last executing test programs:

21m44.822091507s ago: executing program 32 (id=11):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40)
io_setup(0x9, &(0x7f0000000300)=<r1=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}])
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000440)})

21m44.796718709s ago: executing program 33 (id=13):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x47, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x87)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r11, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0)
r14 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r14, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r14, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r15 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r15, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c)

21m43.964282097s ago: executing program 34 (id=15):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40)
io_setup(0x9, &(0x7f0000000300)=<r1=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}])
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)

21m42.356205607s ago: executing program 35 (id=19):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1)
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r2, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1)

21m20.92301317s ago: executing program 36 (id=34):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x47, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x87)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r11, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r14 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r14, 0x0, 0x0)
sendmmsg(r14, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r15 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r15, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c)

21m20.029779933s ago: executing program 37 (id=36):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

21m19.113116207s ago: executing program 38 (id=39):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x47, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x87)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r11, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r14 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r14, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r14, 0x0, 0x0, 0x0)
r15 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r15, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c)

21m18.239499018s ago: executing program 39 (id=42):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)

21m0.17548395s ago: executing program 9 (id=49):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r4, 0x0)

20m59.465689207s ago: executing program 9 (id=52):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

20m58.926152801s ago: executing program 40 (id=52):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

20m57.016333565s ago: executing program 41 (id=55):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r4, 0x0)

20m56.266195606s ago: executing program 42 (id=59):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x6}, 0xb)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

20m49.119913894s ago: executing program 43 (id=65):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
socket$inet(0xa, 0x801, 0x84)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6}, 0x8)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

20m23.247402307s ago: executing program 44 (id=97):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r5 = socket(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20040009}, 0x0)
accept(r5, 0x0, 0x0)

20m22.195924513s ago: executing program 45 (id=102):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

20m21.911600506s ago: executing program 46 (id=104):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)

20m21.894270457s ago: executing program 47 (id=105):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03)
r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

20m2.654210673s ago: executing program 9 (id=110):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

20m0.304622414s ago: executing program 9 (id=112):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40)
io_setup(0x9, &(0x7f0000000300)=<r1=>0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}])
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48)

19m58.850456101s ago: executing program 9 (id=116):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000000406010200000000000000000100000905000100070000008faee1299d85776b89592bfa75bbec"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

19m56.685796816s ago: executing program 9 (id=121):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000000406010200000000000000000100000905000100070000008faee1299d85776b89592bfa75bbec1a"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

19m55.423568168s ago: executing program 48 (id=121):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000000406010200000000000000000100000905000100070000008faee1299d85776b89592bfa75bbec1a"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

19m39.95328386s ago: executing program 5 (id=160):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19m30.743363415s ago: executing program 5 (id=173):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
mkdir(0x0, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x4, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsmount(0xffffffffffffffff, 0x0, 0x70)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601020000040000000000820000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

19m27.506030527s ago: executing program 5 (id=175):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000)
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0302fe0300000002450000"], 0xb, 0x1)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0xc80, 0x320, 0x7, 0x80, 0x1, 0x0, {}, {0x2, 0x4}, {}, {0x0, 0x8, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x3, 0x3d, 0x5, 0x3, 0x0, 0x0, 0x0, 0xc})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

19m25.337478482s ago: executing program 5 (id=182):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500))

19m24.332522394s ago: executing program 5 (id=187):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)

19m23.869508041s ago: executing program 5 (id=188):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket(0x1d, 0x2, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
socket(0x10, 0x803, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

19m23.165192758s ago: executing program 49 (id=188):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket(0x1d, 0x2, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
socket(0x10, 0x803, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

19m22.956334915s ago: executing program 0 (id=192):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x7, @loopback, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(0x0, r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
shutdown(r0, 0x0)

19m22.591662305s ago: executing program 0 (id=193):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "d700981b00eb2e0466b3b726c12bffd2da6226299a994f49a227f189a859257dea5b53a46afb0f8effa4689e815bf8cce16e4a1e1c00"/64}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x8000)

19m22.336578925s ago: executing program 0 (id=194):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r8, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

19m22.143158321s ago: executing program 2 (id=196):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket(0x1d, 0x2, 0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
io_cancel(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48)

19m20.527699612s ago: executing program 0 (id=197):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500))

19m19.284850862s ago: executing program 0 (id=199):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)

19m19.284712852s ago: executing program 2 (id=200):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
set_mempolicy(0x4005, 0x0, 0x4)
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$hidraw(0x0, 0x1, 0x14a042)
syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0xf2d0, 0x10100, 0x0, 0x392}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0))
r5 = syz_open_pts(r4, 0x101000)
bpf$PROG_LOAD(0x2, &(0x7f00000007c0)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = dup3(r5, r4, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17)

19m17.962268979s ago: executing program 2 (id=201):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x68, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "d700981b00eb2e0466b3b726c12bffd2da6226299a994f49a227f189a859257dea5b53a46afb0f8effa4689e815bf8cce16e4a1e1c00"/64}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x881}, 0x8000)

19m16.000415018s ago: executing program 0 (id=202):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

19m15.998542238s ago: executing program 2 (id=209):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r1)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r7, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500))

19m15.518232647s ago: executing program 50 (id=202):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x1004}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

19m14.756772909s ago: executing program 2 (id=206):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)

19m14.321533914s ago: executing program 2 (id=207):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19m13.833043933s ago: executing program 51 (id=207):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13m41.767692099s ago: executing program 4 (id=742):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x2, 0x3, 0x67)
socket(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x2)
pipe2(&(0x7f0000000080), 0x80800)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0)

13m39.726031214s ago: executing program 4 (id=746):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

13m38.651043731s ago: executing program 4 (id=748):
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

13m37.112756665s ago: executing program 4 (id=751):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
ioctl$LOOP_SET_FD(r4, 0x4c00, r4)
dup2(r3, r0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r6, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500))

13m35.965140089s ago: executing program 4 (id=755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

13m35.618495137s ago: executing program 4 (id=758):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(0x0, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
write$vga_arbiter(r0, &(0x7f0000000180), 0xf)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)

13m35.074929271s ago: executing program 52 (id=758):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(0x0, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
write$vga_arbiter(r0, &(0x7f0000000180), 0xf)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10)

8m42.435921393s ago: executing program 8 (id=1400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "f1532cd3431bade0196186c14db02aa758ce011f8537a885c783f1816f63c8808e955fde7b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0)

8m42.128424048s ago: executing program 8 (id=1403):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = dup(r1)
r6 = fcntl$dupfd(r0, 0x406, r4)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5})

8m41.737430789s ago: executing program 8 (id=1406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xb8}}, 0x0)

8m40.489414s ago: executing program 8 (id=1408):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x18, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x347e742c303d1454)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x0, 0x0}, {0x63, 0x11, 0x0, 0x0}], 0x2})

8m38.137525131s ago: executing program 8 (id=1416):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)
sendmsg$qrtr(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="936662", 0x3}], 0x1, &(0x7f0000000740)=ANY=[], 0x1278, 0x24048844}, 0x38)

8m36.924156439s ago: executing program 8 (id=1419):
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

8m21.556117411s ago: executing program 53 (id=1419):
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

49.661365465s ago: executing program 6 (id=2573):
mkdirat(0xffffffffffffff9c, 0x0, 0x88)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(0xffffffffffffffff, 0x0, 0x22)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)}], 0x1}, 0x4880)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0})
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000023c0)='westwood\x00', 0x9)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000})

47.582139763s ago: executing program 6 (id=2576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x8}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0xc010)

47.008398119s ago: executing program 6 (id=2578):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x1, 0xa10, 0x0, &(0x7f00000000c0)}], 0x1})

16.497257425s ago: executing program 7 (id=2631):
setsockopt(0xffffffffffffffff, 0x1084, 0x80, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socket$inet6(0xa, 0x800, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)

15.369314533s ago: executing program 7 (id=2632):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
keyctl$join(0x1, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x200, 0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_open_dev$I2C(0x0, 0x9, 0x0)
writev(r1, 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
shmget(0x2, 0xc00000, 0x360, &(0x7f0000400000/0xc00000)=nil)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

13.923566296s ago: executing program 7 (id=2633):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket(0x15, 0x5, 0x0)
connect$unix(r4, &(0x7f0000000080)=@abs={0xa}, 0x6e)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r5, 0x81, 0x5, &(0x7f0000000080)="00012c615b")
sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14)
syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000001, 0xc0000)
close_range(r2, 0xffffffffffffffff, 0x0)

12.643395509s ago: executing program 1 (id=2637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'})
socket$netlink(0x10, 0x3, 0x10)
close(r2)
write$dsp(r1, &(0x7f0000002000), 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_emit_ethernet(0xeff, &(0x7f00000004c0)=ANY=[], 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000)

12.317474656s ago: executing program 3 (id=2638):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a227536350102030109021200010000000009040000"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)

11.709671755s ago: executing program 1 (id=2639):
setsockopt(0xffffffffffffffff, 0x1084, 0x80, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socket$inet6(0xa, 0x800, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)

10.475830415s ago: executing program 1 (id=2640):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$MSR(0x0, 0x8000002000000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$vbi(&(0x7f0000000b80), 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x26da8e97, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x3, 0x2003)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0x4, 0x80]}})

10.401559531s ago: executing program 7 (id=2641):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x26, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040))
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000)
io_setup(0x3ff, &(0x7f0000000500))
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
capset(&(0x7f0000000000)={0x20080522}, 0x0)
setregid(0xffffffffffffffff, r7)

8.79988619s ago: executing program 1 (id=2642):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, 0x0)
r1 = gettid()
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)

8.615889065s ago: executing program 6 (id=2587):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4048800)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

8.337069027s ago: executing program 3 (id=2643):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x200002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0xfffffffd)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1, 0x20}, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)

7.044901952s ago: executing program 6 (id=2644):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
wait4(0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000680))
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x400000a0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340), &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000000706050000000000000000000501000905000100070000000900020073797a3200004c83e07ecd31f076f91fd2663d9c16d0858abd00cf5036488d72a7d40000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

6.891733434s ago: executing program 3 (id=2645):
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0)

5.720866308s ago: executing program 3 (id=2646):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x3000}], 0x0, 0x0, 0x0})

4.374742277s ago: executing program 3 (id=2647):
setsockopt(0xffffffffffffffff, 0x1084, 0x80, &(0x7f00000002c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0)

4.242538358s ago: executing program 7 (id=2648):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket(0x15, 0x5, 0x0)
connect$unix(r4, &(0x7f0000000080)=@abs={0xa}, 0x6e)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r5, 0x81, 0x5, &(0x7f0000000080)="00012c615b")
sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14)
syz_open_dev$loop(&(0x7f0000000040), 0x8000000000000001, 0xc0000)
close_range(r2, 0xffffffffffffffff, 0x0)

3.181538643s ago: executing program 3 (id=2649):
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0)

3.103911909s ago: executing program 1 (id=2650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00'})
socket$netlink(0x10, 0x3, 0x10)
close(r2)
write$dsp(r1, &(0x7f0000002000), 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_emit_ethernet(0xeff, &(0x7f00000004c0)=ANY=[], 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000)

1.963846371s ago: executing program 1 (id=2651):
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0)
mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbed3713953cc3eacbdacf9989ce49bb86dd6001044800203afffe80000000000000000000000000000000000000aa8800907800000000fe80000000001e0006"], 0x0)
r3 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r3, 0xee01, 0x0)
keyctl$setperm(0x5, r3, 0x15110231)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000380))
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a2401090001020102"], 0x0)
keyctl$read(0xb, r3, 0x0, 0x0)

1.089397862s ago: executing program 6 (id=2652):
iopl(0x3)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)

0s ago: executing program 7 (id=2653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0xc010)

kernel console output (not intermixed with test programs):

rial port ptm0
[ 1091.392622][T19045] overlayfs: conflicting lowerdir path
[ 1092.122303][T19055] nfs: Deprecated parameter 'nointr'
[ 1092.178248][T19055] ntfs3: loop3: try to read out of volume at offset 0x0
[ 1093.116038][T19062] affs: No valid root block on device nullb0
[ 1094.898700][T19073] mkiss: ax0: crc mode is auto.
[ 1095.938656][ T5835] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[ 1096.442245][ T5835] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1096.454111][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.481866][ T5835] usb 4-1: config 0 descriptor??
[ 1096.953900][ T5835] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1097.078633][ T5835] gp8psk: usb in 128 operation failed.
[ 1097.108839][ T5835] gp8psk: usb in 137 operation failed.
[ 1097.145318][ T5835] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1097.178572][ T5835] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1097.229151][ T5835] usb 4-1: USB disconnect, device number 54
[ 1098.428202][T19127] serio: Serial port ptm0
[ 1099.078727][  T787] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1099.258465][  T787] usb 4-1: Using ep0 maxpacket: 16
[ 1099.267461][  T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.288364][  T787] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1099.297442][  T787] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1099.317475][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.347314][  T787] usb 4-1: config 0 descriptor??
[ 1099.488123][T12691] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[ 1099.689996][T12691] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1099.700094][T12691] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1099.720734][T12691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1099.741067][T12691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1099.752959][T12691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1099.766837][T12691] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1099.776581][T12691] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1099.785415][T12691] usb 7-1: Product: syz
[ 1099.790043][T12691] usb 7-1: Manufacturer: syz
[ 1099.806018][T12691] cdc_wdm 7-1:1.0: skipping garbage
[ 1099.817936][T12691] cdc_wdm 7-1:1.0: skipping garbage
[ 1099.830374][T12691] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1099.838510][T12691] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1100.070280][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 5 bytes
[ 1100.281729][   T23] usb 7-1: USB disconnect, device number 94
[ 1101.161312][T19196] Invalid option length (1047920) for dns_resolver key
[ 1101.378128][T12691] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 1101.678020][T12691] usb 7-1: Using ep0 maxpacket: 32
[ 1102.146142][T12691] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1102.156088][T12691] usb 7-1: config 0 has no interface number 0
[ 1102.168001][T12691] usb 7-1: config 0 interface 89 has no altsetting 0
[ 1102.189321][ T5835] usb 4-1: USB disconnect, device number 55
[ 1102.197190][T19205] [U] 
[ 1102.213146][T12691] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1102.216466][T19205] [U] K{‘
[ 1102.273260][T19205] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[ 1102.286398][T12691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.312809][T12691] usb 7-1: Product: syz
[ 1102.314397][T19205] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[ 1102.405239][T12691] usb 7-1: Manufacturer: syz
[ 1102.427126][T19205] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[ 1102.449201][T12691] usb 7-1: SerialNumber: syz
[ 1102.477267][T12691] usb 7-1: config 0 descriptor??
[ 1102.489655][T12691] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1102.628826][T19205] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[ 1102.664844][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1102.685309][T12691] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 1102.709583][T19205] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[ 1102.791310][T19205] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[ 1102.821054][T19205] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[ 1102.871842][T19205] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[ 1102.926972][T19205] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[ 1102.966448][T19205] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[ 1103.039861][T19205] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[ 1103.051460][T19205] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[ 1103.095762][T19205] [U] 22½“Æ©ÐÛ©X?0;3U±
[ 1103.114588][T19205] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[ 1103.163451][T12691] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 1103.600883][T19205] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[ 1103.613852][T19205] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[ 1103.894495][T19205] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[ 1103.949136][T19205] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[ 1103.995957][T19205] [U] ¹EC�
[ 1104.030751][T19205] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[ 1104.217985][T12691] em28xx 7-1:0.89: AC97 command still being executed: not handled properly!
[ 1104.401426][T12691] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1104.418197][T12690] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1104.428967][T12691] em28xx 7-1:0.89: board has no eeprom
[ 1104.474687][T19237] netlink: 'syz.7.1952': attribute type 16 has an invalid length.
[ 1104.483022][T19237] netlink: 'syz.7.1952': attribute type 17 has an invalid length.
[ 1104.515043][T19237] netlink: 408 bytes leftover after parsing attributes in process `syz.7.1952'.
[ 1104.524822][T19237] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1952'.
[ 1104.548815][T12691] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 1104.604413][T12691] em28xx 7-1:0.89: analog set to bulk mode.
[ 1104.620764][  T787] em28xx 7-1:0.89: Registering V4L2 extension
[ 1104.629686][T12690] usb 4-1: Using ep0 maxpacket: 32
[ 1104.658978][T12691] usb 7-1: USB disconnect, device number 95
[ 1104.668655][T12690] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[ 1104.677053][T12690] usb 4-1: config 0 has no interface number 0
[ 1104.699164][T12691] em28xx 7-1:0.89: Disconnecting em28xx
[ 1104.712028][T12690] usb 4-1: config 0 interface 89 has no altsetting 0
[ 1104.733726][T12690] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1104.752012][T12690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.798044][T12690] usb 4-1: Product: syz
[ 1104.802352][T12690] usb 4-1: Manufacturer: syz
[ 1104.836052][  T787] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 1104.853691][T12690] usb 4-1: SerialNumber: syz
[ 1104.866305][  T787] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 1104.875544][T12690] usb 4-1: config 0 descriptor??
[ 1104.884417][  T787] em28xx 7-1:0.89: No AC97 audio processor
[ 1104.900277][T12690] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1104.922804][  T787] usb 7-1: Decoder not found
[ 1104.949112][T12690] em28xx 4-1:0.89: Video interface 89 found: bulk
[ 1104.955966][  T787] em28xx 7-1:0.89: failed to create media graph
[ 1104.998375][  T787] em28xx 7-1:0.89: V4L2 device video103 deregistered
[ 1105.032395][  T787] em28xx 7-1:0.89: Registering snapshot button...
[ 1105.109101][  T787] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input67
[ 1106.334697][  T787] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 1106.398430][T12690] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[ 1106.590794][T12691] em28xx 7-1:0.89: Closing input extension
[ 1106.602874][T12691] em28xx 7-1:0.89: Deregistering snapshot button
[ 1106.805067][T12690] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1106.877521][T12690] em28xx 4-1:0.89: board has no eeprom
[ 1106.910821][T12691] em28xx 7-1:0.89: Freeing device
[ 1106.988216][T12690] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[ 1106.995704][T12690] em28xx 4-1:0.89: analog set to bulk mode.
[ 1107.136306][ T6788] em28xx 4-1:0.89: Registering V4L2 extension
[ 1107.292776][ T6788] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[ 1107.437277][ T5835] usb 4-1: USB disconnect, device number 56
[ 1107.447681][ T5835] em28xx 4-1:0.89: Disconnecting em28xx
[ 1107.515442][ T6788] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[ 1107.551340][ T6788] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[ 1107.574327][ T6788] em28xx 4-1:0.89: No AC97 audio processor
[ 1107.593415][T19201] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[ 1107.647665][ T6788] usb 4-1: Decoder not found
[ 1107.667039][ T6788] em28xx 4-1:0.89: failed to create media graph
[ 1107.704508][ T6788] em28xx 4-1:0.89: V4L2 device video103 deregistered
[ 1107.793525][ T6788] em28xx 4-1:0.89: Registering snapshot button...
[ 1107.857670][ T6788] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input68
[ 1107.965276][ T6788] em28xx 4-1:0.89: Remote control support is not available for this card.
[ 1108.046067][ T5835] em28xx 4-1:0.89: Closing input extension
[ 1108.065358][ T5835] em28xx 4-1:0.89: Deregistering snapshot button
[ 1108.220900][ T5835] em28xx 4-1:0.89: Freeing device
[ 1108.629865][T19281] serio: Serial port ptm0
[ 1110.089764][T19309] overlayfs: conflicting lowerdir path
[ 1110.848647][ T6788] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1111.077998][ T6788] usb 2-1: Using ep0 maxpacket: 16
[ 1111.095555][ T6788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.127948][ T6788] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1111.208910][ T5835] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[ 1111.928715][ T6788] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1111.938680][ T6788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.958769][ T6788] usb 2-1: config 0 descriptor??
[ 1111.967667][ T6788] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1112.162684][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1112.214421][ T5835] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1112.238499][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.247606][ T5835] usb 8-1: Product: syz
[ 1112.252497][ T5835] usb 8-1: Manufacturer: syz
[ 1112.252592][ T5835] usb 8-1: SerialNumber: syz
[ 1112.508485][ T5835] usb 8-1: config 0 descriptor??
[ 1112.815098][T19347] overlayfs: conflicting lowerdir path
[ 1113.881213][   T27] usb 8-1: USB disconnect, device number 83
[ 1113.968230][ T6788] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1114.163693][ T6788] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1114.183732][ T6788] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1114.222325][ T6788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1114.247223][ T6788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1114.277814][ T6788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1114.309419][ T6788] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1114.334180][ T6788] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1114.359657][   T27] usb 2-1: USB disconnect, device number 12
[ 1114.371467][ T6788] usb 4-1: Product: syz
[ 1114.415859][ T6788] usb 4-1: Manufacturer: syz
[ 1114.460460][ T6788] cdc_wdm 4-1:1.0: skipping garbage
[ 1114.465759][ T6788] cdc_wdm 4-1:1.0: skipping garbage
[ 1114.504067][ T6788] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1114.534550][ T6788] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1114.687050][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 5 bytes
[ 1114.899253][ T6788] usb 4-1: USB disconnect, device number 57
[ 1115.962177][T19382] overlayfs: conflicting lowerdir path
[ 1116.345614][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.352269][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.658553][   T27] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 1116.916437][   T27] usb 7-1: Using ep0 maxpacket: 16
[ 1117.003397][   T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.181550][   T23] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1117.231804][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1117.464308][   T27] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1117.494651][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.520671][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1117.540179][   T27] usb 7-1: config 0 descriptor??
[ 1117.559650][   T27] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1117.573955][   T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1117.586245][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.612653][   T23] usb 4-1: Product: syz
[ 1117.632207][   T23] usb 4-1: Manufacturer: syz
[ 1117.641833][   T23] usb 4-1: SerialNumber: syz
[ 1117.699846][   T23] usb 4-1: config 0 descriptor??
[ 1119.176153][   T23] usb 4-1: USB disconnect, device number 58
[ 1119.316702][T19430] overlayfs: conflicting lowerdir path
[ 1120.778916][   T23] usb 7-1: USB disconnect, device number 96
[ 1121.074482][T19445] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1999'.
[ 1121.809001][ T6788] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 1122.011310][ T6788] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1122.043002][ T6788] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1122.078445][ T6788] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1122.098620][ T6788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1122.158059][ T6788] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1122.202090][ T6788] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1122.248364][ T6788] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1122.266339][ T6788] usb 7-1: Product: syz
[ 1122.274718][ T6788] usb 7-1: Manufacturer: syz
[ 1122.311770][ T6788] cdc_wdm 7-1:1.0: skipping garbage
[ 1122.317073][ T6788] cdc_wdm 7-1:1.0: skipping garbage
[ 1122.371977][ T6788] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1122.439811][ T6788] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1123.006926][ T6788] usb 7-1: USB disconnect, device number 97
[ 1123.051771][T19474] lo speed is unknown, defaulting to 1000
[ 1123.850536][T19474] lo speed is unknown, defaulting to 1000
[ 1124.223457][T19483] overlayfs: conflicting lowerdir path
[ 1126.664034][T19502] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1127.619298][T19526] overlayfs: conflicting lowerdir path
[ 1128.506784][T19532] overlayfs: missing 'lowerdir'
[ 1129.654215][T19540] Process accounting resumed
[ 1130.618201][T19558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2024'.
[ 1133.078934][T19585] No source specified
[ 1133.118403][T19585] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1135.758514][   T23] usb 7-1: new full-speed USB device number 98 using dummy_hcd
[ 1135.990803][   T23] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1136.072614][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.098490][   T23] usb 7-1: Product: syz
[ 1136.103048][   T23] usb 7-1: Manufacturer: syz
[ 1136.152221][   T23] usb 7-1: SerialNumber: syz
[ 1136.210958][   T23] usb 7-1: config 0 descriptor??
[ 1136.252202][   T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1136.301872][   T23] pctv452e: pctv452e_power_ctrl: 1
[ 1136.301872][   T23] 
[ 1136.347105][   T23] usb 7-1: selecting invalid altsetting 3
[ 1136.354045][   T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1136.354045][   T23] 
[ 1136.366181][   T23] dvb-usb: bulk message failed: -22 (5/0)
[ 1138.909872][   T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1139.067484][   T23] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[ 1139.201318][   T23] usb 7-1: USB disconnect, device number 98
[ 1140.641327][ T5800] Bluetooth: hci4: unexpected event for opcode 0x2003
[ 1144.248428][T12691] IPVS: starting estimator thread 0...
[ 1144.398588][T19692] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1144.401606][T19688] macsec1: entered promiscuous mode
[ 1144.463208][T19688] bridge0: entered promiscuous mode
[ 1144.502760][T19688] bridge0: port 1(macsec1) entered blocking state
[ 1144.543302][T19688] bridge0: port 1(macsec1) entered disabled state
[ 1144.551204][T19688] macsec1: entered allmulticast mode
[ 1144.556674][T19688] bridge0: entered allmulticast mode
[ 1144.632797][T19688] macsec1: left allmulticast mode
[ 1144.666475][T19688] bridge0: left allmulticast mode
[ 1144.700926][T19688] bridge0: left promiscuous mode
[ 1146.337207][T19709] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2058'.
[ 1147.745320][   T23] usb 8-1: new high-speed USB device number 84 using dummy_hcd
[ 1148.004136][   T23] usb 8-1: Using ep0 maxpacket: 32
[ 1148.036604][   T23] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1148.087900][   T23] usb 8-1: config 0 has no interface number 0
[ 1148.140645][   T23] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1148.168717][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.214745][   T23] usb 8-1: Product: syz
[ 1148.267045][   T23] usb 8-1: Manufacturer: syz
[ 1148.304754][   T23] usb 8-1: SerialNumber: syz
[ 1148.327802][   T23] usb 8-1: config 0 descriptor??
[ 1148.370151][   T23] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1148.589103][   T23] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1148.690773][   T23] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1149.096109][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1149.111765][   T23] usb 8-1: USB disconnect, device number 84
[ 1149.166235][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1149.248858][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1149.322545][   T23] quatech2 8-1:0.51: device disconnected
[ 1150.398854][   T27] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 1150.578666][   T27] usb 7-1: Using ep0 maxpacket: 32
[ 1150.580786][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1150.580840][   T27] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[ 1150.580868][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.583620][   T27] usb 7-1: config 0 descriptor??
[ 1151.621627][   T27] samsung 0003:0419:0600.0010: hidraw0: USB HID v10.00 Device [HID 0419:0600] on usb-dummy_hcd.6-1/input0
[ 1151.625650][   T27] usb 7-1: USB disconnect, device number 99
[ 1152.616321][T19743] fido_id[19743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1157.739295][T12691] IPVS: starting estimator thread 0...
[ 1157.848122][T19787] IPVS: using max 20 ests per chain, 48000 per kthread
[ 1162.512535][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2095'.
[ 1166.568494][   T23] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 1166.940591][   T23] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1166.969915][   T23] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1167.004351][   T23] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1167.037586][   T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1167.079522][   T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1167.202924][T19888] netlink: 'syz.1.2114': attribute type 1 has an invalid length.
[ 1169.649407][   T23] usb 7-1: string descriptor 0 read error: -71
[ 1169.655817][   T23] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1169.703303][   T23] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1169.798913][   T23] usb 7-1: can't set config #1, error -71
[ 1169.837558][   T23] usb 7-1: USB disconnect, device number 100
[ 1170.428633][   T23] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[ 1170.618374][   T23] usb 7-1: Using ep0 maxpacket: 32
[ 1170.626003][   T23] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1170.638841][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.685230][   T23] usb 7-1: config 0 descriptor??
[ 1170.932485][   T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1170.966185][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1171.087723][   T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1171.159752][   T23] usb 7-1: media controller created
[ 1171.334269][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1171.694813][   T23] az6027: usb out operation failed. (-71)
[ 1171.701257][   T23] az6027: usb out operation failed. (-71)
[ 1171.707030][   T23] stb0899_attach: Driver disabled by Kconfig
[ 1171.713111][   T23] az6027: no front-end attached
[ 1171.713111][   T23] 
[ 1171.721674][   T23] az6027: usb out operation failed. (-71)
[ 1171.727552][   T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1171.832993][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69
[ 1171.926816][   T23] dvb-usb: schedule remote query interval to 400 msecs.
[ 1171.970580][   T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1172.069228][   T23] usb 7-1: USB disconnect, device number 101
[ 1173.232372][   T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1176.808076][T19963] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2137'.
[ 1177.813574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.823441][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.968357][T18279] Bluetooth: hci1: command 0x0406 tx timeout
[ 1182.898479][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1183.961044][T20022] netlink: 'syz.7.2153': attribute type 1 has an invalid length.
[ 1185.089506][T20033] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2158'.
[ 1188.440523][T20062] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2165'.
[ 1191.450640][T20100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2175'.
[ 1197.009132][T12691] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1198.142563][T12691] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1198.168827][T12691] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1198.204457][T12691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1198.225638][T12691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1198.247907][T12691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1198.280074][T12691] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1198.303048][T12691] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1198.317949][T12691] usb 4-1: Product: syz
[ 1198.326859][T12691] usb 4-1: Manufacturer: syz
[ 1198.349385][T12691] cdc_wdm 4-1:1.0: skipping garbage
[ 1198.388038][T12691] cdc_wdm 4-1:1.0: skipping garbage
[ 1198.415338][T20143] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2190'.
[ 1198.428560][T12691] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1198.434629][T12691] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1198.557097][T12691] usb 4-1: USB disconnect, device number 59
[ 1201.598617][T12690] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 1201.905392][T12690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1201.984756][T12690] usb 7-1: New USB device found, idVendor=01ef, idProduct=0000, bcdDevice= 0.00
[ 1202.030797][T12690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.864706][T12690] usb 7-1: config 0 descriptor??
[ 1203.897916][T12691] usb 8-1: new high-speed USB device number 85 using dummy_hcd
[ 1204.210741][T12690] usb 7-1: string descriptor 0 read error: -71
[ 1204.419418][T12690] usbhid 7-1:0.0: can't add hid device: -71
[ 1204.427893][T12691] usb 8-1: Using ep0 maxpacket: 8
[ 1204.439355][T12690] usbhid: probe of 7-1:0.0 failed with error -71
[ 1204.449170][T12691] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1204.470053][T12690] usb 7-1: USB disconnect, device number 102
[ 1204.489188][T12691] usb 8-1: config 4 has an invalid interface number: 30 but max is 0
[ 1204.517879][T12691] usb 8-1: config 4 has no interface number 0
[ 1204.553872][T12691] usb 8-1: config 4 interface 30 has no altsetting 0
[ 1204.571870][T12691] usb 8-1: string descriptor 0 read error: -22
[ 1204.588221][T12691] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1204.618151][T12691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.654517][T12691] dw2102: su3000_identify_state
[ 1204.660249][T12691] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1204.688035][T12691] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1204.704184][T12691] dvb-usb: bulk message failed: -22 (2/0)
[ 1204.733245][T12691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1204.806600][T12691] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1204.828346][T12691] usb 8-1: media controller created
[ 1204.833847][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1204.868450][T12691] dw2102: i2c transfer failed.
[ 1204.901178][T20181] dw2102: i2c wr: len=67 is too big!
[ 1204.901178][T20181] 
[ 1204.920503][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1204.943931][T12691] dw2102: i2c transfer failed.
[ 1204.963065][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1204.981146][T12691] dw2102: i2c transfer failed.
[ 1204.986013][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1205.017670][T12691] dw2102: i2c transfer failed.
[ 1205.035998][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1205.040819][T20190] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2205'.
[ 1205.059730][T12691] dw2102: i2c transfer failed.
[ 1205.086404][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1205.120490][T12691] dw2102: i2c transfer failed.
[ 1205.136871][T12691] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1205.182091][T12691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1205.262135][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1205.276932][T12691] dw2102: command 0x0e transfer failed.
[ 1205.329956][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1205.379859][T12691] dw2102: command 0x0e transfer failed.
[ 1205.708022][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1205.708092][T12691] dw2102: command 0x0e transfer failed.
[ 1205.708162][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1205.708179][T12691] dw2102: command 0x0e transfer failed.
[ 1205.708190][T12691] dvb-usb: bulk message failed: -22 (1/0)
[ 1205.708206][T12691] dw2102: command 0x51 transfer failed.
[ 1205.708218][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1205.708233][T12691] dw2102: i2c probe for address 0x68 failed.
[ 1205.708247][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1205.708262][T12691] dw2102: i2c probe for address 0x69 failed.
[ 1205.708275][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1205.708290][T12691] dw2102: i2c probe for address 0x6a failed.
[ 1205.708301][T12691] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1205.708314][T12691] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1206.407864][T12691] rc_core: IR keymap rc-tt-1500 not found
[ 1206.407884][T12691] Registered IR keymap rc-empty
[ 1206.409108][T12691] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 1206.411086][T12691] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input70
[ 1206.445807][T12691] dvb-usb: schedule remote query interval to 250 msecs.
[ 1206.445837][T12691] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1206.445854][T12691] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1206.458395][T12691] usb 8-1: USB disconnect, device number 85
[ 1206.683035][T20208] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1206.683079][T20208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1207.459418][T12691] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1208.598336][T20194] tty tty22: ldisc open failed (-12), clearing slot 21
[ 1209.518148][T20223] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2214'.
[ 1210.479803][T12691] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1210.768209][T12691] usb 2-1: Using ep0 maxpacket: 8
[ 1210.786172][T12691] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1210.873468][T12691] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[ 1211.131544][T12691] usb 2-1: config 4 has no interface number 0
[ 1211.325451][T12691] usb 2-1: config 4 interface 30 has no altsetting 0
[ 1211.374319][T12691] usb 2-1: string descriptor 0 read error: -22
[ 1211.381105][T12691] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1211.403094][T12691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.459039][T12691] dw2102: su3000_identify_state
[ 1211.481854][T12691] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1211.521354][T12691] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1211.527539][T12691] dvb-usb: bulk message failed: -22 (2/0)
[ 1211.580256][T12691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1211.615060][T12691] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1211.870150][T12691] usb 2-1: media controller created
[ 1211.964001][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.047720][T12691] dw2102: i2c transfer failed.
[ 1212.110416][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.225636][T12691] dw2102: i2c transfer failed.
[ 1212.269064][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.274972][T12691] dw2102: i2c transfer failed.
[ 1212.327879][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.338307][T12691] dw2102: i2c transfer failed.
[ 1212.343188][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.370402][T12691] dw2102: i2c transfer failed.
[ 1212.375295][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1212.409944][T12691] dw2102: i2c transfer failed.
[ 1212.436972][T12691] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1213.107968][T12691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1213.208321][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1213.214180][T12691] dw2102: command 0x0e transfer failed.
[ 1213.256667][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1213.278003][T12691] dw2102: command 0x0e transfer failed.
[ 1213.493879][T20250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2223'.
[ 1213.612410][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1214.067727][T20257] lo speed is unknown, defaulting to 1000
[ 1214.412975][T20257] lo speed is unknown, defaulting to 1000
[ 1214.590683][T12691] dw2102: command 0x0e transfer failed.
[ 1214.596426][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1214.606305][T12691] dw2102: command 0x0e transfer failed.
[ 1214.612710][T12691] dvb-usb: bulk message failed: -22 (1/0)
[ 1214.623647][T12691] dw2102: command 0x51 transfer failed.
[ 1214.659033][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1214.670314][T12691] dw2102: i2c probe for address 0x68 failed.
[ 1214.676369][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1214.694842][T12691] dw2102: i2c probe for address 0x69 failed.
[ 1214.705991][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1214.857018][T12691] dw2102: i2c probe for address 0x6a failed.
[ 1214.863914][T12691] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1214.877933][T12691] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1215.998068][T12691] rc_core: IR keymap rc-tt-1500 not found
[ 1215.998092][T12691] Registered IR keymap rc-empty
[ 1216.009625][T12691] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1216.020091][T12691] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input71
[ 1216.066437][T12691] dvb-usb: schedule remote query interval to 250 msecs.
[ 1216.066468][T12691] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1216.066482][T12691] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1216.090664][T12691] usb 2-1: USB disconnect, device number 13
[ 1216.843681][T12691] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1217.880402][T20286] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2234'.
[ 1220.315659][T12691] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1220.381862][T20318] netlink: 'syz.7.2243': attribute type 10 has an invalid length.
[ 1220.420585][T20318] team0: Port device wlan1 added
[ 1220.675740][T12691] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1220.844157][T12691] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1220.877990][ T6788] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1220.888196][T20319] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2245'.
[ 1220.910614][T12691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1220.941877][T12691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1220.988071][T12691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1221.040358][T12691] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1221.070656][T12691] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1221.094784][T12691] usb 2-1: Product: syz
[ 1221.117916][ T6788] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[ 1221.139230][ T6788] usb 4-1: config 1 has no interface number 0
[ 1221.145439][ T6788] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[ 1221.166674][T12691] usb 2-1: Manufacturer: syz
[ 1221.187602][T12691] cdc_wdm 2-1:1.0: skipping garbage
[ 1221.207191][T12691] cdc_wdm 2-1:1.0: skipping garbage
[ 1221.214964][ T6788] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1221.242389][T12691] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1221.256576][ T6788] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1221.276483][T12691] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1221.289293][ T6788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.304549][ T6788] usb 4-1: Product: syz
[ 1221.309856][ T6788] usb 4-1: Manufacturer: syz
[ 1221.316437][ T6788] usb 4-1: SerialNumber: syz
[ 1221.356830][T20315] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1221.402171][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 5 bytes
[ 1221.428846][ T6788] usb 4-1: Expected 3 endpoints, found: 2
[ 1221.605637][   T27] usb 2-1: USB disconnect, device number 14
[ 1222.328445][   T27] usb 8-1: new high-speed USB device number 86 using dummy_hcd
[ 1222.340756][T18279] Bluetooth: hci1: command 0x0406 tx timeout
[ 1222.582197][   T27] usb 8-1: Using ep0 maxpacket: 16
[ 1222.883596][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1222.896302][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1222.907714][   T27] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1222.917446][   T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1222.962688][   T27] usb 8-1: config 0 descriptor??
[ 1223.326476][ T6788] usb 4-1: USB disconnect, device number 60
[ 1223.416193][   T27] mcp2221 0003:04D8:00DD.0011: item fetching failed at offset 1/5
[ 1223.475325][   T27] mcp2221 0003:04D8:00DD.0011: can't parse reports
[ 1223.505554][   T27] mcp2221: probe of 0003:04D8:00DD.0011 failed with error -22
[ 1223.617578][   T27] usb 8-1: USB disconnect, device number 86
[ 1224.064507][T20344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2254'.
[ 1225.160998][T20348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2257'.
[ 1227.811981][T20377] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2264'.
[ 1229.936367][T20384] bridge0: entered promiscuous mode
[ 1230.019154][T20384] macvlan2: entered promiscuous mode
[ 1230.379451][T20388] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2269'.
[ 1230.471567][T20392] binder: 20391:20392 ioctl 4018620d 0 returned -22
[ 1231.775098][T20400] sctp: [Deprecated]: syz.7.2270 (pid 20400) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1231.775098][T20400] Use struct sctp_sack_info instead
[ 1231.798045][ T6788] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1231.903078][T20408] sctp: [Deprecated]: syz.7.2270 (pid 20408) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1231.903078][T20408] Use struct sctp_sack_info instead
[ 1232.037875][ T6788] usb 4-1: Using ep0 maxpacket: 16
[ 1232.079506][ T6788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1232.115916][ T6788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1232.150409][ T6788] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1232.188715][ T6788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.232263][ T6788] usb 4-1: config 0 descriptor??
[ 1232.305361][T20395] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1232.374864][T20395] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1232.439050][T20395] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1232.820993][T20395] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1232.912651][ T6788] usbhid 4-1:0.0: can't add hid device: -71
[ 1232.931101][ T6788] usbhid: probe of 4-1:0.0 failed with error -71
[ 1233.010897][ T6788] usb 4-1: USB disconnect, device number 61
[ 1234.001546][T18279] Bluetooth: hci4: command 0x0406 tx timeout
[ 1234.418502][T18279] Bluetooth: hci2: command 0x0406 tx timeout
[ 1234.917816][T18279] Bluetooth: hci1: command 0x0406 tx timeout
[ 1235.050347][T20427] tipc: Started in network mode
[ 1235.072291][T20427] tipc: Node identity 9ef517c1d725, cluster identity 4711
[ 1235.101036][T20427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1235.138311][T20429] syzkaller0: entered promiscuous mode
[ 1235.193878][T20429] syzkaller0: entered allmulticast mode
[ 1235.303172][T20427] tipc: Resetting bearer <eth:syzkaller0>
[ 1235.387338][T20426] tipc: Resetting bearer <eth:syzkaller0>
[ 1235.581507][T20426] tipc: Disabling bearer <eth:syzkaller0>
[ 1235.853976][T20431] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2280'.
[ 1236.497882][T18279] Bluetooth: hci2: command 0x0406 tx timeout
[ 1236.599188][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.605660][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.623217][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.716866][T20439] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1236.903940][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.925692][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.942793][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1236.962770][T20439] wlan0 speed is unknown, defaulting to 1000
[ 1237.878617][T12691] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[ 1238.082311][T12691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1238.158030][T12691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1238.196863][T12691] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1238.229848][T12691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.269448][T12691] usb 7-1: config 0 descriptor??
[ 1238.808885][   T27] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1238.962159][T12691] usbhid 7-1:0.0: can't add hid device: -71
[ 1238.991242][T12691] usbhid: probe of 7-1:0.0 failed with error -71
[ 1239.010875][   T27] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1239.026687][T12691] usb 7-1: USB disconnect, device number 103
[ 1239.032363][   T27] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1239.072660][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1239.100644][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1239.133158][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1239.195073][   T27] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1239.206961][   T27] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1239.215851][   T27] usb 4-1: Product: syz
[ 1239.224704][   T27] usb 4-1: Manufacturer: syz
[ 1239.242333][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.252833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.291377][   T27] cdc_wdm 4-1:1.0: skipping garbage
[ 1239.296682][   T27] cdc_wdm 4-1:1.0: skipping garbage
[ 1239.329476][   T27] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1239.336503][   T27] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1239.499182][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 5 bytes
[ 1239.710164][T12691] usb 4-1: USB disconnect, device number 62
[ 1239.919920][T20461] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2290'.
[ 1241.355030][T20475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1242.073017][T20464] sctp: [Deprecated]: syz.1.2289 (pid 20464) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1242.073017][T20464] Use struct sctp_sack_info instead
[ 1242.242687][T20464] sctp: [Deprecated]: syz.1.2289 (pid 20464) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1242.242687][T20464] Use struct sctp_sack_info instead
[ 1244.157655][T20484] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1244.178100][T18279] Bluetooth: hci4: command 0x0406 tx timeout
[ 1244.189586][T20484] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1244.268731][T20484] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1245.177951][   T27] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[ 1245.388568][   T27] usb 7-1: Using ep0 maxpacket: 16
[ 1245.402977][   T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.430223][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1245.485838][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1245.523409][   T27] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 1245.542080][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.560743][T20526] loop6: detected capacity change from 0 to 7
[ 1245.581828][   T27] usb 7-1: Product: syz
[ 1245.583056][T20526]  loop6: [CUMANA/ADFS] p1 [ADFS] p1
[ 1245.586114][   T27] usb 7-1: Manufacturer: syz
[ 1245.586137][   T27] usb 7-1: SerialNumber: syz
[ 1245.601237][   T27] usb 7-1: config 0 descriptor??
[ 1245.625513][   T27] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1245.642134][   T27] gspca_stv06xx: st6422 sensor detected
[ 1245.645893][T20526] loop6: partition table partially beyond EOD, truncated
[ 1245.704345][T20526] loop6: p1 size 2319028379 extends beyond EOD, truncated
[ 1245.920157][   T27] STV06xx: probe of 7-1:0.0 failed with error -71
[ 1245.977254][   T27] usb 7-1: USB disconnect, device number 104
[ 1246.258282][T18279] Bluetooth: hci2: command 0x0406 tx timeout
[ 1246.338030][T18279] Bluetooth: hci1: command 0x0406 tx timeout
[ 1246.562551][   T23] usb 8-1: new high-speed USB device number 87 using dummy_hcd
[ 1246.783407][   T23] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1246.824601][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.865983][   T23] usb 8-1: Product: syz
[ 1246.883988][   T23] usb 8-1: Manufacturer: syz
[ 1246.907600][   T23] usb 8-1: SerialNumber: syz
[ 1246.942929][   T23] usb 8-1: config 0 descriptor??
[ 1249.499331][   T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1249.718873][   T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1249.754268][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.814105][   T23] usb 2-1: Product: syz
[ 1249.832018][   T23] usb 2-1: Manufacturer: syz
[ 1249.857418][   T23] usb 2-1: SerialNumber: syz
[ 1250.257417][ T6788] usb 8-1: USB disconnect, device number 87
[ 1250.521916][   T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[ 1250.580999][   T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1250.623690][   T23] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1250.663107][   T23] lan78xx: probe of 2-1:1.0 failed with error -32
[ 1252.272053][ T6788] usb 2-1: USB disconnect, device number 15
[ 1255.328995][T18279] Bluetooth: hci1: command 0x0406 tx timeout
[ 1255.852339][T20604] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1267.329825][T20703] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2361'.
[ 1267.600213][T20709] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2362'.
[ 1270.653984][T12691] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1270.744913][T12691] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1271.161282][T20730] fido_id[20730]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1271.556444][T20734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2370'.
[ 1273.103728][T20738] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2372'.
[ 1273.918142][T20750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2375'.
[ 1275.088273][   T27] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1275.311446][   T27] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[ 1275.338438][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1275.378311][   T27] usb 4-1: Product: syz
[ 1275.388504][   T27] usb 4-1: Manufacturer: syz
[ 1275.403464][   T27] usb 4-1: SerialNumber: syz
[ 1275.439198][   T27] usb 4-1: config 0 descriptor??
[ 1275.906583][   T27] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1275.917939][T12691] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1275.966444][   T27] asix: probe of 4-1:0.0 failed with error -32
[ 1276.130831][T12691] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1276.148290][T12691] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1276.177945][T12691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1276.210131][T12691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1276.260252][T12691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1276.376158][T12691] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1277.260568][T12691] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1277.269351][T12691] usb 2-1: Product: syz
[ 1277.273578][T12691] usb 2-1: Manufacturer: syz
[ 1277.285352][   T28] audit: type=1326 audit(1756127871.265:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20752 comm="syz.3.2377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7059b8ebe9 code=0x0
[ 1277.320940][T12691] cdc_wdm 2-1:1.0: skipping garbage
[ 1277.326239][T12691] cdc_wdm 2-1:1.0: skipping garbage
[ 1277.360152][T12691] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1277.366152][T12691] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1277.481527][T20774] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2383'.
[ 1277.537938][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 5 bytes
[ 1277.758334][T12691] usb 2-1: USB disconnect, device number 16
[ 1278.058563][   T27] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 1278.269700][   T27] usb 7-1: Using ep0 maxpacket: 8
[ 1278.282418][   T27] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1278.309843][   T27] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1278.330433][   T27] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1278.341084][   T27] usb 7-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1278.353850][   T27] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1278.368134][   T27] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1278.389772][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.436966][   T27] usbtmc 7-1:16.0: bulk endpoints not found
[ 1278.495904][   T27] usb 4-1: USB disconnect, device number 63
[ 1278.810160][T20786] nfs: Unknown parameter ''
[ 1280.574484][T20803] kvm: Disabled LAPIC found during irq injection
[ 1280.778533][   T27] usb 7-1: USB disconnect, device number 105
[ 1281.199102][T20806] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2392'.
[ 1282.278963][   T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1282.750717][   T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1282.801107][   T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1282.834952][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1282.875884][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1282.913995][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1282.971746][   T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1283.005871][   T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1283.097372][   T27] usb 2-1: Product: syz
[ 1283.113871][   T27] usb 2-1: Manufacturer: syz
[ 1283.157638][   T27] cdc_wdm 2-1:1.0: skipping garbage
[ 1283.191850][   T27] cdc_wdm 2-1:1.0: skipping garbage
[ 1283.226859][   T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1283.264077][   T27] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1283.441864][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 5 bytes
[ 1283.651940][   T27] usb 2-1: USB disconnect, device number 17
[ 1284.970434][T20840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2403'.
[ 1285.067548][T20843] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2404'.
[ 1285.818653][   T23] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 1286.178418][   T23] usb 7-1: Using ep0 maxpacket: 32
[ 1286.185727][   T23] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1286.195262][   T23] usb 7-1: config 0 has no interface number 0
[ 1286.206750][   T23] usb 7-1: config 0 interface 89 has no altsetting 0
[ 1286.246767][   T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[ 1286.271249][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.283088][T20846] all (unregistering): Released all slaves
[ 1286.340451][   T23] usb 7-1: Product: syz
[ 1286.344702][   T23] usb 7-1: Manufacturer: syz
[ 1286.382045][   T23] usb 7-1: SerialNumber: syz
[ 1286.429149][   T23] usb 7-1: config 0 descriptor??
[ 1286.460886][   T23] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1286.538436][   T23] em28xx 7-1:0.89: Video interface 89 found: bulk
[ 1287.689228][   T23] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[ 1287.775887][   T23] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1287.795868][   T23] em28xx 7-1:0.89: board has no eeprom
[ 1287.878871][   T23] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[ 1287.888489][   T23] em28xx 7-1:0.89: analog set to bulk mode.
[ 1287.904844][   T27] em28xx 7-1:0.89: Registering V4L2 extension
[ 1288.686273][T12691] usb 7-1: USB disconnect, device number 106
[ 1288.694645][T12691] em28xx 7-1:0.89: Disconnecting em28xx
[ 1288.770075][   T27] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[ 1288.777122][   T27] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[ 1288.872023][   T27] em28xx 7-1:0.89: No AC97 audio processor
[ 1288.930763][   T27] usb 7-1: Decoder not found
[ 1288.935481][   T27] em28xx 7-1:0.89: failed to create media graph
[ 1288.961836][   T27] em28xx 7-1:0.89: V4L2 device video103 deregistered
[ 1289.019144][   T27] em28xx 7-1:0.89: Registering snapshot button...
[ 1289.045374][   T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input72
[ 1289.094052][   T27] em28xx 7-1:0.89: Remote control support is not available for this card.
[ 1289.144800][T12691] em28xx 7-1:0.89: Closing input extension
[ 1289.186130][T12691] em28xx 7-1:0.89: Deregistering snapshot button
[ 1289.428325][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1289.446697][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1289.498921][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1289.587336][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1289.615162][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1289.670860][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1289.898858][T12691] em28xx 7-1:0.89: Freeing device
[ 1290.042890][T20860] lo speed is unknown, defaulting to 1000
[ 1290.538000][T12691] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 1290.936883][T12691] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1291.031537][T12691] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1291.086320][T12691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1291.105080][T20860] lo speed is unknown, defaulting to 1000
[ 1291.113978][T12691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1291.120553][T20860] wlan0 speed is unknown, defaulting to 1000
[ 1291.148980][T12691] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1291.185781][T12691] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1291.210262][T12691] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1291.242103][T12691] usb 7-1: Product: syz
[ 1291.246399][T12691] usb 7-1: Manufacturer: syz
[ 1291.258014][T12691] cdc_wdm 7-1:1.0: skipping garbage
[ 1291.263302][T12691] cdc_wdm 7-1:1.0: skipping garbage
[ 1291.271940][T12691] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1291.278377][T12691] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1291.496220][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 5 bytes
[ 1291.706723][T12690] usb 7-1: USB disconnect, device number 107
[ 1291.778488][ T5800] Bluetooth: hci0: command tx timeout
[ 1291.811734][T20860] chnl_net:caif_netlink_parms(): no params data found
[ 1292.039039][   T23] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1292.286178][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1292.307899][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.319076][   T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1292.349829][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.384865][   T23] usb 4-1: config 0 descriptor??
[ 1292.642642][T20860] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.650972][T20860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.659858][T20860] bridge_slave_0: entered allmulticast mode
[ 1292.669094][T20860] bridge_slave_0: entered promiscuous mode
[ 1292.694768][T20860] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.724196][T20860] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.768160][T20860] bridge_slave_1: entered allmulticast mode
[ 1292.776268][T20860] bridge_slave_1: entered promiscuous mode
[ 1292.896235][T20860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1292.906442][ T5835] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1292.954894][T20860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1293.075504][   T23] usb 4-1: language id specifier not provided by device, defaulting to English
[ 1293.101406][ T5835] usb 2-1: Using ep0 maxpacket: 16
[ 1293.142780][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1293.160271][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1293.174997][ T5835] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1293.187838][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.234931][ T5835] usb 2-1: config 0 descriptor??
[ 1293.477425][T20897] mkiss: ax0: crc mode is auto.
[ 1293.714791][   T23] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71
[ 1293.729096][   T23] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71
[ 1293.737544][   T23] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71
[ 1293.752602][ T5835] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0
[ 1293.760020][   T23] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[ 1293.776839][T20860] team0: Port device team_slave_0 added
[ 1293.807174][   T23] uclogic: probe of 0003:256C:006D.0013 failed with error -71
[ 1293.816846][ T5835] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0
[ 1293.838586][ T5835] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0
[ 1293.853222][T20860] team0: Port device team_slave_1 added
[ 1293.858608][ T5800] Bluetooth: hci0: command tx timeout
[ 1293.864878][   T23] usb 4-1: USB disconnect, device number 64
[ 1293.875261][ T5835] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0
[ 1293.895037][ T5835] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0
[ 1293.905766][ T5835] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[ 1294.035208][T20860] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1294.052083][ T5835] usb 2-1: USB disconnect, device number 18
[ 1294.059089][T20860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.096862][T20860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1294.131828][T20860] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1294.140896][T20860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.189052][T20899] random: crng reseeded on system resumption
[ 1294.192126][T20860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1294.351270][T20860] hsr_slave_0: entered promiscuous mode
[ 1294.380130][T20860] hsr_slave_1: entered promiscuous mode
[ 1295.908296][T20910] (null): rxe_set_mtu: Set mtu to 4096
[ 1295.938041][ T5800] Bluetooth: hci0: command tx timeout
[ 1296.259584][T20910] lo speed is unknown, defaulting to 1000
[ 1296.268070][T20910] lo speed is unknown, defaulting to 1000
[ 1296.274531][T20910] lo speed is unknown, defaulting to 1000
[ 1296.621902][T20910] infiniband s
z1: set active
[ 1296.626837][T20910] infiniband s
z1: added lo
[ 1296.814788][   T23] lo speed is unknown, defaulting to 1000
[ 1296.986000][T20910] RDS/IB: s
z1: added
[ 1296.991097][T20910] smc: adding ib device s
z1 with port count 1
[ 1296.998734][T20910] smc:    ib device s
z1 port 1 has pnetid 
[ 1297.098033][T12690] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1297.456652][T20910] lo speed is unknown, defaulting to 1000
[ 1297.637639][T20910] lo speed is unknown, defaulting to 1000
[ 1297.802769][T20910] lo speed is unknown, defaulting to 1000
[ 1297.968523][T20910] lo speed is unknown, defaulting to 1000
[ 1298.125788][T20910] lo speed is unknown, defaulting to 1000
[ 1298.291311][   T23] lo speed is unknown, defaulting to 1000
[ 1298.304891][ T5800] Bluetooth: hci0: command tx timeout
[ 1298.836046][T12690] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1299.385141][T12690] usb 4-1: can't read configurations, error -71
[ 1300.673267][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.680598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.861799][T20860] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1301.909767][T20860] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1301.941553][T20860] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1301.984115][T20860] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1304.427649][T20860] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1304.644191][T20860] 8021q: adding VLAN 0 to HW filter on device team0
[ 1304.653403][T12690] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1304.694887][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1304.702288][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1304.772474][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1304.779880][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1304.860504][T12690] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1304.898396][T12690] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1304.913914][T12690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1304.948567][T12690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1305.003895][T12690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1305.018610][T20860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1305.049913][T12690] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1305.059696][T12691] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[ 1305.076295][T12690] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1305.085751][T12690] usb 4-1: Product: syz
[ 1305.096496][T12690] usb 4-1: Manufacturer: syz
[ 1305.136333][T12690] cdc_wdm 4-1:1.0: skipping garbage
[ 1305.161918][T12690] cdc_wdm 4-1:1.0: skipping garbage
[ 1305.186393][T12690] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1305.204624][T12690] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1305.259108][T12691] usb 7-1: Using ep0 maxpacket: 16
[ 1305.275480][T12691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1305.307890][T12691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1305.343858][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 5 bytes
[ 1305.358607][T12691] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1305.381526][T12691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.423198][T12691] usb 7-1: config 0 descriptor??
[ 1305.548457][ T5835] usb 4-1: USB disconnect, device number 67
[ 1305.811852][T20860] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1306.365732][T12691] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1306.440881][T12691] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1306.465542][T12691] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1306.492225][T12691] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1306.534391][T12691] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0
[ 1306.570047][T12691] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 1306.736283][T12691] usb 7-1: USB disconnect, device number 108
[ 1308.939283][T20860] veth0_vlan: entered promiscuous mode
[ 1309.037867][T20860] veth1_vlan: entered promiscuous mode
[ 1309.292573][T21010] netlink: 'syz.1.2445': attribute type 10 has an invalid length.
[ 1309.381873][T21010] veth0_vlan: left promiscuous mode
[ 1309.406439][T21010] veth0_vlan: entered promiscuous mode
[ 1309.427040][T21010] team0: Device veth0_vlan failed to register rx_handler
[ 1309.535116][T20860] veth0_macvtap: entered promiscuous mode
[ 1309.612693][T20860] veth1_macvtap: entered promiscuous mode
[ 1309.619202][T12690] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1309.754065][T20860] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1309.813697][T20860] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1309.834184][T20860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1309.851339][T12690] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1309.868831][T12690] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1309.907464][T20860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1309.933788][T20860] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1309.937812][T12690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1309.954017][T20860] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1310.003061][T12690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1310.050681][T12690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1310.148943][T12690] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1310.188936][T12690] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1310.228519][T12690] usb 4-1: Product: syz
[ 1310.254208][T12690] usb 4-1: Manufacturer: syz
[ 1310.297439][T12690] cdc_wdm 4-1:1.0: skipping garbage
[ 1310.321343][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1310.330144][T12690] cdc_wdm 4-1:1.0: skipping garbage
[ 1310.375707][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1310.375954][T12690] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1310.435567][T12690] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1310.574940][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 5 bytes
[ 1310.638462][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1310.659615][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1310.798592][ T5835] usb 4-1: USB disconnect, device number 68
[ 1311.997901][T12690] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1312.214657][T12690] usb 4-1: Using ep0 maxpacket: 16
[ 1312.249876][T12690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1312.381657][T12690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1312.488626][T12690] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1312.534006][T12690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1312.576263][T12690] usb 4-1: config 0 descriptor??
[ 1313.241481][T12690] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1313.922635][T12690] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1313.929861][T12690] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1313.937058][T12690] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1313.948246][T12690] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0
[ 1313.959167][T12690] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[ 1314.130713][T12690] usb 4-1: USB disconnect, device number 69
[ 1314.546548][  T787] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[ 1314.923955][  T787] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1315.003908][  T787] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1315.173107][  T787] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1315.254500][  T787] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1315.293914][  T787] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1315.419149][  T787] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1315.437934][  T787] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1315.466626][  T787] usb 7-1: Product: syz
[ 1315.477068][  T787] usb 7-1: Manufacturer: syz
[ 1315.518785][  T787] cdc_wdm 7-1:1.0: skipping garbage
[ 1315.524257][  T787] cdc_wdm 7-1:1.0: skipping garbage
[ 1315.601231][  T787] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1315.607232][  T787] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1315.715895][T21063] syz.3.2459[21063] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1315.716750][T21063] syz.3.2459[21063] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1317.020717][  T787] usb 7-1: USB disconnect, device number 109
[ 1318.897861][T12691] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1319.107824][T12691] usb 2-1: Using ep0 maxpacket: 16
[ 1319.183379][T12691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.674008][T12691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1319.718014][T12691] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1319.752117][T12691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.848165][T21097] netlink: 'syz.3.2470': attribute type 6 has an invalid length.
[ 1319.948274][T21097] netlink: 'syz.3.2470': attribute type 6 has an invalid length.
[ 1320.118937][T12691] usb 2-1: config 0 descriptor??
[ 1320.551189][T12691] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0
[ 1320.603763][T12691] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0
[ 1320.627793][T12691] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0
[ 1320.667805][T12691] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0
[ 1320.675156][T12691] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0
[ 1320.734165][T12691] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[ 1320.902194][T12691] usb 2-1: USB disconnect, device number 19
[ 1323.020194][T21119] kvm: emulating exchange as write
[ 1323.113234][T21102] Bluetooth: MGMT ver 1.22
[ 1325.707862][T12691] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 1325.917817][T12691] usb 8-1: Using ep0 maxpacket: 16
[ 1325.956569][T12691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1325.998331][T21143] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1326.039446][T12691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1326.076737][T12691] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1326.127878][T12691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.205936][T12691] usb 8-1: config 0 descriptor??
[ 1326.738767][T12691] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[ 1326.746278][T12691] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[ 1326.843207][T12691] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[ 1326.870318][T12691] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[ 1326.893085][T12691] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0
[ 1326.924817][T12691] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1327.082580][T12691] usb 8-1: USB disconnect, device number 88
[ 1327.795313][T21158] o2cb: This node has not been configured.
[ 1327.802250][T21158] o2cb: Cluster check failed. Fix errors before retrying.
[ 1327.809770][T21158] (syz.6.2489,21158,0):user_dlm_register:674 ERROR: status = -22
[ 1327.817890][T21158] (syz.6.2489,21158,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[ 1328.821394][T21164] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2492'.
[ 1329.408672][ T6788] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[ 1329.776997][ T6788] usb 8-1: Using ep0 maxpacket: 32
[ 1329.838472][ T6788] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[ 1329.887469][ T6788] usb 8-1: config 0 has no interface number 0
[ 1329.928075][ T6788] usb 8-1: config 0 interface 12 has no altsetting 0
[ 1330.012111][ T6788] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[ 1330.072215][ T6788] usb 8-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[ 1330.122582][ T6788] usb 8-1: Product: syz
[ 1330.167246][ T6788] usb 8-1: Manufacturer: syz
[ 1330.184999][ T6788] usb 8-1: SerialNumber: syz
[ 1330.215642][ T6788] usb 8-1: config 0 descriptor??
[ 1330.427873][  T787] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1331.017916][  T787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1331.091021][T12691] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 1331.137333][  T787] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1331.207802][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1331.223061][  T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1331.257744][  T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1331.290277][  T787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1331.299646][  T787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1331.318305][  T787] usb 4-1: Product: syz
[ 1331.322592][  T787] usb 4-1: Manufacturer: syz
[ 1331.344024][  T787] cdc_wdm 4-1:1.0: skipping garbage
[ 1331.352386][T12691] usb 7-1: Using ep0 maxpacket: 8
[ 1331.380796][  T787] cdc_wdm 4-1:1.0: skipping garbage
[ 1331.392485][T12691] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1331.410197][  T787] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1331.416257][  T787] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1331.439739][T12691] usb 7-1: config 4 has an invalid interface number: 30 but max is 0
[ 1331.454219][T12691] usb 7-1: config 4 has no interface number 0
[ 1331.473849][T12691] usb 7-1: config 4 interface 30 has no altsetting 0
[ 1331.496449][T12691] usb 7-1: string descriptor 0 read error: -22
[ 1331.518242][T12691] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1331.527413][T12691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.586488][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 5 bytes
[ 1331.647081][T12691] dw2102: su3000_identify_state
[ 1331.702891][T12691] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1331.728843][T12691] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1332.148921][   T27] usb 4-1: USB disconnect, device number 70
[ 1332.525606][T21201] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1332.909484][T12691] dvb-usb: bulk message failed: -22 (2/0)
[ 1332.924720][T12691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1332.961622][T12691] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1332.991880][T12691] usb 7-1: media controller created
[ 1332.997759][ T6788] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1333.005682][ T6788] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[ 1333.017739][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.023555][T12691] dw2102: i2c transfer failed.
[ 1333.038308][ T6788] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1333.046072][ T6788] f81534: probe of 8-1:0.12 failed with error -71
[ 1333.057801][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.063632][T12691] dw2102: i2c transfer failed.
[ 1333.089526][ T6788] usb 8-1: USB disconnect, device number 89
[ 1333.098018][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.103818][T12691] dw2102: i2c transfer failed.
[ 1333.140305][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.146135][T12691] dw2102: i2c transfer failed.
[ 1333.181853][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.188226][T12691] dw2102: i2c transfer failed.
[ 1333.193079][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1333.204388][T12691] dw2102: i2c transfer failed.
[ 1333.211167][T12691] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1333.246665][T12691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1333.288444][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1333.315490][T12691] dw2102: command 0x0e transfer failed.
[ 1333.328724][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1333.336078][T12691] dw2102: command 0x0e transfer failed.
[ 1333.585107][T21208] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2506'.
[ 1333.701346][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1333.707259][T12691] dw2102: command 0x0e transfer failed.
[ 1333.737872][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1333.762646][T12691] dw2102: command 0x0e transfer failed.
[ 1333.995372][T12691] dvb-usb: bulk message failed: -22 (1/0)
[ 1334.001272][T12691] dw2102: command 0x51 transfer failed.
[ 1334.007956][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1334.013744][T12691] dw2102: i2c probe for address 0x68 failed.
[ 1334.020181][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1334.026300][T12691] dw2102: i2c probe for address 0x69 failed.
[ 1334.048675][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1334.080957][T12691] dw2102: i2c probe for address 0x6a failed.
[ 1334.111595][T12691] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1334.160803][ T5800] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6
[ 1334.187945][T12691] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1334.407884][T12691] rc_core: IR keymap rc-tt-1500 not found
[ 1334.457513][T12691] Registered IR keymap rc-empty
[ 1334.533009][T12691] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[ 1334.709705][T12691] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input73
[ 1334.778579][T12691] dvb-usb: schedule remote query interval to 250 msecs.
[ 1334.785671][T12691] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1334.857802][T12691] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1334.922364][T12691] usb 7-1: USB disconnect, device number 110
[ 1335.666914][T12691] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1336.187879][T12691] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 1336.499323][T12691] usb 7-1: Using ep0 maxpacket: 8
[ 1336.521296][T12691] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1336.549258][T12691] usb 7-1: config 4 has an invalid interface number: 30 but max is 0
[ 1336.567972][T12691] usb 7-1: config 4 has no interface number 0
[ 1336.594821][T12691] usb 7-1: config 4 interface 30 has no altsetting 0
[ 1336.609039][T12691] usb 7-1: string descriptor 0 read error: -22
[ 1336.624538][T12691] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1336.675364][T12691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.704468][T21250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2518'.
[ 1336.740027][T12691] dw2102: su3000_identify_state
[ 1336.753458][T12691] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1336.764159][T12691] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1336.771237][T12691] dvb-usb: bulk message failed: -22 (2/0)
[ 1336.793690][T12691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1336.828600][T12691] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1336.846555][T12691] usb 7-1: media controller created
[ 1336.857854][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1336.886759][T12691] dw2102: i2c transfer failed.
[ 1336.904582][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1336.912131][ T5835] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[ 1336.927948][T12691] dw2102: i2c transfer failed.
[ 1336.953707][T21239] dvb-usb: bulk message failed: -22 (3/0)
[ 1336.977933][T21239] dw2102: i2c transfer failed.
[ 1336.997934][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1337.155286][ T5835] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1337.204914][T12691] dw2102: i2c transfer failed.
[ 1337.237616][ T5835] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1337.328550][ T5835] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1337.337860][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1337.337932][T12691] dw2102: i2c transfer failed.
[ 1337.337990][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1337.338007][T12691] dw2102: i2c transfer failed.
[ 1337.338029][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1337.338044][T12691] dw2102: i2c transfer failed.
[ 1337.338056][T12691] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1337.569102][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1337.606144][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1337.686369][ T5835] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1337.696499][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1337.799137][T12691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1337.848589][ T5835] usb 8-1: Product: syz
[ 1337.853059][ T5835] usb 8-1: Manufacturer: syz
[ 1337.866341][ T5835] cdc_wdm 8-1:1.0: skipping garbage
[ 1337.878800][ T5835] cdc_wdm 8-1:1.0: skipping garbage
[ 1337.890276][ T5835] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1337.891079][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1337.896594][ T5835] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1338.022663][T12691] dw2102: command 0x0e transfer failed.
[ 1338.050817][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1338.071840][T12691] dw2102: command 0x0e transfer failed.
[ 1338.285151][ T5835] usb 8-1: USB disconnect, device number 90
[ 1338.398331][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1338.417636][T12691] dw2102: command 0x0e transfer failed.
[ 1338.445939][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1338.465731][T12691] dw2102: command 0x0e transfer failed.
[ 1338.482933][T12691] dvb-usb: bulk message failed: -22 (1/0)
[ 1338.496913][T12691] dw2102: command 0x51 transfer failed.
[ 1338.514634][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1338.531701][T12691] dw2102: i2c probe for address 0x68 failed.
[ 1338.543677][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1338.556570][T12691] dw2102: i2c probe for address 0x69 failed.
[ 1338.573803][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1338.581199][T12691] dw2102: i2c probe for address 0x6a failed.
[ 1338.592729][T12691] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1338.602475][T12691] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1338.830708][T12691] rc_core: IR keymap rc-tt-1500 not found
[ 1338.970318][T12691] Registered IR keymap rc-empty
[ 1339.284384][T12691] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[ 1339.459916][T12691] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input74
[ 1339.529746][T12691] dvb-usb: schedule remote query interval to 250 msecs.
[ 1339.594932][T12691] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1339.670937][T12691] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1339.750654][T12691] usb 7-1: USB disconnect, device number 111
[ 1340.004244][T21280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2528'.
[ 1340.052595][T12691] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1340.458157][T12691] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[ 1340.658599][T12691] usb 7-1: Using ep0 maxpacket: 8
[ 1340.681401][T12691] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1340.699674][T12691] usb 7-1: config 4 has an invalid interface number: 30 but max is 0
[ 1340.714790][T12691] usb 7-1: config 4 has no interface number 0
[ 1340.733182][T12691] usb 7-1: config 4 interface 30 has no altsetting 0
[ 1340.766734][T12691] usb 7-1: string descriptor 0 read error: -22
[ 1340.777647][T12691] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1340.806070][T12691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.857295][T12691] dw2102: su3000_identify_state
[ 1340.874468][T12691] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1340.894831][T12691] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1340.918762][T12691] dvb-usb: bulk message failed: -22 (2/0)
[ 1340.943665][T12691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1340.972343][T12691] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1340.999845][T12691] usb 7-1: media controller created
[ 1341.011033][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.017528][T12691] dw2102: i2c transfer failed.
[ 1341.023110][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.035219][T12691] dw2102: i2c transfer failed.
[ 1341.041650][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.057144][T12691] dw2102: i2c transfer failed.
[ 1341.064704][T21284] dvb-usb: bulk message failed: -22 (3/0)
[ 1341.074043][T21284] dw2102: i2c transfer failed.
[ 1341.080730][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.089238][T12691] dw2102: i2c transfer failed.
[ 1341.095318][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.109873][T12691] dw2102: i2c transfer failed.
[ 1341.115106][T12691] dvb-usb: bulk message failed: -22 (6/0)
[ 1341.243482][T12691] dw2102: i2c transfer failed.
[ 1341.248650][T12691] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1341.276514][T12691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1341.363337][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1341.386408][T12691] dw2102: command 0x0e transfer failed.
[ 1341.409092][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1341.415042][T12691] dw2102: command 0x0e transfer failed.
[ 1341.598020][   T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1341.773164][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1341.805628][T12691] dw2102: command 0x0e transfer failed.
[ 1341.811116][   T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1341.832015][T12691] dvb-usb: bulk message failed: -22 (3/0)
[ 1341.855175][   T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1341.877517][T12691] dw2102: command 0x0e transfer failed.
[ 1341.908176][T12691] dvb-usb: bulk message failed: -22 (1/0)
[ 1341.914618][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1341.938112][T12691] dw2102: command 0x51 transfer failed.
[ 1341.960599][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1341.974794][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1342.001080][T12691] dw2102: i2c probe for address 0x68 failed.
[ 1342.018410][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1342.042620][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1342.082079][   T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1342.118519][   T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1342.127906][T12691] dw2102: i2c probe for address 0x69 failed.
[ 1342.157391][   T27] usb 2-1: Product: syz
[ 1342.167932][   T27] usb 2-1: Manufacturer: syz
[ 1342.194863][T12691] dvb-usb: bulk message failed: -22 (5/0)
[ 1342.212704][T12691] dw2102: i2c probe for address 0x6a failed.
[ 1342.233909][   T27] cdc_wdm 2-1:1.0: skipping garbage
[ 1342.257578][T12691] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1342.292242][T12691] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1342.300109][T21315] input: syz0 as /devices/virtual/input/input75
[ 1342.311915][   T27] cdc_wdm 2-1:1.0: skipping garbage
[ 1342.359569][   T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1342.390391][   T27] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1342.655358][   T27] usb 2-1: USB disconnect, device number 20
[ 1342.708584][T12691] rc_core: IR keymap rc-tt-1500 not found
[ 1342.715060][T21313] tmpfs: Bad value for 'mpol'
[ 1342.720903][T12691] Registered IR keymap rc-empty
[ 1342.792953][T12691] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[ 1342.844630][T12691] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input76
[ 1342.887193][T12691] dvb-usb: schedule remote query interval to 250 msecs.
[ 1342.904784][T12691] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1342.968359][T12691] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1343.048198][T12691] usb 7-1: USB disconnect, device number 112
[ 1343.227609][T21321] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2541'.
[ 1343.424447][T12691] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1344.416589][T21335] input: syz0 as /devices/virtual/input/input77
[ 1345.168531][   T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1345.414211][   T27] usb 2-1: Using ep0 maxpacket: 8
[ 1345.442972][   T27] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1345.509211][   T27] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[ 1345.538484][   T27] usb 2-1: config 4 has no interface number 0
[ 1345.566456][   T27] usb 2-1: config 4 interface 30 has no altsetting 0
[ 1345.615051][   T27] usb 2-1: string descriptor 0 read error: -22
[ 1345.639392][   T27] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1345.683992][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1345.732977][   T27] dw2102: su3000_identify_state
[ 1345.761540][   T27] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1345.798832][   T27] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1345.834052][   T27] dvb-usb: bulk message failed: -22 (2/0)
[ 1345.900356][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1345.935599][T21352] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in;
[ 1345.935599][T21352]    program syz.6.2550 not setting count and/or reply_len properly
[ 1345.968128][T21343] dvb-usb: bulk message failed: -22 (3/0)
[ 1345.974150][T21343] dw2102: i2c transfer failed.
[ 1345.984735][   T27] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1346.025980][   T27] usb 2-1: media controller created
[ 1346.045066][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.061319][   T27] dw2102: i2c transfer failed.
[ 1346.066701][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.075560][   T27] dw2102: i2c transfer failed.
[ 1346.095773][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.114411][   T27] dw2102: i2c transfer failed.
[ 1346.136658][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.147245][   T27] dw2102: i2c transfer failed.
[ 1346.161635][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.172216][   T27] dw2102: i2c transfer failed.
[ 1346.184431][   T27] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.203015][   T27] dw2102: i2c transfer failed.
[ 1346.215846][   T27] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1346.268483][ T5835] usb 8-1: new high-speed USB device number 91 using dummy_hcd
[ 1346.306283][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1346.364125][   T27] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.393110][   T27] dw2102: command 0x0e transfer failed.
[ 1346.419625][   T27] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.440938][   T27] dw2102: command 0x0e transfer failed.
[ 1346.468530][ T5835] usb 8-1: Using ep0 maxpacket: 16
[ 1346.484530][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1346.513086][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1346.540914][ T5835] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1346.606045][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1346.646417][ T5835] usb 8-1: config 0 descriptor??
[ 1346.778215][   T27] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.785006][   T27] dw2102: command 0x0e transfer failed.
[ 1346.815833][   T27] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.832645][   T27] dw2102: command 0x0e transfer failed.
[ 1346.841565][   T27] dvb-usb: bulk message failed: -22 (1/0)
[ 1346.853098][   T27] dw2102: command 0x51 transfer failed.
[ 1346.867468][   T27] dvb-usb: bulk message failed: -22 (5/0)
[ 1346.884476][   T27] dw2102: i2c probe for address 0x68 failed.
[ 1346.894995][   T27] dvb-usb: bulk message failed: -22 (5/0)
[ 1346.904331][   T27] dw2102: i2c probe for address 0x69 failed.
[ 1346.917490][   T27] dvb-usb: bulk message failed: -22 (5/0)
[ 1346.985235][   T27] dw2102: i2c probe for address 0x6a failed.
[ 1347.034568][   T27] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1347.082976][ T5835] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0
[ 1347.095165][   T27] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1347.118774][ T5835] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0
[ 1347.133715][ T5835] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0
[ 1347.191591][ T5835] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0
[ 1347.222969][ T5835] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0
[ 1347.288746][T21357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2552'.
[ 1347.299591][ T5835] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1347.418673][   T27] rc_core: IR keymap rc-tt-1500 not found
[ 1347.425534][   T27] Registered IR keymap rc-empty
[ 1347.485549][   T27] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1347.549889][   T27] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input78
[ 1347.588478][ T5835] usb 8-1: USB disconnect, device number 91
[ 1347.669320][   T27] dvb-usb: schedule remote query interval to 250 msecs.
[ 1347.676416][   T27] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1347.736516][   T27] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1347.802904][   T27] usb 2-1: USB disconnect, device number 21
[ 1348.250928][   T27] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1349.988413][ T5835] usb 8-1: new high-speed USB device number 92 using dummy_hcd
[ 1350.109738][T21386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2562'.
[ 1350.186526][ T5835] usb 8-1: Using ep0 maxpacket: 8
[ 1350.219532][ T5835] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1350.249989][ T5835] usb 8-1: config 4 has an invalid interface number: 30 but max is 0
[ 1350.270865][ T5835] usb 8-1: config 4 has no interface number 0
[ 1350.277105][ T5835] usb 8-1: config 4 interface 30 has no altsetting 0
[ 1350.335246][ T5835] usb 8-1: string descriptor 0 read error: -22
[ 1350.368658][ T5835] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1350.398548][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.457538][ T5835] dw2102: su3000_identify_state
[ 1350.488505][ T5835] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1350.496085][ T5835] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1350.541039][ T5835] dvb-usb: bulk message failed: -22 (2/0)
[ 1350.551427][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1350.589352][ T5835] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1350.597004][ T5835] usb 8-1: media controller created
[ 1350.630438][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.642719][ T5835] dw2102: i2c transfer failed.
[ 1350.662022][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.681753][ T5835] dw2102: i2c transfer failed.
[ 1350.686842][T21382] dvb-usb: bulk message failed: -22 (3/0)
[ 1350.711896][T21382] dw2102: i2c transfer failed.
[ 1350.717591][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.761453][ T5835] dw2102: i2c transfer failed.
[ 1350.766339][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.828401][ T5835] dw2102: i2c transfer failed.
[ 1350.833575][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.848564][  T787] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[ 1350.886757][ T5835] dw2102: i2c transfer failed.
[ 1350.913998][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1350.930187][ T5835] dw2102: i2c transfer failed.
[ 1350.942817][ T5835] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1350.994258][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1351.045431][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1351.052068][  T787] usb 7-1: Using ep0 maxpacket: 16
[ 1351.063542][  T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1351.072798][ T5835] dw2102: command 0x0e transfer failed.
[ 1351.086298][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1351.097979][  T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1351.105736][ T5835] dw2102: command 0x0e transfer failed.
[ 1351.137864][  T787] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1351.147266][  T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.192737][  T787] usb 7-1: config 0 descriptor??
[ 1351.454643][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1351.479536][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'.
[ 1351.492924][ T5835] dw2102: command 0x0e transfer failed.
[ 1351.534169][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1351.570574][ T5835] dw2102: command 0x0e transfer failed.
[ 1351.644761][ T5835] dvb-usb: bulk message failed: -22 (1/0)
[ 1351.675515][ T5835] dw2102: command 0x51 transfer failed.
[ 1351.686508][  T787] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1351.702685][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1351.723114][ T5835] dw2102: i2c probe for address 0x68 failed.
[ 1351.729842][  T787] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1351.729887][  T787] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1351.793758][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1351.816139][  T787] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1351.818634][ T5835] dw2102: i2c probe for address 0x69 failed.
[ 1351.877398][  T787] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1351.890597][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1351.912040][  T787] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 1351.918472][ T5835] dw2102: i2c probe for address 0x6a failed.
[ 1351.964742][ T5835] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1352.005860][ T5835] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1352.176912][  T787] usb 7-1: USB disconnect, device number 113
[ 1352.339771][ T5835] rc_core: IR keymap rc-tt-1500 not found
[ 1352.384525][ T5835] Registered IR keymap rc-empty
[ 1352.459391][ T5835] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[ 1352.561303][ T5835] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input79
[ 1352.672901][ T5835] dvb-usb: schedule remote query interval to 250 msecs.
[ 1352.695969][ T5835] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1352.717231][T21417] overlayfs: conflicting lowerdir path
[ 1352.724295][ T5835] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1352.786771][ T5835] usb 8-1: USB disconnect, device number 92
[ 1353.183295][T21364] dvb-usb: bulk message failed: -22 (1/0)
[ 1353.191358][T21364] dw2102: i2c transfer failed.
[ 1353.706187][ T5835] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1355.538411][ T5835] usb 7-1: new high-speed USB device number 114 using dummy_hcd
[ 1355.778786][T21438] veth0_to_bridge: entered promiscuous mode
[ 1355.812912][T21437] veth0_to_bridge: left promiscuous mode
[ 1356.271642][ T5835] usb 7-1: Using ep0 maxpacket: 8
[ 1356.285786][ T5835] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1356.319298][ T5835] usb 7-1: config 4 has an invalid interface number: 30 but max is 0
[ 1356.347325][ T5835] usb 7-1: config 4 has no interface number 0
[ 1356.400981][ T5835] usb 7-1: config 4 interface 30 has no altsetting 0
[ 1357.071837][ T5835] usb 7-1: string descriptor 0 read error: -22
[ 1357.088385][ T5835] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1357.108267][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.189032][ T5835] dw2102: su3000_identify_state
[ 1357.194040][ T5835] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1357.253051][ T5835] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1357.288992][ T5835] dvb-usb: bulk message failed: -22 (2/0)
[ 1357.326239][ T5835] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1357.337365][T21433] dvb-usb: bulk message failed: -22 (3/0)
[ 1357.358442][T21433] dw2102: i2c transfer failed.
[ 1357.369227][ T5835] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1357.381934][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'.
[ 1357.405676][ T5835] usb 7-1: media controller created
[ 1357.418461][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.434721][ T5835] dw2102: i2c transfer failed.
[ 1357.454733][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.460899][T12742] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1357.478472][ T5835] dw2102: i2c transfer failed.
[ 1357.492229][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.526057][ T5835] dw2102: i2c transfer failed.
[ 1357.534853][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.560645][ T5835] dw2102: i2c transfer failed.
[ 1357.575779][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.593852][ T5835] dw2102: i2c transfer failed.
[ 1357.606061][ T5835] dvb-usb: bulk message failed: -22 (6/0)
[ 1357.622819][ T5835] dw2102: i2c transfer failed.
[ 1357.631840][ T5835] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1357.659988][T12742] usb 4-1: Using ep0 maxpacket: 16
[ 1357.684422][T12742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1357.712442][T12742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1357.733168][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1357.742956][T12742] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1357.764296][T12742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1357.795619][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1357.806167][T12742] usb 4-1: config 0 descriptor??
[ 1357.816562][ T5835] dw2102: command 0x0e transfer failed.
[ 1357.825184][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1357.839581][ T5835] dw2102: command 0x0e transfer failed.
[ 1358.169732][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1358.208516][ T5835] dw2102: command 0x0e transfer failed.
[ 1358.234772][ T5835] dvb-usb: bulk message failed: -22 (3/0)
[ 1358.262821][ T5835] dw2102: command 0x0e transfer failed.
[ 1358.284973][T12742] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0
[ 1358.292984][ T5835] dvb-usb: bulk message failed: -22 (1/0)
[ 1358.321628][ T5835] dw2102: command 0x51 transfer failed.
[ 1358.327429][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1358.338501][T12742] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0
[ 1358.360239][T12742] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0
[ 1358.378381][ T5835] dw2102: i2c probe for address 0x68 failed.
[ 1358.386266][T12742] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0
[ 1358.417446][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1358.442614][T12742] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0
[ 1358.458460][ T5835] dw2102: i2c probe for address 0x69 failed.
[ 1358.471767][T12742] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[ 1358.492332][ T5835] dvb-usb: bulk message failed: -22 (5/0)
[ 1358.524380][ T5835] dw2102: i2c probe for address 0x6a failed.
[ 1358.558320][ T5835] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1358.589189][ T5835] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1358.698998][T12742] usb 4-1: USB disconnect, device number 71
[ 1358.997472][T21463] input: syz0 as /devices/virtual/input/input81
[ 1359.009125][ T5835] rc_core: IR keymap rc-tt-1500 not found
[ 1359.027487][T21469] tmpfs: Bad value for 'mpol'
[ 1359.058402][ T5835] Registered IR keymap rc-empty
[ 1359.074668][ T5835] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[ 1359.148890][ T5835] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input80
[ 1359.228922][ T5835] dvb-usb: schedule remote query interval to 250 msecs.
[ 1359.236008][ T5835] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1359.315682][ T5835] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1359.490539][   T27] dvb-usb: bulk message failed: -22 (1/0)
[ 1359.496566][   T27] dw2102: i2c transfer failed.
[ 1359.636764][ T5835] usb 7-1: USB disconnect, device number 114
[ 1360.214861][T18279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1360.221626][ T5835] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1360.277941][T18279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1360.290158][T18279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1360.860141][T18279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1360.871017][T18279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1360.889510][T18279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1362.104095][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.118328][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.204021][T21475] lo speed is unknown, defaulting to 1000
[ 1363.128277][T21475] lo speed is unknown, defaulting to 1000
[ 1363.148391][T18279] Bluetooth: hci2: command tx timeout
[ 1363.169335][T21475] wlan0 speed is unknown, defaulting to 1000
[ 1363.210246][T21475] lo speed is unknown, defaulting to 1000
[ 1363.618952][   T11] tipc: Left network mode
[ 1363.738360][T12690] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1363.973182][T12690] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1364.012546][T12690] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1364.053117][T12690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1364.124130][T12690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1364.185244][T12690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1364.293244][T12690] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1364.314431][T12690] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1364.346297][T12690] usb 2-1: Product: syz
[ 1364.363968][T12690] usb 2-1: Manufacturer: syz
[ 1364.395363][T12690] cdc_wdm 2-1:1.0: skipping garbage
[ 1364.435872][T12690] cdc_wdm 2-1:1.0: skipping garbage
[ 1364.460017][T12690] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1364.466277][T12690] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1364.619149][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 5 bytes
[ 1364.826462][T12690] usb 2-1: USB disconnect, device number 22
[ 1365.227976][T18279] Bluetooth: hci2: command tx timeout
[ 1367.077288][T21510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2599'.
[ 1367.368087][T18279] Bluetooth: hci2: command tx timeout
[ 1367.788370][T21475] chnl_net:caif_netlink_parms(): no params data found
[ 1368.420710][T21536] kvm: apic: phys broadcast and lowest prio
[ 1368.945440][T21475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1368.985865][T21475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1369.026419][T21475] bridge_slave_0: entered allmulticast mode
[ 1369.091129][T21475] bridge_slave_0: entered promiscuous mode
[ 1369.133772][T21475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1369.197834][T21475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1369.205221][T21475] bridge_slave_1: entered allmulticast mode
[ 1369.298582][T21475] bridge_slave_1: entered promiscuous mode
[ 1369.378645][T18279] Bluetooth: hci2: command tx timeout
[ 1369.816155][T21475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1369.912827][T21475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1370.087287][   T11] hsr_slave_0: left promiscuous mode
[ 1370.164482][   T11] hsr_slave_1: left promiscuous mode
[ 1370.185236][   T11] bridge_slave_1: left allmulticast mode
[ 1370.239144][   T11] bridge_slave_1: left promiscuous mode
[ 1370.286696][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1370.312441][   T11] bridge_slave_0: left allmulticast mode
[ 1370.324095][   T11] bridge_slave_0: left promiscuous mode
[ 1370.353736][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1370.418217][T12690] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1370.665061][T12690] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1370.695609][T12690] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1370.738307][T12690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1370.802469][T12690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1370.838312][T12690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1370.909936][T12690] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1370.937495][T12690] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1371.036197][T12690] usb 2-1: Product: syz
[ 1371.051082][T12690] usb 2-1: Manufacturer: syz
[ 1371.081700][T12690] cdc_wdm 2-1:1.0: skipping garbage
[ 1371.118681][T12690] cdc_wdm 2-1:1.0: skipping garbage
[ 1371.197929][T12690] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1371.203940][T12690] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1371.387523][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 5 bytes
[ 1371.609973][T12690] usb 2-1: USB disconnect, device number 23
[ 1371.675565][   T11] bridge0: left promiscuous mode
[ 1374.117355][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1374.286078][   T11] team0 (unregistering): Port device C removed
[ 1374.387353][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1374.492742][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1375.866805][   T11] bond0 (unregistering): Released all slaves
[ 1376.385880][T21475] team0: Port device team_slave_0 added
[ 1376.464431][T21565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2609'.
[ 1376.520616][T21475] team0: Port device team_slave_1 added
[ 1376.711646][T21475] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1376.764683][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1376.864249][T21475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1376.912947][T21475] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1376.954237][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1377.031182][T21475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1377.244741][T21475] hsr_slave_0: entered promiscuous mode
[ 1377.297211][T21475] hsr_slave_1: entered promiscuous mode
[ 1377.312911][T21475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1377.323364][T21475] Cannot create hsr debugfs directory
[ 1378.018942][T21589] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2616'.
[ 1381.176925][T21475] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1381.298493][T21475] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1381.352408][T21475] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1381.421006][T21475] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1382.684036][T21475] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1382.893061][T21620] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2624'.
[ 1383.968277][T21475] 8021q: adding VLAN 0 to HW filter on device team0
[ 1384.170507][T19591] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1384.177861][T19591] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1384.342063][T13399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1384.349468][T13399] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1386.068120][ T5835] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1386.748332][ T5835] usb 4-1: Using ep0 maxpacket: 32
[ 1386.756038][ T5835] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1386.814765][ T5835] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1386.869225][ T5835] usb 4-1: config 1 has no interface number 1
[ 1386.905938][ T5835] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1386.931847][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.978950][ T5835] usb 4-1: Product: syz
[ 1386.983212][ T5835] usb 4-1: Manufacturer: syz
[ 1387.014664][ T5835] usb 4-1: SerialNumber: syz
[ 1387.462445][ T5835] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[ 1387.531409][ T5835] usb 4-1: found format II with max.bitrate = 8, frame size=0
[ 1387.589716][ T5835] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[ 1387.654946][ T5835] usb 4-1: found format II with max.bitrate = 8, frame size=0
[ 1387.664509][T21475] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1387.824342][ T5835] usb 4-1: failed to enable PITCH for EP 0x82
[ 1387.939786][ T5835] usb 4-1: 2:1: cannot set freq 8722535 to ep 0x82
[ 1388.279425][ T5835] usb 4-1: USB disconnect, device number 72
[ 1388.523487][ T7236] udevd[7236]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1388.835831][T12742] usb 8-1: new high-speed USB device number 93 using dummy_hcd
[ 1389.279203][T12742] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1389.351497][T12742] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1389.408736][T12742] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1389.453168][T12742] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1389.644175][T21675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2636'.
[ 1389.782861][T12742] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1389.867795][T21679] netlink: 'syz.1.2637': attribute type 6 has an invalid length.
[ 1389.883517][T12742] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1389.938510][T12742] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1389.946700][T12742] usb 8-1: Product: syz
[ 1389.960991][T12742] usb 8-1: Manufacturer: syz
[ 1390.061348][T12742] cdc_wdm 8-1:1.0: skipping garbage
[ 1390.067493][T12742] cdc_wdm 8-1:1.0: skipping garbage
[ 1390.099043][T21681] netlink: 'syz.1.2637': attribute type 6 has an invalid length.
[ 1390.225225][T12742] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1390.232090][T12742] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1390.490851][   T27] usb 8-1: USB disconnect, device number 93
[ 1390.548572][  T787] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1390.657858][T21475] veth0_vlan: entered promiscuous mode
[ 1390.795322][  T787] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1390.961091][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.103199][  T787] usb 4-1: Product: syz
[ 1391.128858][T21475] veth1_vlan: entered promiscuous mode
[ 1391.174211][  T787] usb 4-1: Manufacturer: syz
[ 1391.250766][  T787] usb 4-1: SerialNumber: syz
[ 1391.402393][  T787] usb 4-1: config 0 descriptor??
[ 1391.429304][T21475] veth0_macvtap: entered promiscuous mode
[ 1391.441901][  T787] ch341 4-1:0.0: ch341-uart converter detected
[ 1391.474219][T21475] veth1_macvtap: entered promiscuous mode
[ 1391.500247][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1391.512022][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1391.524779][T21475] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1391.546197][T21475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1391.585365][T21475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1391.616709][T21475] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1391.675798][T21475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.691552][T21475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.732031][T21475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1391.768028][T21475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.033315][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.045218][  T787] ch341-uart ttyUSB0: break control not supported, using simulated break
[ 1393.076081][  T787] usb 4-1: ch341-uart converter now attached to ttyUSB0
[ 1393.078507][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.118181][  T787] usb 4-1: USB disconnect, device number 73
[ 1393.133982][  T787] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 1393.168315][  T787] ch341 4-1:0.0: device disconnected
[ 1393.229030][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.237892][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1396.985478][T21716] binder_alloc: 21713: binder_alloc_buf size 12384 failed, no address space
[ 1396.995948][T21716] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[ 1399.662530][T21729] netlink: 'syz.1.2650': attribute type 6 has an invalid length.
[ 1399.697760][ T6378] usb 8-1: new high-speed USB device number 94 using dummy_hcd
[ 1399.724732][T21730] netlink: 'syz.1.2650': attribute type 6 has an invalid length.
[ 1399.982123][ T6378] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1400.027941][ T6378] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1400.130525][ T6378] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1400.191977][ T6378] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1400.251807][ T6378] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1400.351428][ T6378] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1400.460728][ T6378] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1400.677893][ T6378] usb 8-1: Product: syz
[ 1400.682164][ T6378] usb 8-1: Manufacturer: syz
[ 1400.981028][ T6378] cdc_wdm 8-1:1.0: skipping garbage
[ 1400.993190][ T6378] cdc_wdm 8-1:1.0: skipping garbage
[ 1401.014113][ T6378] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1401.038202][ T6378] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1401.078173][  T787] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1401.200603][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 5 bytes
[ 1401.305511][  T787] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1401.352004][  T787] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1401.388399][  T787] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1401.413722][ T6378] usb 8-1: USB disconnect, device number 94
[ 1401.446865][  T787] usb 2-1: config 220 has no interface number 1
[ 1401.467958][  T787] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1401.483539][  T787] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1401.542258][  T787] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1401.570704][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1401.605044][  T787] usb 2-1: Product: syz
[ 1401.630019][  T787] usb 2-1: Manufacturer: syz
[ 1401.635024][  T787] usb 2-1: SerialNumber: syz
[ 1402.081098][  T787] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[ 1402.096933][  T787] usb 2-1: No valid video chain found.
[ 1402.125343][T17508] 
[ 1402.127835][T17508] ======================================================
[ 1402.134920][T17508] WARNING: possible circular locking dependency detected
[ 1402.142160][T17508] 6.6.102-syzkaller #0 Not tainted
[ 1402.147569][T17508] ------------------------------------------------------
[ 1402.154621][T17508] kworker/u4:8/17508 is trying to acquire lock:
[ 1402.160943][T17508] ffff88802e98cd00 (team->team_lock_key#22){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[ 1402.170666][T17508] 
[ 1402.170666][T17508] but task is already holding lock:
[ 1402.178065][T17508] ffff888078bc0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[ 1402.188504][T17508] 
[ 1402.188504][T17508] which lock already depends on the new lock.
[ 1402.188504][T17508] 
[ 1402.198923][T17508] 
[ 1402.198923][T17508] the existing dependency chain (in reverse order) is:
[ 1402.207949][T17508] 
[ 1402.207949][T17508] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[ 1402.215802][T17508]        __mutex_lock+0x129/0xcc0
[ 1402.220880][T17508]        ieee80211_open+0x144/0x200
[ 1402.226149][T17508]        __dev_open+0x2bc/0x430
[ 1402.231046][T17508]        dev_open+0xab/0x170
[ 1402.235674][T17508]        team_add_slave+0xae7/0x2660
[ 1402.240990][T17508]        do_setlink+0xe14/0x3fb0
[ 1402.246057][T17508]        rtnl_newlink+0x175b/0x2020
[ 1402.251810][T17508]        rtnetlink_rcv_msg+0x7c7/0xf10
[ 1402.257381][T17508]        netlink_rcv_skb+0x216/0x480
[ 1402.262679][T17508]        netlink_unicast+0x751/0x8d0
[ 1402.267989][T17508]        netlink_sendmsg+0x8c1/0xbe0
[ 1402.273566][T17508]        ____sys_sendmsg+0x5bf/0x950
[ 1402.278872][T17508]        ___sys_sendmsg+0x220/0x290
[ 1402.284113][T17508]        __se_sys_sendmsg+0x1a5/0x270
[ 1402.289520][T17508]        do_syscall_64+0x55/0xb0
[ 1402.294480][T17508]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1402.300923][T17508] 
[ 1402.300923][T17508] -> #0 (team->team_lock_key#22){+.+.}-{3:3}:
[ 1402.309211][T17508]        __lock_acquire+0x2ddb/0x7c80
[ 1402.314595][T17508]        lock_acquire+0x197/0x410
[ 1402.319671][T17508]        __mutex_lock+0x129/0xcc0
[ 1402.324710][T17508]        team_del_slave+0x32/0x1c0
[ 1402.329837][T17508]        team_device_event+0x28d/0xa20
[ 1402.335494][T17508]        notifier_call_chain+0x197/0x390
[ 1402.341207][T17508]        unregister_netdevice_many_notify+0xf36/0x1810
[ 1402.348074][T17508]        unregister_netdevice_queue+0x324/0x360
[ 1402.354589][T17508]        _cfg80211_unregister_wdev+0x16b/0x580
[ 1402.360799][T17508]        ieee80211_remove_interfaces+0x496/0x680
[ 1402.367161][T17508]        ieee80211_unregister_hw+0x5d/0x2a0
[ 1402.373076][T17508]        mac80211_hwsim_del_radio+0x274/0x450
[ 1402.379248][T17508]        hwsim_exit_net+0x585/0x640
[ 1402.384563][T17508]        cleanup_net+0x6f4/0xb90
[ 1402.389600][T17508]        process_scheduled_works+0xa45/0x15b0
[ 1402.395684][T17508]        worker_thread+0xa55/0xfc0
[ 1402.400811][T17508]        kthread+0x2fa/0x390
[ 1402.405414][T17508]        ret_from_fork+0x48/0x80
[ 1402.410449][T17508]        ret_from_fork_asm+0x11/0x20
[ 1402.415754][T17508] 
[ 1402.415754][T17508] other info that might help us debug this:
[ 1402.415754][T17508] 
[ 1402.425990][T17508]  Possible unsafe locking scenario:
[ 1402.425990][T17508] 
[ 1402.433637][T17508]        CPU0                    CPU1
[ 1402.439019][T17508]        ----                    ----
[ 1402.444399][T17508]   lock(&rdev->wiphy.mtx);
[ 1402.449004][T17508]                                lock(team->team_lock_key#22);
[ 1402.456569][T17508]                                lock(&rdev->wiphy.mtx);
[ 1402.463605][T17508]   lock(team->team_lock_key#22);
[ 1402.468667][T17508] 
[ 1402.468667][T17508]  *** DEADLOCK ***
[ 1402.468667][T17508] 
[ 1402.477015][T17508] 5 locks held by kworker/u4:8/17508:
[ 1402.482426][T17508]  #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1402.493337][T17508]  #1: ffffc9000b1ffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1402.503880][T17508]  #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90
[ 1402.513298][T17508]  #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[ 1402.523151][T17508]  #4: ffff888078bc0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[ 1402.533966][T17508] 
[ 1402.533966][T17508] stack backtrace:
[ 1402.539864][T17508] CPU: 0 PID: 17508 Comm: kworker/u4:8 Not tainted 6.6.102-syzkaller #0
[ 1402.548290][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1402.558356][T17508] Workqueue: netns cleanup_net
[ 1402.563161][T17508] Call Trace:
[ 1402.566540][T17508]  <TASK>
[ 1402.569503][T17508]  dump_stack_lvl+0x16c/0x230
[ 1402.574207][T17508]  ? load_image+0x3b0/0x3b0
[ 1402.578734][T17508]  ? show_regs_print_info+0x20/0x20
[ 1402.583951][T17508]  ? print_circular_bug+0x12b/0x1a0
[ 1402.589166][T17508]  check_noncircular+0x2bd/0x3c0
[ 1402.594268][T17508]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1402.599518][T17508]  ? lockdep_lock+0xe0/0x220
[ 1402.604391][T17508]  ? __lock_acquire+0x1334/0x7c80
[ 1402.609565][T17508]  ? _find_first_zero_bit+0xd3/0x100
[ 1402.614896][T17508]  __lock_acquire+0x2ddb/0x7c80
[ 1402.619838][T17508]  ? verify_lock_unused+0x140/0x140
[ 1402.625073][T17508]  ? verify_lock_unused+0x140/0x140
[ 1402.630304][T17508]  lock_acquire+0x197/0x410
[ 1402.634829][T17508]  ? team_del_slave+0x32/0x1c0
[ 1402.639614][T17508]  ? __might_sleep+0xe0/0xe0
[ 1402.644235][T17508]  ? read_lock_is_recursive+0x20/0x20
[ 1402.649628][T17508]  __mutex_lock+0x129/0xcc0
[ 1402.654237][T17508]  ? team_del_slave+0x32/0x1c0
[ 1402.659098][T17508]  ? __lock_acquire+0x7c80/0x7c80
[ 1402.664143][T17508]  ? rcu_is_watching+0x15/0xb0
[ 1402.669024][T17508]  ? trace_contention_end+0x39/0xe0
[ 1402.674300][T17508]  ? __mutex_lock+0x304/0xcc0
[ 1402.679016][T17508]  ? team_del_slave+0x32/0x1c0
[ 1402.683847][T17508]  ? mutex_lock_nested+0x20/0x20
[ 1402.688891][T17508]  ? bond_netdev_event+0xe1/0xef0
[ 1402.693932][T17508]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1402.699584][T17508]  ? bond_ipsec_offload_ok+0x410/0x410
[ 1402.705069][T17508]  team_del_slave+0x32/0x1c0
[ 1402.709673][T17508]  team_device_event+0x28d/0xa20
[ 1402.714724][T17508]  notifier_call_chain+0x197/0x390
[ 1402.719862][T17508]  unregister_netdevice_many_notify+0xf36/0x1810
[ 1402.726210][T17508]  ? lock_chain_count+0x20/0x20
[ 1402.731164][T17508]  ? unregister_netdevice_many+0x20/0x20
[ 1402.736901][T17508]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1402.742646][T17508]  ? __lock_acquire+0x7c80/0x7c80
[ 1402.747694][T17508]  unregister_netdevice_queue+0x324/0x360
[ 1402.753432][T17508]  ? list_netdevice+0x730/0x730
[ 1402.758388][T17508]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1402.764135][T17508]  _cfg80211_unregister_wdev+0x16b/0x580
[ 1402.769783][T17508]  ieee80211_remove_interfaces+0x496/0x680
[ 1402.775608][T17508]  ? ieee80211_do_stop+0x1db0/0x1db0
[ 1402.780912][T17508]  ? rcu_is_watching+0x15/0xb0
[ 1402.785703][T17508]  ieee80211_unregister_hw+0x5d/0x2a0
[ 1402.791106][T17508]  mac80211_hwsim_del_radio+0x274/0x450
[ 1402.796798][T17508]  ? rhashtable_remove_fast+0xbf0/0xbf0
[ 1402.802487][T17508]  hwsim_exit_net+0x585/0x640
[ 1402.807281][T17508]  ? hwsim_init_net+0x90/0x90
[ 1402.812059][T17508]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[ 1402.817885][T17508]  cleanup_net+0x6f4/0xb90
[ 1402.822316][T17508]  ? ops_free_list+0x3b0/0x3b0
[ 1402.827209][T17508]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1402.832445][T17508]  ? process_scheduled_works+0x957/0x15b0
[ 1402.838217][T17508]  ? process_scheduled_works+0x957/0x15b0
[ 1402.843959][T17508]  process_scheduled_works+0xa45/0x15b0
[ 1402.849571][T17508]  ? assign_work+0x400/0x400
[ 1402.854185][T17508]  ? assign_work+0x39e/0x400
[ 1402.858970][T17508]  worker_thread+0xa55/0xfc0
[ 1402.863659][T17508]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1402.869576][T17508]  ? _raw_spin_unlock+0x40/0x40
[ 1402.874543][T17508]  kthread+0x2fa/0x390
[ 1402.878622][T17508]  ? pr_cont_work+0x560/0x560
[ 1402.883354][T17508]  ? kthread_blkcg+0xd0/0xd0
[ 1402.888042][T17508]  ret_from_fork+0x48/0x80
[ 1402.892556][T17508]  ? kthread_blkcg+0xd0/0xd0
[ 1402.897242][T17508]  ret_from_fork_asm+0x11/0x20
[ 1402.902026][T17508]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1402.978443][  T787] usb 2-1: USB disconnect, device number 24
[ 1403.127526][T17508] team0: Port device wlan1 removed
[ 1404.848146][T17508] hsr_slave_0: left promiscuous mode
[ 1404.890994][T17508] hsr_slave_1: left promiscuous mode
[ 1407.605241][T17508] bond0 (unregistering): Released all slaves
[ 1408.033175][T17508] IPVS: stop unused estimator thread 0...
[ 1408.125440][T17508] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.171447][T17508] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.221810][T17508] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.299355][T17508] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.472944][T17508] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.531387][T17508] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.620837][T17508] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.695293][T17508] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.345471][T17508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.415200][T17508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.478461][T17508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1409.535603][T17508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.172166][T17508] dvmrp0 (unregistering): left allmulticast mode