17568] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1621.030009][T17568] usb 1-1: Product: syz
[ 1621.030027][T17568] usb 1-1: Manufacturer: syz
[ 1621.030044][T17568] usb 1-1: SerialNumber: syz
[ 1621.070060][T17568] usb 1-1: config 0 descriptor??
[ 1621.082795][T24136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5509'.
[ 1621.105960][T17568] usb 1-1: selecting invalid altsetting 0
[ 1621.118382][T24138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1621.137888][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5509'.
[ 1621.185411][T24136] macvtap1: entered promiscuous mode
[ 1621.185435][T24136] batadv0: entered promiscuous mode
[ 1621.185709][T24136] macvtap1: entered allmulticast mode
[ 1621.185728][T24136] batadv0: entered allmulticast mode
[ 1621.219936][T24136] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1621.231474][T24139] macvtap1: left promiscuous mode
[ 1621.231504][T24139] batadv0: left promiscuous mode
[ 1621.241440][T24139] macvtap1: left allmulticast mode
[ 1621.241462][T24139] batadv0: left allmulticast mode
[ 1621.319695][T17568] usb 1-1: USB disconnect, device number 37
[ 1621.377835][T23823] udevd[23823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1621.721879][ T9308] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 1621.909207][ T9308] usb 8-1: Using ep0 maxpacket: 16
[ 1621.911132][ T9308] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1621.911159][ T9308] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1621.913652][ T9308] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1621.913678][ T9308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.913698][ T9308] usb 8-1: Product: syz
[ 1621.913712][ T9308] usb 8-1: Manufacturer: syz
[ 1621.913726][ T9308] usb 8-1: SerialNumber: syz
[ 1622.181432][ T9308] usb 8-1: 0:2 : does not exist
[ 1622.189657][ T9308] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1622.216994][ T9308] usb 8-1: USB disconnect, device number 69
[ 1622.271289][T23819] udevd[23819]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1622.697182][T24150] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1623.769554][ T9308] usb 7-1: USB disconnect, device number 59
[ 1623.891387][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5515'.
[ 1623.891440][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5515'.
[ 1623.891456][T24154] netlink: 'syz.6.5515': attribute type 1 has an invalid length.
[ 1623.891469][T24154] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5515'.
[ 1624.119707][T10860] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1624.119738][T10860] CPU: 0 UID: 0 PID: 10860 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1624.119764][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1624.119779][T10860] Workqueue: hci1 hci_rx_work
[ 1624.119807][T10860] Call Trace:
[ 1624.119817][T10860]  <TASK>
[ 1624.119827][T10860]  dump_stack_lvl+0x189/0x250
[ 1624.119876][T10860]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1624.119908][T10860]  ? __pfx__printk+0x10/0x10
[ 1624.119938][T10860]  ? kernfs_path_from_node+0x2c/0x280
[ 1624.119961][T10860]  ? kernfs_path_from_node+0x243/0x280
[ 1624.119982][T10860]  ? kernfs_path_from_node+0x2c/0x280
[ 1624.120007][T10860]  sysfs_create_dir_ns+0x259/0x280
[ 1624.120027][T10860]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1624.120050][T10860]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1624.120074][T10860]  ? rt_spin_unlock+0x161/0x200
[ 1624.120099][T10860]  kobject_add_internal+0x5a5/0xb50
[ 1624.120139][T10860]  kobject_add+0x155/0x220
[ 1624.120174][T10860]  ? __pfx_kobject_add+0x10/0x10
[ 1624.120212][T10860]  ? get_device_parent+0x370/0x3a0
[ 1624.120243][T10860]  device_add+0x408/0xb50
[ 1624.120274][T10860]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1624.120310][T10860]  le_conn_complete_evt+0xf39/0x1500
[ 1624.120345][T10860]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1624.120367][T10860]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1624.120388][T10860]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1624.120413][T10860]  ? skb_pull_data+0xfb/0x200
[ 1624.120438][T10860]  hci_le_conn_complete_evt+0x187/0x450
[ 1624.120466][T10860]  hci_event_packet+0x78f/0x1200
[ 1624.120485][T10860]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1624.120514][T10860]  ? __pfx_hci_event_packet+0x10/0x10
[ 1624.120538][T10860]  ? hci_send_to_monitor+0xe2/0x570
[ 1624.120563][T10860]  hci_rx_work+0x46a/0xe80
[ 1624.120585][T10860]  ? process_scheduled_works+0x9ef/0x17b0
[ 1624.120609][T10860]  process_scheduled_works+0xae1/0x17b0
[ 1624.120650][T10860]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1624.120693][T10860]  worker_thread+0x8a0/0xda0
[ 1624.120732][T10860]  kthread+0x711/0x8a0
[ 1624.120756][T10860]  ? __pfx_worker_thread+0x10/0x10
[ 1624.120775][T10860]  ? __pfx_kthread+0x10/0x10
[ 1624.120795][T10860]  ? rt_spin_unlock+0x150/0x200
[ 1624.120813][T10860]  ? rt_spin_unlock+0x161/0x200
[ 1624.120827][T10860]  ? __pfx_kthread+0x10/0x10
[ 1624.120858][T10860]  ret_from_fork+0x4bc/0x870
[ 1624.120878][T10860]  ? __pfx_ret_from_fork+0x10/0x10
[ 1624.120903][T10860]  ? __switch_to_asm+0x39/0x70
[ 1624.120918][T10860]  ? __switch_to_asm+0x33/0x70
[ 1624.120933][T10860]  ? __pfx_kthread+0x10/0x10
[ 1624.120956][T10860]  ret_from_fork_asm+0x1a/0x30
[ 1624.120985][T10860]  </TASK>
[ 1624.121650][T10860] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1624.121690][T10860] Bluetooth: hci1: failed to register connection device
[ 1624.250192][T24163] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1626.830981][T18161] bond0 (unregistering): Released all slaves
[ 1626.867334][T24169] veth0_to_team: entered promiscuous mode
[ 1626.867361][T24169] veth0_to_team: entered allmulticast mode
[ 1627.147237][T24034] hsr_slave_0: entered promiscuous mode
[ 1627.148993][T24034] hsr_slave_1: entered promiscuous mode
[ 1627.150181][T24034] debugfs: 'hsr0' already exists in 'hsr'
[ 1627.150221][T24034] Cannot create hsr debugfs directory
[ 1627.371851][T17568] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1627.782026][T17568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1627.782060][T17568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1627.782096][T17568] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1627.782118][T17568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.791484][T17568] usb 1-1: config 0 descriptor??
[ 1629.917297][T24190] veth0_to_team: entered promiscuous mode
[ 1629.917332][T24190] veth0_to_team: entered allmulticast mode
[ 1630.369038][T17568] usbhid 1-1:0.0: can't add hid device: -32
[ 1630.369173][T17568] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 1630.390320][T17568] usb 1-1: USB disconnect, device number 38
[ 1630.915643][T24212] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1631.121392][T14876] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1631.121418][T14876] CPU: 0 UID: 0 PID: 14876 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1631.121443][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1631.121458][T14876] Workqueue: hci0 hci_rx_work
[ 1631.121483][T14876] Call Trace:
[ 1631.121492][T14876]  <TASK>
[ 1631.121502][T14876]  dump_stack_lvl+0x189/0x250
[ 1631.121558][T14876]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1631.121589][T14876]  ? __pfx__printk+0x10/0x10
[ 1631.121620][T14876]  ? kernfs_path_from_node+0x2c/0x280
[ 1631.121643][T14876]  ? kernfs_path_from_node+0x243/0x280
[ 1631.121663][T14876]  ? kernfs_path_from_node+0x2c/0x280
[ 1631.121688][T14876]  sysfs_create_dir_ns+0x259/0x280
[ 1631.121709][T14876]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1631.121732][T14876]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1631.121758][T14876]  ? rt_spin_unlock+0x161/0x200
[ 1631.121782][T14876]  kobject_add_internal+0x5a5/0xb50
[ 1631.121822][T14876]  kobject_add+0x155/0x220
[ 1631.121856][T14876]  ? __pfx_kobject_add+0x10/0x10
[ 1631.121893][T14876]  ? get_device_parent+0x370/0x3a0
[ 1631.121924][T14876]  device_add+0x408/0xb50
[ 1631.121955][T14876]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1631.121991][T14876]  le_conn_complete_evt+0xf39/0x1500
[ 1631.122031][T14876]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1631.122059][T14876]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1631.122085][T14876]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1631.122116][T14876]  ? skb_pull_data+0xfb/0x200
[ 1631.122148][T14876]  hci_le_conn_complete_evt+0x187/0x450
[ 1631.122182][T14876]  hci_event_packet+0x78f/0x1200
[ 1631.122206][T14876]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1631.122234][T14876]  ? __pfx_hci_event_packet+0x10/0x10
[ 1631.122265][T14876]  ? hci_send_to_monitor+0xe2/0x570
[ 1631.122296][T14876]  hci_rx_work+0x46a/0xe80
[ 1631.122325][T14876]  ? process_scheduled_works+0x9ef/0x17b0
[ 1631.122354][T14876]  process_scheduled_works+0xae1/0x17b0
[ 1631.122413][T14876]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1631.122456][T14876]  worker_thread+0x8a0/0xda0
[ 1631.122509][T14876]  kthread+0x711/0x8a0
[ 1631.122550][T14876]  ? __pfx_worker_thread+0x10/0x10
[ 1631.122576][T14876]  ? __pfx_kthread+0x10/0x10
[ 1631.122605][T14876]  ? rt_spin_unlock+0x150/0x200
[ 1631.122631][T14876]  ? rt_spin_unlock+0x161/0x200
[ 1631.122649][T14876]  ? __pfx_kthread+0x10/0x10
[ 1631.122681][T14876]  ret_from_fork+0x4bc/0x870
[ 1631.122709][T14876]  ? __pfx_ret_from_fork+0x10/0x10
[ 1631.122759][T14876]  ? __switch_to_asm+0x39/0x70
[ 1631.122781][T14876]  ? __switch_to_asm+0x33/0x70
[ 1631.122802][T14876]  ? __pfx_kthread+0x10/0x10
[ 1631.122835][T14876]  ret_from_fork_asm+0x1a/0x30
[ 1631.122878][T14876]  </TASK>
[ 1631.142453][T14876] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1631.142524][T14876] Bluetooth: hci0: failed to register connection device
[ 1631.534830][T24225] netlink: 'syz.7.5535': attribute type 1 has an invalid length.
[ 1632.085546][ T9285] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 1632.254817][ T9285] usb 8-1: Using ep0 maxpacket: 32
[ 1632.257497][ T9285] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1632.257524][ T9285] usb 8-1: config 0 has no interface number 0
[ 1632.257573][ T9285] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1632.290909][ T9285] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1632.290940][ T9285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.290960][ T9285] usb 8-1: Product: syz
[ 1632.290974][ T9285] usb 8-1: Manufacturer: syz
[ 1632.290990][ T9285] usb 8-1: SerialNumber: syz
[ 1632.353410][ T9285] usb 8-1: config 0 descriptor??
[ 1632.369504][ T9285] smsc75xx v1.0.0
[ 1632.720575][T17568] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1632.804114][T18161] hsr_slave_0: left promiscuous mode
[ 1632.825787][T18161] hsr_slave_1: left promiscuous mode
[ 1632.877025][T17568] usb 1-1: Using ep0 maxpacket: 16
[ 1632.909658][T17568] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.909686][T17568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1632.912789][T17568] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1632.912815][T17568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.912835][T17568] usb 1-1: Product: syz
[ 1632.912857][T17568] usb 1-1: Manufacturer: syz
[ 1632.912871][T17568] usb 1-1: SerialNumber: syz
[ 1633.288466][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1633.288499][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1633.334692][T17568] usb 1-1: 0:2 : does not exist
[ 1633.345278][T17568] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1634.392981][T17568] usb 1-1: USB disconnect, device number 39
[ 1634.563409][T23797] udevd[23797]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1634.884135][ T9308] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1635.026818][T19815] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1635.094444][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1635.094481][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1635.094540][ T9308] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1635.094564][ T9308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.101160][ T9308] usb 5-1: config 0 descriptor??
[ 1635.187025][T19815] usb 1-1: device descriptor read/64, error -71
[ 1635.454362][T19815] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1635.604249][T19815] usb 1-1: device descriptor read/64, error -71
[ 1635.614534][ T9308] usbhid 5-1:0.0: can't add hid device: -32
[ 1635.627892][ T9308] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 1635.671061][ T9308] usb 5-1: USB disconnect, device number 34
[ 1635.756960][T19815] usb usb1-port1: attempt power cycle
[ 1636.032128][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 1636.032166][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 1636.032188][ T9285] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1636.032486][ T9285] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[ 1636.066876][ T9285] usb 8-1: USB disconnect, device number 70
[ 1636.173413][T19815] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1636.191763][T24269] netlink: 'syz.6.5548': attribute type 1 has an invalid length.
[ 1636.194248][T19815] usb 1-1: device descriptor read/8, error -71
[ 1636.577875][T19815] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1636.773734][T19815] usb 1-1: device descriptor read/8, error -71
[ 1637.561485][T19815] usb usb1-port1: unable to enumerate USB device
[ 1639.432919][T19815] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1639.593453][T19815] usb 7-1: Using ep0 maxpacket: 16
[ 1640.541635][T19815] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1640.541664][T19815] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1640.573775][T19815] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1640.573819][T19815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.573840][T19815] usb 7-1: Product: syz
[ 1640.573855][T19815] usb 7-1: Manufacturer: syz
[ 1640.573870][T19815] usb 7-1: SerialNumber: syz
[ 1640.873886][T19815] usb 7-1: 0:2 : does not exist
[ 1640.890333][T19815] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1640.984258][T19815] usb 7-1: USB disconnect, device number 60
[ 1641.056590][T23819] udevd[23819]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1643.473482][    C1] ------------[ cut here ]------------
[ 1643.473500][    C1] refcount_t: addition on 0; use-after-free.
[ 1643.474206][    C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0
[ 1643.474258][    C1] Modules linked in:
[ 1643.474279][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1643.474305][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1643.474320][    C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1643.474346][    C1] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7
[ 1643.474366][    C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246
[ 1643.474386][    C1] RAX: 69821f66e4903500 RBX: 0000000000000002 RCX: ffff88801ba91e00
[ 1643.474402][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1643.474417][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1643.474430][    C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18
[ 1643.474460][    C1] R13: ffff888034782260 R14: ffff888034781e80 R15: dffffc0000000000
[ 1643.474478][    C1] FS:  0000000000000000(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000
[ 1643.474516][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1643.474532][    C1] CR2: 0000000000000000 CR3: 000000006723e000 CR4: 00000000003526f0
[ 1643.474550][    C1] Call Trace:
[ 1643.474559][    C1]  <TASK>
[ 1643.474571][    C1]  mptcp_schedule_work+0x164/0x1a0
[ 1643.474598][    C1]  mptcp_tout_timer+0x21/0xa0
[ 1643.474628][    C1]  call_timer_fn+0x17e/0x5f0
[ 1643.474659][    C1]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1643.474685][    C1]  ? call_timer_fn+0xbe/0x5f0
[ 1643.474715][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1643.474756][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1643.474785][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1643.474811][    C1]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1643.474840][    C1]  __run_timer_base+0x648/0x970
[ 1643.474887][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1643.474934][    C1]  run_timer_softirq+0xb7/0x180
[ 1643.474962][    C1]  handle_softirqs+0x22f/0x710
[ 1643.475001][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1643.475042][    C1]  run_ktimerd+0xcf/0x190
[ 1643.475072][    C1]  ? __pfx_run_ktimerd+0x10/0x10
[ 1643.475099][    C1]  ? schedule+0x91/0x360
[ 1643.475134][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1643.475160][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1643.475190][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1643.475229][    C1]  kthread+0x711/0x8a0
[ 1643.475272][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1643.475299][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.475329][    C1]  ? rt_spin_unlock+0x150/0x200
[ 1643.475356][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1643.475377][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.475410][    C1]  ret_from_fork+0x4bc/0x870
[ 1643.475441][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1643.475476][    C1]  ? __switch_to_asm+0x39/0x70
[ 1643.475498][    C1]  ? __switch_to_asm+0x33/0x70
[ 1643.475530][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.475564][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1643.475642][    C1]  </TASK>
[ 1643.475662][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1643.475678][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1643.475704][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1643.475717][    C1] Call Trace:
[ 1643.475726][    C1]  <TASK>
[ 1643.475735][    C1]  dump_stack_lvl+0x99/0x250
[ 1643.475770][    C1]  ? __asan_memcpy+0x40/0x70
[ 1643.475796][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1643.475830][    C1]  ? __pfx__printk+0x10/0x10
[ 1643.475872][    C1]  vpanic+0x237/0x6d0
[ 1643.475893][    C1]  ? __pfx_vpanic+0x10/0x10
[ 1643.475926][    C1]  panic+0xb9/0xc0
[ 1643.475947][    C1]  ? __pfx_panic+0x10/0x10
[ 1643.475986][    C1]  __warn+0x31b/0x4b0
[ 1643.476006][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1643.476032][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1643.476056][    C1]  report_bug+0x2be/0x4f0
[ 1643.476082][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1643.476107][    C1]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1643.476130][    C1]  ? refcount_warn_saturate+0xfc/0x1d0
[ 1643.476154][    C1]  handle_bug+0x84/0x160
[ 1643.476187][    C1]  exc_invalid_op+0x1a/0x50
[ 1643.476219][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 1643.476246][    C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1643.476271][    C1] Code: 00 00 e8 09 5e 45 fd 5b 41 5e c3 cc cc cc cc cc e8 fb 5d 45 fd c6 05 e3 06 47 0a 01 90 48 c7 c7 c0 2c 3d 8b e8 17 a5 09 fd 90 <0f> 0b 90 90 eb d7 e8 db 5d 45 fd c6 05 c4 06 47 0a 01 90 48 c7 c7
[ 1643.476290][    C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246
[ 1643.476309][    C1] RAX: 69821f66e4903500 RBX: 0000000000000002 RCX: ffff88801ba91e00
[ 1643.476325][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1643.476339][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1643.476353][    C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18
[ 1643.476370][    C1] R13: ffff888034782260 R14: ffff888034781e80 R15: dffffc0000000000
[ 1643.476407][    C1]  mptcp_schedule_work+0x164/0x1a0
[ 1643.476431][    C1]  mptcp_tout_timer+0x21/0xa0
[ 1643.476460][    C1]  call_timer_fn+0x17e/0x5f0
[ 1643.476489][    C1]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1643.476515][    C1]  ? call_timer_fn+0xbe/0x5f0
[ 1643.476545][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1643.476585][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1643.476613][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1643.476638][    C1]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1643.476668][    C1]  __run_timer_base+0x648/0x970
[ 1643.476713][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1643.476758][    C1]  run_timer_softirq+0xb7/0x180
[ 1643.476787][    C1]  handle_softirqs+0x22f/0x710
[ 1643.476824][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1643.476864][    C1]  run_ktimerd+0xcf/0x190
[ 1643.476893][    C1]  ? __pfx_run_ktimerd+0x10/0x10
[ 1643.476920][    C1]  ? schedule+0x91/0x360
[ 1643.476955][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1643.476981][    C1]  smpboot_thread_fn+0x542/0xa60
[ 1643.477011][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[ 1643.477048][    C1]  kthread+0x711/0x8a0
[ 1643.477084][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1643.477112][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.477141][    C1]  ? rt_spin_unlock+0x150/0x200
[ 1643.477169][    C1]  ? rt_spin_unlock+0x161/0x200
[ 1643.477189][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.477223][    C1]  ret_from_fork+0x4bc/0x870
[ 1643.477258][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1643.477292][    C1]  ? __switch_to_asm+0x39/0x70
[ 1643.477314][    C1]  ? __switch_to_asm+0x33/0x70
[ 1643.477334][    C1]  ? __pfx_kthread+0x10/0x10
[ 1643.477368][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1643.477411][    C1]  </TASK>
[ 1643.477731][    C1] Kernel Offset: disabled