last executing test programs:

8m33.411179307s ago: executing program 3 (id=150):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)=""/229, 0xe5}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000002040)=""/197, 0xc5}, {&(0x7f0000000880)=""/192, 0xc0}, {&(0x7f0000000b80)=""/304, 0x130}, {&(0x7f0000002140)=""/4157, 0x103d}], 0x6}, 0x40000000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094f90100fc6014f388a500000000", 0x14}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r1, 0x5)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x2, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x15}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r3 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000100)=0x7fffffff, 0x2)
sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
accept4(r1, 0x0, &(0x7f0000000140), 0x0)

8m32.863237965s ago: executing program 3 (id=153):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
gettid()
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000340)="0fc79fc83766b95e0b000066b813c1000066ba000000000f30f20f2db00000b89c000f00d866b92409000066b89fc9000066ba000000000f300f684b00670fdf12baa000b085ee9ab600640036f30f1efa", 0x51}], 0x1, 0x24, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x6e, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setregid(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
r7 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x400100, 0x0)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x40105}, 0xc)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r8 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
fsetxattr$security_capability(r8, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000001d80)={0x2, 0x4}, 0x2)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

8m30.929774601s ago: executing program 3 (id=161):
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL)
r2 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
close(r3)

8m27.357102226s ago: executing program 3 (id=169):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setgid(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002009})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0x0, 0x3000000}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3})
close_range(r2, 0xffffffffffffffff, 0x0)
chmod(0x0, 0x10)
r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0xf, 0x208000)
getsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

8m24.89516715s ago: executing program 3 (id=182):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x7, 0x5, 0xe})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0xfeb11bdd49a3dcc5)
r3 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
syz_io_uring_setup(0x292d, &(0x7f0000000380)={0x0, 0xbb45, 0x8000, 0x0, 0x23f, 0x0, r6}, &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008702"])

8m23.783132539s ago: executing program 3 (id=186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000200)={0xef, 0x800, 0xc, 0x2, 0x6, 0x9, 0x6, 0x6}, 0x0, 0x0, &(0x7f0000000440), 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

8m22.099733625s ago: executing program 32 (id=186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000200)={0xef, 0x800, 0xc, 0x2, 0x6, 0x9, 0x6, 0x6}, 0x0, 0x0, &(0x7f0000000440), 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

6m51.637597185s ago: executing program 2 (id=510):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20040000)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fchown(r6, 0x0, 0xee01)
ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000180)={{0x8, 0xf2f, 0x40, 0x82c}, 'syz1\x00', 0x4e})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
epoll_create1(0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
r8 = socket$igmp(0x2, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)

6m49.999860481s ago: executing program 2 (id=515):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)={0xf8, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x6, 0x0, {0x2, 0x4, 0x0, 0x2}, 0x8, 0xb, 0xc}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x0, 0x0, {0x0, 0x40, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x9}}, @NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "65a750e995"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b96c9964b1f5fbcdfb0af793c3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0xf8}}, 0x4800)

6m49.701583626s ago: executing program 2 (id=517):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
socket$kcm(0x29, 0x5, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)}}, &(0x7f0000000100))

6m46.993622958s ago: executing program 2 (id=531):
pipe2$watch_queue(&(0x7f0000000300), 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = syz_clone(0x8200000, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_getattr(r1, &(0x7f00000193c0)={0x38}, 0x38, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd1, 0x0, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
fadvise64(r3, 0x1000, 0x1, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
write$UHID_CREATE2(r4, 0x0, 0x15f)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="140000000400000008000000060000000000d964f7b43244636c8b4c2620ea77feb081a463cd733f4526ecad68a0e836980be94a1bd14d7b0a3afcb5dce3bab46d84eb1b127129ba27ddcb04", @ANYRES64=r4, @ANYBLOB="0000020000000000000000000021000000000000", @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB='\x00'/28], 0x48)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{&(0x7f0000000040)="5ed1c0751c5374ebaaafd3b90473ed3d3e14a55273d9aac6d2cbc198bff530c8861546cc8c9715f296638e6c4193ad507ef71bfc9f0d44a86db221dd700c279c390e62977ea37791e61def1101397a52c4c322cce5b31d3387bb1e5bc2b35b71fd19e3896c696cf12096acde692c4e", 0x6f, 0x1}, {&(0x7f00000004c0)="176cafed809ee3237d28a3f794d88902b128111af6e193c79d58c40fa38c957d79fe40ae6bf8faf9c31b25bc672247f6723751aba40b563466d74abd17e388075d1b64b6635615a79538f6334e24f5125dd0cc22659ef659d5a6fe094f8d4a6cccbbcafcb6d5a9369574543e844c1f6e5be96246dbc5440b3db208f72abce3a7c950f1ecc1a480c62d83254b4bceea507061c14ceffcd8f46c7a18d7e3ff9dc7293db9f861ad2d15ec034b41ce63ba3f64daab882155946b525ebe8b31a06497c2015ec127258318eca6db87b59127a2e5385637e32034cde90bbaaa1a4f023786ec5fe366ab00d9c4ec6dddcb76a5a46d01d1beeec94a416a", 0xf9, 0x2}, {&(0x7f00000000c0)="66bfc9", 0x3, 0x2}, {&(0x7f0000000100), 0x0, 0x1}, {&(0x7f00000005c0)="93450764245a5358edadb3da8f927ea230325c89633dac0f4b29ecca0ddd64572693839a2d6f4fe80faa4ead0f787df2995b99401a6a51ad67c9d21d7e0ccd576c13ed525160098370e20df8cbdb94ea6a3c8be2963902160ce2cf3987ed55247c599f623a7a4485f0de17cb4f98f45eada8d12257ecb6a92691700c4da3d7465aececbdc47b1f111feb8233ded30a438195c49e062fca10b9bd15d821c023086e7213b4e19dcf588e3d904ee543c100efb1e1d22fcc89c13c4cdbcbb820c6894cad10bf9bab9d441bca52", 0xcb, 0x3}, {&(0x7f00000006c0)="6459ed0907aa73299ef80bfe73b26fb240a98d0f659a9eca58d43595d7d97fb8aab6396d0ae78c54e5b6e4c8360833fedb5c4836d91bf1d707a8fe1b4a36bd994a414a655a2727069e52b44b87e4508f101e5c07d1ff855dc727c0edc38fff75bbc31c2e513cf97ca918b2ec826a8abb58a4834bc4d478bf9d1ceff0d495b7e5e729ea0c3598f427efad6f5b87c3009a8523ce7f900b227ea580e74fe8987e5cc95cc23af72730c3705bee28c585f38e3a3a75bd0742f5266fa3b97fdb93e3200be871326ff0b8a5997cc964192793cdee937936dd7588128ff76a599ee2c652392dbd3db3789fd629aa87cd3da1b9d9fdebb0308a8d", 0xf6, 0x1}]}, 0x6, 0x2}, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x200, 0x1, 0xc, 0x4, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

6m45.481928772s ago: executing program 2 (id=538):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401"], 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000a80)={0x40, 0x24, 0x8, {0x8, 0x30, "9717bf6200bb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6m44.994198339s ago: executing program 2 (id=541):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
socket$kcm(0x29, 0x5, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)}}, &(0x7f0000000100))

6m44.060200694s ago: executing program 33 (id=541):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
socket$kcm(0x29, 0x5, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)}}, &(0x7f0000000100))

1m21.816976676s ago: executing program 5 (id=1875):
syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async)
syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2)
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x5})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28090900000000000109022400010000000c09043f9602030003000921ff1f710122050009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201835"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201835"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1m18.183169423s ago: executing program 5 (id=1895):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x0, 0xf, 0x5, "bd7197b49b"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r2 = socket(0x8, 0x803, 0x1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="b2200765894619be7d56447591dc3bad46cb56033b6db2e686aa38c35dd6f5913dc9286fd7dbaee4c1be8bbda4a52a1eccbd68dcfe", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

1m16.123287348s ago: executing program 5 (id=1898):
io_uring_enter(0xffffffffffffffff, 0x5b7, 0x42f2, 0x9d512eb23cf46415, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1m15.91680695s ago: executing program 5 (id=1903):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89801)
lsetxattr$security_ima(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@sha1={0x1, "1108b4ae2ff2b2c6b2d2b72bb109e62a228ada8f"}, 0x15, 0x818ca4168a0a456d)
move_mount(r1, &(0x7f0000000380)='./file0\x00', r1, 0x0, 0x40)

1m14.482536671s ago: executing program 5 (id=1905):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
mlock(&(0x7f0000008000/0x2000)=nil, 0x2000)
r0 = getpid()
capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f0000000040)={0x0, 0x80})
mlock(&(0x7f0000007000/0x3000)=nil, 0x3000)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x35, 0xff, '\aN\x00', '.\x00'}}, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000004bbbfe85adfef82c584651dea687086fc82777e0a2e12292d162be9793db6e056c116777b8f56be8debdae50f93c3c596b3780f73b8781038e35544e48134328ad0f"], 0x0}, 0x0)

1m13.095047407s ago: executing program 5 (id=1910):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="15d6903159dd60df", 0x8}], 0x1}}], 0x1, 0x20008810)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000001c0)=0x6, 0x4)
sendto$inet(r3, 0x0, 0xfffffffffffffd07, 0x4004804, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10)

1m12.004090217s ago: executing program 34 (id=1910):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="15d6903159dd60df", 0x8}], 0x1}}], 0x1, 0x20008810)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000001c0)=0x6, 0x4)
sendto$inet(r3, 0x0, 0xfffffffffffffd07, 0x4004804, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10)

15.12049486s ago: executing program 7 (id=2112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x1) (async)
fcntl$addseals(r0, 0x409, 0x2) (async)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc0, 0x3c}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x9}, {0x3, 0x1}, {0x6c, 0x1}, {0x1c, 0x1}, {0x6c}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x16}, {0x16}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x61b}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x35}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa001}, 0x20040084) (async)
r3 = socket(0x1d, 0x4, 0xb)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0x10001, 0xfff}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
io_setup(0xd, &(0x7f0000000300)=<r5=>0x0) (async)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001400), 0x20302, 0x0) (async)
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
io_submit(r5, 0x9, &(0x7f0000001980)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f0000000340)='_', 0x1, 0x40, 0x0, 0x2, r1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x3db5, r4, &(0x7f00000003c0)="d57b460eb36ecaf8d579f726bc8d421cb65f231cb503468e1ef23e3914f502d34c97b3ff6858e606450e6350c3608a297234b8385f2c08766d86ab7723bc68bf8644fcc8c7ebd4c2a2a64fbd3f7daccac3cec113b3b92c9c105f67b533bce19c852d552af9fe2154f31f0c9dc0a37d198d99f4c7580737c32dba87d25b894e41b0490bcd36f86b7c87ae7790e0df663f674d117fc5b60668dbf9ab0e83767f2a16d7ce78726d296f4b7629e2e430625b07368c599db6ccf7dbff802417370e5f26363a43f411456ae1d894326fbdc6b69b5762c9bb4be3a4c6824f5ca1fd2aeffa91f91287941f51422469e0729a11dea1de355e06f7462c193f594eae4da16df958b2810b3ed982116129ce3a5b465310de89bce852ed348a96801944b46d3a7dc98b331f2db4a48f545ba6484d7506635600e5753cbd1ada107f75dcd433d452ec61656da519fbbcb05531cd76cd86d81e39b274cee8dd4e87d139cf08a931ad9194500984a255c40399c0043da70c082d6f5c87c15ecc1fbb34fd46d58a617eccc0042299a3aa3ae29067d349abb317fbdfb7612417106bc51adb1287b3164dbddb90b1b324bb258b940e1211481de268f6149132393baadb1d63d142577a4755be2cecf02e2109372bcf8b997ee91696f5362a8e0ac292621bce086188aaa31bc2a307b828d096d0a9ab075cfc99e285d0f1d7a82a3172ce30b772a5905fec53e3e2e926588574fe924a85a84fb1c35fa22dd22a960e7ab36499fcb1c9b7674a07478ec8a9d1473ef7969d461304941e513947b8364cb30948760f007b2e3b8de99ee377c7f80ab69cd0c4e3a28ea796f74506cc9b911ef2dfcd48d9cba2021e2cec213fc6bd5746ae8dc612246090d1ad49535013c048033daeb50610f3a3bc2dd8b56ec8a3da820bf75ed0fffc95370520312a101030e659b3243c0931f714c3a6a235e7b9b7ba825958be5277e40fd08f4ade4f351a8c41c8cbf4aecd4a3893f013b2872c5bb778de074e5ce5143b1d173324b45cdc910a8658dadb2f3222642c2e960b91710af2fcad6fa0f0f8b59a885a0d2104c942de2c2187871370b0fd425f001775a79cb014e7d501989579ac8099b61e3485f522a981940775e8fda3973f179478e60fe5d357c267640eca14c393716d7054969b9994c8360d968e31d8ce670978711ce9ba1020df1d0d70ecef9629a4e03764044b1d66509be759180283df4fadf247c11a288f2ddc808bdb153e0e735154d760f241344da2291b04cd7708f5a214a4aa85fb2b0c734aa4a1a2147288a2b359f7e8cb91a451e8f79c72c54a25ccc18618272af1c2e15031c738758b12364188f4516202efff08795fda13ec331438b44d45057200b6fbba941ab2717ea6e88fb4bfb391b0dbb1d4403fb0d6cfef3e6cf8decf048df22a12d9c55145a676568ce504836185edadd3454c3b7ec846905e51f13e69a56a7b67c58e75983cc250c40082573f5048ed54a59970c7d7276bb0c4ae42007d1d0cde33cd2649da27da01ddee35e06d0b80d16d1b7bbc410440fe41a2f690621892677f0881f8987b47a1d45c5fa180cb70f053d616efaf18dfc9ae89f36c1713fb8986ea2d19edc96057e1bdccf147952687d369dee8e0ba8f4c6efd395439e1c17a554c85ad54a8ab5c1ab986765a48013443851adc6a93585029bccb6e204ce8e03ca33f61db44bea1536101f593c4007d1de8773c49697cef16ba6487627fd0b6c3b32b27ac7c187562034c1665a473289249887a155929f386138fb38d4512b7f47169c1e7ffd598201c1ad9368507edb87bfb38ff5d31d9e53dc2d5d869fd7e638f2a8bb4e3d2d1261ce5ed37f0a20f58d841fcc49779c8a307d1b32464840a6bd8be2523b4b976361c881d2fb040700b626331db4b31ccfe8b5dd5d065c11b59c8289cc00b461e2b622a7da4d3c990a9de09986e3f18f8b6bc31613915451c70ec8c3423340d0172301efae200119e20c602c292d4d9462b38803456555f3a4b67da4b5834512ae502c66f62cf6ff35324b38f26c6c595162bda659367b9ed24d9afbebda1f75c9b47221c0a07a500e3c0828e0fce8b80bb7bf12ed11450db925cf7ea8d9d41dce258eeb1298b9bd5843abb20cac020c2fb5e2e598ab04915cba7bb111dc9b221dc52a43404753caf2ababc8f8da886edc04a0dddba86b6ce252d070d6e40e5252b483fb2d4e1e35c59767b5d9fec9720172c8ee6a332aa36290a4abfa3ad262e875798818ed639c54a1caf8d146220b154062015105ac219365ca809a832d816d181ede2c37e3906679546f1e25169981069ccd0e7203b8f1f1f77455bbe04187a0dfb81a9276aeab6e1b3635c8fe4d2b0b5309b18efdf456b460fdce96cd6b7346019ed40d626cd56c6231c4f983293cddc932988f436effcd41c4b0a6e6799f176cc5a3104580cc33ac85ed79c6ba6e68eb43a2f05912ceb10da705870256c3d886d38c3f89c24457044d7a51deab0da1cad2792ea06f0210ae810c8761d3a7b81d589a18be48c9ae58326a57519dcdea7c0c580ed567952691c97d34c49d94ec240a1a2ba03d4b79d695077ea30fbe08fcfa231a597a60f849e27dab762fa236442f48a175b3d80b2855f18cda0ad41170a25c7a18d2e36b3dd978ce9fa40ce6edf579a18477b953194a767d90bbd549457c54cc0fc9c969120fbd5b52290b4f55604c0892f9368601c3cddd587a71f4cc11fe62e32d5c37406d61715051bee39d3604c595feaa7cf78ea281a39d4429236e95201f180957f63e42796b75df6f85937fc5285e0ce056d8a8a23661e5622d806707621c9f84f6eeb93e59eded60489963b40a3b1f2eed26c4532b651a5bdbcc38d2233e78b1fbc9c0bf648d0b3a08b0ff701dd5a14d4990fd68e0b346656e769f15a78086649a441c79dd2b42301c4cacc26ed3939d5f82b665fcc05553ff011b5f3969630ae87f7edb9c61254ce40f82dcc7a1be1caa468e8fa795d5952bdcca4d42c27e53cc3a229cbee7cffe64c0f9b0350b8e8f3436b3f13d7bb8bdc4c99dd51e66da89c3f03e84cff360694462ca62f1d561312efbfe76dd63abc43dbfa376bc0589eb21fc0e903040ffeb7cd50f51ff37cf272011b3938c759210f4ee4ba0e7295464fd9201c00310b562f75f9678b085816dc704635912ec7c7c2c8415837e1a400454bc9498e3be12c51a4822eda61d7abacb3ca7a78b74e9307a0a2861a860ef802cabbd91be9ebb1beaafc9ab4f089adaf3c0b353e8a15ac47ca14042df1d92e311fa47d3d27fdab32b0196d49673c422ea87cdd3343b843d73cf3cf5e53d9491446519b8ccc0a8dc378b40a5118db0775852c14d76aa12e01f6d2e333bd9b25c9da6dde0535f5de2edb5f578960c60d6962681842a7cd24c0acccfcf17da322058b17b889ed257dcb7eef54e1259e0a12ecb7ed1848dfc5d53678d13ed62cdab13ac9774a67f99eff37661192a8410a2312388d89b0452608dc95f1834d2a30cf0a8e04347995c80166e9fc028908c7dbf740fa28be859fadf5c1ba64289eea36d746fc5821e2bc1ec689cb87cb4a051c81289ed0355b2ded708ab060b0244cb283cbdf8093a6876768edfbe5042dde71edf3d612ef2c7ee7a8fdfe8b348508119464a2ec9c800e067ec666890ebfdf9cbca9c7e35c7e1f833921908e135f8bb01a3c617b1119bdcc6e7734721046c71b808b8352dd71c74a8605d73d38a3fbc31291235ca71d42ba10edd4c18dd270bfd9b1fbea3a9b4bc698cdbad091c610b1aa2a05eaf6cacee88a79f2ea2ab7791a30f176848e42656edd33e2ea78564c920ada70b42b9cae06ce63454c5ab7f77f1a22c3f1a7c14b5bcbdc3a3db98e7ecec63b037b06b02c73187898423b361d733b49a2dbef0472149a443ae37032a406dedf8df95ec419e6d99cf1d7ba3bb1d9f6beb3d292de269818fdf48ce069fd25dc6a2ba2df3412fb3d66aaa4dda3974ecdbc03a6d9b5b5d64b23fb6e7b4b7db7910af3071d465bf3e0108906e44a617958c9f5d0b46343d747d6fe482e0e042a65053803c589cfc40568fcf166be0b3f7b95b418c9a5215e6ef491ba81094892d759a76d3d8e30724721b9c7c7e65337cf47d0ad7254640cce141bc59bbc048f6356ef23e7e5cefcdf0516210dd3f5b92d875d49a33aa20adc5ad746c473cbc06ccc7d428f1c06dd23e785fac57fcbd2be1fb2db555a9da5d8b19703e78081d2edf928f9e686ef27bb23659a04c6f7e037de7eab492b70d83f146916e55d3ba88af3d38f016dcff003ef2560817a4591bdccf8d5d9249a4f5eabdac70395edeba36d091acb30dd5efe2a909dcdeb8d0f5d69f4dce8063def902fe9f7ce0d73a1ddd1f07c3ca1b61cbf48258576422675f88b32b28dbdf351b59a74b1a5ce8138bf542217b371810a60125ec992332a865203d66e5ef377404fb5c9ad15b3708f0a5a1548be510c894b6ada96e85f7a3685ae6c9799bb76d96f45acee4cd0f8e79b71346c2e815ae3d2359e29857a59c0392a3a4ba10768081e6f942a8198840ff58f026f626006108211cde78c8b8f4b4cf01f5bb457668ce3fa25be9ec043dd64e27b5af99814ad92ad7225d5573f5a83e9e46294324c88f476f4f7611578a10b3dc975761714fb5232ff93cd5f786c9a007862d266dcad24e6d99eb6ce0c506b2e812372872a68b3a4f7357efb15080e665eb0dc178ca93a38684a2b4bb9544b61e5fb8d147955672971242dec81aeeb7fade081afb55160fa2b96b81b49055585849177a6a4cdeda6722fed56a877f77226b5f5d9099a08549e3e328f5807f07ea6b6a270eeb5a6f95aa650ac023e4b0e01effd742758ac47d856e165170b4079b58addf5af57e9f94b9139ae4950b19142e8d07158a1bad07dcc3889a4bec6712effd471cc6d701a61fbe88dd8ffa5aaa7cc1484bf750514cc4ef0d41e67a5f35d5ceae5c9adad9dc2eca5f1f812243490eeae5da4e3c2ae730ee2d9e7a2b0720ccb48632f2c8d0b9701ca56cea62869866caf1822f1552978c307981fe4391843077ed844ff95aae09f1d81a0cb6f1e09d77e102c031a4ba7dfb5ffcd030137604536cc3e48cca0d36d11222cf132c90d2e26feedb96ad040578269950ca1be0eae4d519fb940865aad10feac06d14d5b5eb511f60278c86d75c5da414be5008df2e5d23808c598f16c29c09fb671e55b8ebcdf607fe48ff129b4c34edf0f3b8b3d90b390e7a0d2cd4e9908db0f96732c4247d14664f25eaaf060bae609a4d3a8f659527bb8b418990f00630ff7c29cdf8cf24bb11b233ac776ae591ce25abbf2661d200d0bdfdfaab4ae6a0aa415118af61860be39f25a8b0fbd9dd8938459a1be6f0841761860d8f8883b9a20cdebbeaed3b06b4d9c2235199a4f66c3352bd8e9cdb529a4022310044e97e46bd45873f75ee56527faba687f5f605f04adeb78026f93bebfb08d707d37f55951ece59af477835433bec19735828ac4372efb3e83463bf93fec69640db6fad5300d1920e01529fec49f1a24117b1d4f18345271cde6e07aa9a770fdec71dbe250b244b06a0a727c73412de31db8e314ea1857e0e9a33635c7a955b41f163671395ebc1c0cec4605f1e1cc68866ae20d30951b04a3e9eb9e340a648d97470832de7ccb889ed063ed830d5357cc9f596a0076695282fce10057157de01823b19767f15baaefda4479b952b8368c1ac6754b1eca9c68ebc7b8a7323eecc5bd07ed8925c741722fc7aafc47952d10822dfa6092fbea921f9f1edb67fd1d1e", 0x1000, 0x5, 0x0, 0x3, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x100, r6, &(0x7f0000001440)="56c2628c5030eca1b467ed9b682c4f69642c6ca5d6df0e4850209fb85929936e80b942921ce9be363e29efdd13e394f44e4fb3ec3fdee487128ae73648bb", 0x3e, 0x5}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x8, r7, &(0x7f0000001500)="8c0045773c7a798516e8df7df079bab5dfee17fd78da5372895318de0abe6e71086bb21cfebf808c3e0fdbe6d2f70f615c61e5e706a795db7190a7a37c993aa36b2b1a8c1f07cf95f5d60cbe4a0de439322baa06dd2f4c7fa310925dcd", 0x5d, 0x2, 0x0, 0x2, r1}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xf, r4, &(0x7f00000015c0)="84206be411149be928cdbf9b62856d51cb64ab4aebf8dcdafc492fa18a8fe1461c238ef13f65f582a78492c3f44d04746f5db2f2146618799e35a3c40d2f7279697b048941b366bc477f841e81234ed70019a3f12097a9ae4099829cd2942165cc86a845", 0x64, 0x7f, 0x0, 0x0, r1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8120c60281ff77d2, 0x1, r1, &(0x7f0000001680)="64315edb4f2c184e80935b519f609c4df597d42e1d32efbe609a2f899687fb644b2e55d9065c8f74c8e1ed7bade0ff1c7764a1292833c7bb9b4696240a3b9c25bdcc4dabef64c0898681a85c0de6f4a671b1a3256b28c3eef6d0d866360e93747654b1818d5ee56c8effb12e8db16cae4586dd939b264ff484bfdf28d0bff647987d0f2a470571501e598634eac344f19fe7e12f2fdf37521495774295c45916886b99d411c01e4c2b10da9dd1240e569e518952d261e015c724b19f5b4b229215d001fe82430f660bc2cef2c6fee47a42e80313a0e51b1a24a8173146dff5e57171177559d583d5a0acf91c41b8bdb823a5405054c3", 0xf6, 0x7, 0x0, 0x1, r1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x8, 0x8000, r1, &(0x7f00000017c0)="5cde9c737ec37de4d7ae508a0c396118e677ab119c358fc27af45c5b38e8dd4db8cfa22c3636bdf4e8d2ad680e60a35ccf2ae71281eed44a616e2b879a82a35ba27da3d6bfef64aee9e7e7ffa8ca60981c53dd976b634b8c71ec3a", 0x5b, 0x6, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x2, 0xa836, r3, &(0x7f0000001880)="8694bdeeee79ec1b8c46c1214873f3a5952c7c2c", 0x14, 0x757, 0x0, 0x2, r1}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000001900)='+', 0x1, 0x40, 0x0, 0x3, r1}])
ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000001e00)={0x3, 0x0, 0x5, 0x14, 0x1a, &(0x7f0000001a00)}) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x50883) (async)
r8 = fcntl$getown(r4, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x3, r8, 0x3, &(0x7f0000001f40))
sendmsg$nl_route(r6, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)=@delnexthop={0x60, 0x69, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x2400c804}, 0x80)
write$binfmt_elf64(r1, &(0x7f00000020c0)={{0x7f, 0x45, 0x4c, 0x46, 0x65, 0xe, 0x76, 0x6, 0x4, 0x2, 0x6, 0x3, 0x2d7, 0x40, 0x133, 0x5, 0x3, 0x38, 0x4, 0x7fff, 0x48a, 0xcf}, [{0x60000000, 0x10001, 0x100000000, 0xb05, 0x9, 0x10000, 0x7}, {0x70000000, 0x3, 0x9, 0x1, 0x2, 0x10001, 0x5, 0xe}, {0x7, 0x4, 0x7fffffffffffffff, 0x80, 0x8, 0x400000008, 0x6, 0xcea}, {0x0, 0xf103, 0x100000001, 0xfffffffffffff7e9, 0x0, 0x5, 0x5, 0x8}], "d6cc80eff53b6a8e0e4e03a89ac1be8dee7fd8e3530ea183e1eae73e2c4705801da22e681276253609ac8737596c47b53642fc2158ecfe2492ae02d94d4ae7a8aed7865b6fbb629cd04a9b9ecf2fb006d2eebbaa7bc0ebab65fbdbf979bce7f64aed82e740dde656b164bcc4ee5c022a2250e4ee627d0b3483b5d1c55e13053a76779ccfd92a744029db7a1861f19ebc47dd1800ca71ba4ed90b425138feb08ba0f2b83c6a9b52445c7840174e7da945a37c56c9977d823d91661879ec617e7511c315962232fea41fcd71d2cdf70ac7eecd1738a328fbbe99", ['\x00', '\x00']}, 0x3f9) (async)
syz_open_dev$evdev(&(0x7f00000024c0), 0x1753fa80, 0x113540) (async)
fcntl$getown(r7, 0x9)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000002500)={0x0, r1}) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000002540)={0x3, [0x0, 0x0, <r9=>0x0]}, &(0x7f0000002580)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000025c0)={0x2, 0x1, 0x3, 0x1, 0x0, 0x2, 0x1, 0xf, r9}, 0x20) (async)
ioctl$I2C_TENBIT(r6, 0x704, 0x1) (async)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000002600)={'icmp6\x00'}, &(0x7f0000002640)=0x1e)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002680)={r6, r1}, 0xc)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000026c0)={{0x2f, @local, 0x4e21, 0x4, 'dh\x00', 0x2, 0xf6, 0x20}, {@multicast2, 0x4e24, 0x0, 0x9, 0x40, 0x1000}}, 0x44) (async)
sendmsg(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002740)="c737d590d8e5f39c08a894b95dc70a9937361303aaa0daab902804a8513a03726fae1a9052b73a3adf6d32ff4d8ed0c63c161cc09df024638631474444122ce94a1d066d7f10965018a13caa963b0f9399786009b6b1a241f3843175e30a0d5ffd79457ee0c65d0941fa3541bd717b85abe23490eb4d197c74dd4a37454e3dc5dc793543ed89efb525c4e619e9f5fa39003caf5503593339fd7f8bba46aa2a28261fb0c50f6e0297f5b380e19cbe9785da12912a4a8f27fae84c80b5e298db", 0xbf}, {&(0x7f0000002800)="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", 0x1000}], 0x2, &(0x7f0000003840)=[{0xd0, 0x11, 0x2, "2b8ca9ab788b8253ad5f90451f0a5bd735240ec976fd5e443728d5e17ec705a4e6748e6f52a2f8f7d890e153ae3abf698a92c0677f822b323bbdb988d958f66d5708e767874a1886ca348b5c0b8592178cef06ebd3929d3e085395c0a93aabf1a716ac9385e587a032f825276c0de1c163e92a5b81445702f8fa140eb0df03ba8918ec6a6df2d0ce8db6dba22b949d590da2877bc7a1a58b2726fee3a803c5b99f3e4cc5eadd512dc1152898f1391d9d24d10fc2b991777cf4db062b"}, {0xc0, 0x102, 0x9, "13324e5ba642e0824d24288e3346ef0aa55b2acf451d350736cec9c5dbc80793599c800e2b94e7c434626ff0a59bf1008a7c3ffe3b6eb03a57342cd21ec6531b924855f6fe080835666226534cfd4514f2cb37b3dc31e97ec86551432356d59c6636453474db155ad9fe86cfa098891d843f143836da3465dc97ef89267c23521b372815018ded0427fa65168a1470ed30fa60946a4d7644c125a3fe42ebb88b4665203eae5e4b9bd8a6"}, {0x100, 0x11, 0x81, "4615afe8024bb57397405fea6dd63714325e43721a7151c69bc87e3c1555e7b246081b77f308c0e7d078fc8f935ee0b18187b0aff3c9dfc44cd105a236286f4174726158e353073c98ba14091c74b16c80599c9107ceaa2244085b62d6829a38a68f69ec43dd7908526a46666f0a1fab37d59d395816d8f471d6131d71075b2f92decf02d5ecf521b12c46a42bee898930eea6ceab3c64126d8f96f4c77dfa1acabd9717013120968cfab9b37f5caf685aba2207fbf4c2f3c3f9b1691b772695fe71d2068f5f39c78563b1775aa7512acc776329ca4d13f70529c7445d3df877541ec053870fc1039ff240dd5a"}, {0xd8, 0x101, 0x5, "b9e916cf7e8df61f2d265040be1be3cb5a471615e1e1ee396d28057f397bc2b235f5c2739aa8275f106c28cb9a7b01d8d911b44f4871a0b2f338d920a767f9f3937a6eb605e3291e89eb2c7958c59f5d65a9d372379b5c50dc4e5533c4410eae8980f0bd0c033182624c841425a9f438181415d6e918b225c5cc44e8778fcb5840a9f7f56e8c6dedc8affd8f3d77a4dcc2d1c203d5329aa04d69b07cf4d3e5aeaeb328a83a80311ad03cf651bf69888f0abd80c2e4506dbfda9c17e2c0a6357810a13256e382c4"}, {0x1010, 0x10e, 0x0, "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"}], 0x1378}, 0x80)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000004c00)={{0xf3, 0xb}, 'port1\x00', 0x1da, 0x40, 0x2, 0x6, 0x1, 0xb07, 0x0, 0x0, 0x1, 0x9})

12.991131788s ago: executing program 7 (id=2116):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x1000, 0x200, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
connect$nfc_llcp(r5, &(0x7f00000002c0)={0x27, 0x0, 0x1, 0x4, 0xf, 0xa2, "ccce52ca1c916729065a8dc553fc0b30f5a960baf94add2609ffcefcd7c30b4665539bb2dd0c32fb4d48a87e96b3daed86e9803341e804efda106a2d99d55f", 0x28}, 0x60)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ff00007}]})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
setresuid(0xee01, 0xee00, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r9=>r6, {0x1000}}, './file0\x00'})
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000fd1000/0x1000)=nil, 0x1000}, 0x7})
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000380)={0x59, 0x1, 0x6, 0xc, 0x5})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

9.643838436s ago: executing program 7 (id=2125):
unshare(0x2c060000)
ioperm(0x0, 0x6e, 0xe)
landlock_create_ruleset(0x0, 0x0, 0x3)
unshare(0x4060b00)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000002d000101000000000000000004"], 0x14}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x14)
unshare(0x8000400)
unshare(0x24020400)
unshare(0x8000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b705000000000000611087000000000007000000000000009500000000000000d5306045269daac8f373861fed3f45688a1326ce3f0633bbf4e6845ef691bb24e11ef7433afe99e2c7fcc2df2d2e0e10ac9b12e51778b103399993d95d5db727a97b9b3e8828fe65ec3f583a122ba714b16ad0054d1114202310a98ea0abe654ff9e422570f8a64c83842cfd4a0789ebad7e0fa16083e8d2"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
unshare(0x8010380)

9.118336889s ago: executing program 7 (id=2127):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000680)={0x1, @pix={0x0, 0x200000, 0x4f565559}})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x5, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1, 0x7f, 0x4020, 0xffffffff, "fe1d00003413000000f9ff1fb42717e47f00f800"}})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x26040)
socket$inet(0xa, 0x801, 0x84)
r7 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004500002804000020fc0290780a010100e00003000e009078008100060000007f000000070000000d331a57b0da7cde2040554bd1bd40135645801e2a0cb19fc64af28a4e8015dc0b37790edf4e60baeefc1f37c5e085aa8d1a17624ad74e2915a932479efbbdc8087e8fbc944c03a9a1fc90b327b9d16fd4e135a1"], 0x0)
pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
write$sndseq(r6, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4, 0x1cd, 0x6, 0x9, 0x4})

8.663265211s ago: executing program 7 (id=2129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000ff00000000000000", @ANYRES32, @ANYBLOB="0000000ea16ccb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000002c6bfffff0cf70f668dd18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000fe0b90000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x94)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)

6.815141371s ago: executing program 1 (id=2135):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-ce\x00'}, 0x58)
syz_open_dev$video4linux(&(0x7f0000000400), 0x200005, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040029bd7000ffdbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000804}, 0x884)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r4, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000100)=0x1, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r3, &(0x7f0000000480)="00000002", 0x4, 0x4040810, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2123, 0x0)
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

6.662574201s ago: executing program 1 (id=2137):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
write(r0, &(0x7f0000000000)="36e46cbb9bb3ac0b8589d1ae5c555501713215fb275f27401b42f7a1bae19ba8", 0x20)
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x981}, 0x94)

6.557684692s ago: executing program 4 (id=2138):
syz_usb_connect(0x6, 0x1fc, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0xdb, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e2415d"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff7, 0x77, 0x41}, {0x6, 0x24, 0x1a, 0x80}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x3, 0xf}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x8, 0xd7, 0x20, 0x6}, 0x36, &(0x7f0000000240)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x3, 0x9, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xea, 0x66, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x0, 0xa, 0xb}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x80b, 0xf, 0x54b, [0xc000]}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x6c, &(0x7f0000000440)=@string={0x6c, 0x3, "3a92973e1a8d02e84235839bc74316134a7d2d665a4ff81229a2abb4f94d34842b2b82eadd7b5ccce3418af25573884cd759e1c5073478acbb015bf1dfad8304a28d32c758fc6ce4353271a435715093a54f92004af63199e127cfc9e0e6817551a667b373ce958bde94"}}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "f07be7e691d3ee2d9add05d801b2e9923e827d8eb57f826e0aa6a966a59cbb3d5f7ec952031994a3977691a7cc97e56dd1eea2b33a5135598503378f0b41e9d9d34b6ff451606414b477efc74e72b5bd2a9f20cd42cccbae792031dd8096d7c1c226700c5afa813d178ffb95db279c90259dc6281339a89fc5f2b66750a4c087a074a6c7b19f9e5469668d94497f15ce958bbd11e0b65c85429596b9c18a7020a6e1d00d475fb13e2cd90afca67678e7bf6b4bd05accac1bbed4589bc1679d2f75e15c60d6dd6aa5b0dd63fe8889b0ed9f64110ee1c0adc72c397d2af5a7f5cfa307"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x439}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee01}}, './bus\x00'})
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000002040)=0x1, 0x12)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
syz_usb_connect(0x6, 0x1fc, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
syz_usb_connect$cdc_ncm(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0xdb, 0x70, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e2415d"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff7, 0x77, 0x41}, {0x6, 0x24, 0x1a, 0x80}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x3, 0xf}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x8, 0xd7, 0x20, 0x6}, 0x36, &(0x7f0000000240)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x3, 0x9, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xea, 0x66, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x0, 0xa, 0xb}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x80b, 0xf, 0x54b, [0xc000]}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x6c, &(0x7f0000000440)=@string={0x6c, 0x3, "3a92973e1a8d02e84235839bc74316134a7d2d665a4ff81229a2abb4f94d34842b2b82eadd7b5ccce3418af25573884cd759e1c5073478acbb015bf1dfad8304a28d32c758fc6ce4353271a435715093a54f92004af63199e127cfc9e0e6817551a667b373ce958bde94"}}, {0xe4, &(0x7f00000004c0)=@string={0xe4, 0x3, "f07be7e691d3ee2d9add05d801b2e9923e827d8eb57f826e0aa6a966a59cbb3d5f7ec952031994a3977691a7cc97e56dd1eea2b33a5135598503378f0b41e9d9d34b6ff451606414b477efc74e72b5bd2a9f20cd42cccbae792031dd8096d7c1c226700c5afa813d178ffb95db279c90259dc6281339a89fc5f2b66750a4c087a074a6c7b19f9e5469668d94497f15ce958bbd11e0b65c85429596b9c18a7020a6e1d00d475fb13e2cd90afca67678e7bf6b4bd05accac1bbed4589bc1679d2f75e15c60d6dd6aa5b0dd63fe8889b0ed9f64110ee1c0adc72c397d2af5a7f5cfa307"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x439}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './bus\x00'}) (async)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000002000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async)
write$cgroup_int(r1, &(0x7f0000002040)=0x1, 0x12) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async)

6.474735623s ago: executing program 1 (id=2140):
fsopen(&(0x7f00000005c0)='binder\x00', 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xb8, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x7f, 0x1b0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@selector_unit={0xb, 0x24, 0x5, 0x1, 0x4, "e2b014953bfb"}, @processing_unit={0xfffffd36, 0x24, 0x7, 0x3, 0x3, 0xc, "a298014722f6"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x6, 0x9, 0x3, 0x80, 0x6}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x2d, 0xe, "aa79a4c914"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x1, 0xb, "769597c8f6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xe44c, 0x1, 0x9, "1533"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x20, 0x7, 0x8, {0x7, 0x25, 0x1, 0x0, 0x6, 0x1c0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x8, 0x2, {0x7, 0x25, 0x1, 0x0, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xb, 0x7b, 0x8, 0x0, 0x4}, 0x94, &(0x7f0000000180)={0x5, 0xf, 0x94, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x7, 0xff1e, 0x200, [0x1fe3f30, 0xff0000, 0xc0, 0xc030, 0x3f3f]}, @generic={0x65, 0x10, 0x2, "e19bdd000f37f72667fcba3506427c7f682ed2e8dc5fa2ef330eca61422bb06fefe0af4a3837e6d1dc5a168d3d3c60f42c77372a727f5fce4d623f43f1329a773ce6f8ae01d14df978951f48b66a3c482b1c53b9f2225b273dbb2e218dad4988bc34"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x29, 0xe}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf4b8}}, {0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="164e5255b7aef75500"/22]}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "f54f6acd2093630e0c32ed989d9c36cc7d5eb3f472ad96732165d205fb8250330c8387ad5d4d8834877ce1f2ad503ec445dae7d08837ae67e463a78d9565a03003dc9f1973b5a69098e15bc02a045a23fa21cf9ef54384d97ed6f1dbf4874e8a984fca869019fdc4549bf02f64f43b963424554abe4c01053fd93ce120d3defc2d12033157bc5f29c63b1a2bbac0ac0f220e34ce63948f8f1c9a453758b88856ae733de02ea8db5b2af04d3c430c93c8d3a4a2d667bd3eb3f28701849f903df388d2ce6a769092901643f0098da97e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}]})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3, 0x6, {<r0=>0x0}, {}, 0x100000001, 0x8})
prlimit64(r0, 0x9, 0x0, &(0x7f0000000600))

5.902566377s ago: executing program 4 (id=2141):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x40010)
r2 = syz_clone(0x80000, &(0x7f00000001c0)="3a9afeeab986bb7df72fba5077c35217ddf7b0e3cc5961bae1ab736357ec0f6dafc8174b5696ba655e62c290ae4dac483dffa51a236913eb1b406370253f5cccc8da84739436736171be9b6a71b6d4861ccd562de0ce27398df6813347c9757664de43c059807f978b08d692ef7a57c8089a13d4252490085356612b133bd8100cd9ed45bf7f38bf57b3c8b157b10f6e4e5087d611041b71587260359e79bb8567a1f72c5777ea0e722c92f53961b820079070296ba9a38ccdef238dc2", 0xbd, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="a531d4629db537e058bc8887b7bd6231d95e1b97711975a6a98c632bf50db7610a2d73ddd694c02755c74ef9a506c103816b6b917be832d97d90f05b2fd4389427b802df778161ae5714b3e445c1fa9b2579854a252790d4355ae394f76321ccdba0b63ea636146cce401e2af0164e4be4d59989a0911731f28013e1284a279919fabe58cf31fb06b6b5692aadc5641be60d6d2c9e90bc2e03a399bff6fd05220fb9012ff8a5f520cba48bd39ff9bf57077500637abba5e289ebb9a23e4ad1011bd8ca5323d75c568e1bc6df120a9ec21a62dd0b411dad4d1abc7cc3643508f47887e0210db8829ac2427f7c700b3f3ef664f9c0e16b")
r3 = syz_io_uring_complete(0x0)
write$P9_RRENAME(r3, &(0x7f0000000400)={0x7, 0x15, 0x2}, 0x7)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan1\x00', <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>0xee01, <r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', <r8=>0x0, 0x29, 0x7, 0x7f, 0xffffffff, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x40, 0x1, 0x8}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=<r9=>0x0, &(0x7f00000006c0)=0x4)
sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)=@acquire={0x150, 0x17, 0x2, 0x70bd2a, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {@in6=@private0, @in6=@remote, 0x4e23, 0x9, 0x4e22, 0x0, 0xa, 0x60, 0xa0, 0x2b, r4, r6}, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0x0, 0x4e23, 0x0, 0xa, 0x90, 0x80, 0xff, r8, 0xffffffffffffffff}, {0x802, 0x7390, 0xfffffffffffffffa, 0xf5, 0x8, 0x8, 0x9, 0x5a}, {0x7, 0xb, 0x9, 0x9}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x1, 0x1}, 0x401, 0x5d4, 0x4, 0x70bd2c}, [@offload={0xc, 0x1c, {r9}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0xc}}, @proto={0x5, 0x19, 0x32}]}, 0x150}, 0x1, 0x0, 0x0, 0x4008811}, 0x800)
syz_open_dev$swradio(&(0x7f0000000900), 0x1, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x102, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r3)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r3, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x108, r10, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9d6d97004e13b706}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000d80)=[0x10, 0x4, 0x1, 0x7f, 0x6, 0x4, 0x6a8, 0x3, 0x4])
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101000, 0x0)
r12 = semget(0x1, 0x4, 0x500)
semop(r12, &(0x7f0000000e00)=[{0x4, 0xf, 0x9ad4f899f2781c8}, {0x0, 0x1, 0x800}, {0x0, 0x5, 0x800}], 0x3)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r13, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8f4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000005)
r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r14, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r3, {r6, r7}}, './file0\x00'})
r15 = syz_open_procfs(r2, &(0x7f0000001000)='net/mcfilter6\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r15, 0xc0189379, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r16=>r5}, './file0\x00'})
sendmsg$NFNL_MSG_ACCT_NEW(r16, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x3080000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x8005)

4.375816259s ago: executing program 4 (id=2144):
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010006c00ffff00000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'gre0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f00000004c0)={0x77359400}, 0x1, 0x40, 0x1})
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000500)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xa3, 0x40, 0x4, 0x0, 0x876b, 0x2, "135cd366ae01b4b53a08ca9034a3dbb03137689dd907184f223522803b720902c37e705ebd756c25766dec6581f56ffa316b24306249ecf52d88caa0866159cedbb173200823260446918ed15c7eed11f4d1e23ec1712784b105a7d87313a245243d38bb2e558efac321799cda73935ae52632d80ad84e823979d01b0491fe2b06b2371a3bb369a0cbe49b5b95e7b9926bfab5463bef141e271a9e87a9d948619a3711"}}, 0x1bb)
io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="1000"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850)
r8 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)

3.418623182s ago: executing program 0 (id=2145):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/55, 0x37}], 0x1}, 0x8001}], 0x1, 0x2000, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x1ff, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.29687795s ago: executing program 7 (id=2146):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
r2 = dup(r1) (async, rerun: 64)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff070905021008"], 0x0) (rerun: 64)
syz_usb_control_io(r3, 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
setsockopt$sock_int(r4, 0x29, 0x38, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f1b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'gretap0\x00', 0x400}) (async)
truncate(&(0x7f0000000440)='./file0\x00', 0x800000000000000)

3.231156032s ago: executing program 6 (id=2147):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b5122113", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b17dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87f"], 0x232)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
r6 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$smackfs_ipv6host(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3078303030303030303030303030333461313a3078303030303030303030303030303030373a3078303030303030303030303030303830303a3078303030b38955303030303030303030303030383a3078303030303030303030303030303766663a3078303030303030303030303030303130303a3078303030303030303032616633626639373a3078666666666666666666666666666665662f3030303030303030303030303030303030303031202f6465762f6e756c6c62300000"], 0xba)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x80000000})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="90912b9da023566de7f2b94d961101f7ddeafc889e51ea138a49739b137c7012acf4a289d315b477f7943e742a7fcfaf225a26c01972202a7af5e9a1a1f8e8332a733fe5041a7e368982285fad14c2d5866f70bac5ca1a383ab0e9567b0996119e8ff84097c2ae9a259f81cca3eae689c85c9dc52b004fcc7e69af7112228c4a309486633f76347f31d128e0643986a1426ccfdf3449b2c65e40caed76b402dd38cc10d151bbf1e9e6f5569a266966c2d28607272f75a074f61c077fdc137b927e7367dcd4f0071907", 0xc9}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000340)="3b95e2e176f98aa17211c58598717c55db96a3d8cc234a9f605f25767625b34b59d9710dfdb9f894aacee9ae08b32ce49de910d163d143dd910ee8ffb8cf5708c5d61b1fa7f7e519351b56342076fcbc7a", 0x51}], 0x3, &(0x7f0000000900)=[{0x68, 0x101, 0x8, "fd27eda447eddb7f8ac61b667b76722b73998d920c9feeb87b47897dd100dd0d6c8df8ee3ad4a37ee33b30155595d8fd51af54fb43c368ec073e30951240a97e1fc8610e5829c31255426ee9f8ec7a7a980d9527"}, {0x68, 0x1, 0x6, "ef9639d8cef01726c279870147f3e481fb53863ad52fb64497d6b45a22a8bc701b7006e522ca264a949667784a4375ab43e871fa9478c43ea0de91a9143376dab409743b9b6daff76f6fcd6cdfe517a1090dd559415a03"}, {0x28, 0x10d, 0x5, "39f63d7d31cbd6d17cdf34edb9d318d72aef603b"}, {0xa0, 0x101, 0x6, "32a1fa1cb914dc5f360ab5000f074d65f303f6c93e84902df5dec86b09c6cd3b531204683fd1f1a00e8f426add402822693e0a3e803de0389420bb9a3256b012af3eff2b4e00ee77577a1fceaccd42d42f36b9b406bd172ed7abb1cfc78c2bb09ddac7c00a8c35a96ddf272d7a6496f454d5a4cd9da21027f07ce8129961bc11e2451c7eeadc2e31d293d217"}, {0xc8, 0x1b3, 0x3, "66627bf581907f413ca919652658726b5a3a85dbb4503ea52c3e3cdcd952e90d8bef49b3aeef63875d6b9c513a3bafa985a8f7af3efb3076affb12c3b394ad2d9bab7a5cdbfe9bdf2bcd307b4d71f1b672ff1263fe0d9187a708a1498607d638f9fb020a73ec0e2e1ded42e965f3c1374704d46672a3ef696ade1b8c52d3c48f5943d674ca6d32d9e2cb3d659e988ff1559859aeed364e184f4500405f1a626ae3c93710c0db29bdfd5fbbb6418cfe8dc2"}, {0x10, 0x10a, 0x6}, {0x88, 0x111, 0xf2a, "a9d2cbba42e9fd026f06ae2e00dc32830db9b50b7de8ce208b0e19a19f32397e98e0e5eb0cde4ea3b466e2efa98a9f6b1b18b2c0524351f340d12edfd14987265d377ac870d41e45a2d584ab931252a1d20a78ef6144483e79a1beda228533c8e822e55adf60d97168eb88a45f80d3358f35e45ad8ae"}], 0x2f8}, 0x204c891)
accept(r7, &(0x7f0000000c40)=@isdn, &(0x7f0000000cc0)=0x80)

2.965945744s ago: executing program 0 (id=2148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

2.939077675s ago: executing program 6 (id=2149):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x5) (async)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00007bb000/0x2000)=nil, 0x2000}, 0x2}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
r1 = socket(0x26, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x2}, 0x10) (async)
write(r1, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @private2, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x4}}}}}}, 0x0) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x14) (async)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

2.765523922s ago: executing program 4 (id=2150):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240))
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000400)="4a82df66b609e1ce6011026a763d3b55646b2bb7e6b51a94cd3f844c46ff1b44e993fee1bea27d1fa47619222579ae0f211695cfc0346920a3e814ff3ba24011e92f68c898e6967a721f63436771c76b8766be1297ddc4b72619e28e67cc6cf586eeb54698ab8eb752b9332cb55bd3fe1387a70d5dcfd10975139b1e845159cc8d33516699134ae5134ef404a00ba80e885d65", &(0x7f00000004c0)=""/70, &(0x7f00000000c0)="67559f1370e619d708d6fe85be1382be73743f7fc6052b6a58a3249461a8dcbd30e9e5b2273e375df8688087d4503bf4cb4751a223e0512ecc6f", &(0x7f0000000540)="7c04db6ce1215a7ff82b6275c8f01d4d6bf5a25eecd457ce6cea78c7aa6baba5b6e752c8385640bddda2436ece6aa476f9cceb281c9c8c928b6821886f31bcffba654eb8e9b20e70768257003757bc4b907533e8635e02ff404e98f3bcd96eb174fe737179c02f20dfe1d6f040ce6db0b38b49919046fb4deefb8a7ec48ee8bd5575daf2270929f0ba38a32f42bff8871c2e04c3e977a1cd8280083f0aac98523bdf84abe8116e18bd169d7a9a702f5a1d4fc4", 0x43, 0x1}, 0x38)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@delchain={0x2c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xe}, {0x8, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x4010)

2.690877367s ago: executing program 0 (id=2151):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000004c0)={0xf, 0x8, 0xfa00, {r1, 0xf}}, 0x10) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10)
r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0), &(0x7f0000000300))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0xffffff24, 0x7, '\x00', 0x1000000}, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000500)={0x0, 0x1000000, 0x14, 0x20001, 0x66, &(0x7f0000000080)="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"})

2.523619824s ago: executing program 1 (id=2152):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@o_path={0x0, 0x0, 0x4000}, 0x18)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x0, 0x0, &(0x7f0000001100)='GPL\x00', 0xc79, 0x1000, &(0x7f0000001140)=""/4096, 0x1f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, &(0x7f0000002180)={0x0, 0x20000, 0xb, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1, 0x1, r1, r1, r0, r1, r0], 0x0, 0x10, 0x5}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_open_dev$video(0x0, 0x7, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
lseek(r3, 0xfffffffffffffff5, 0x1)
mount$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x0, 0xa0001c, &(0x7f0000002640)=ANY=[])
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x2c000010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'})
preadv2(r2, 0x0, 0x0, 0x9, 0x4, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000002600)=ANY=[@ANYBLOB="aaaaaaaa000086dd603000bb00c02b00fc020000000000000000000000000000000000000000f28958d7e50634fe14315e05000000000000c910fe8000000000000000000000000000aac2040000000800010004017005020006050200020103000000050200060008004e21004890780300000002000000f9b303e6b62a1ea4588e0ab08e87b69a244e716ca673fbd171db66747e"], 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
read$FUSE(r3, &(0x7f0000000580)={0x2020}, 0x1614)
socket$netlink(0x10, 0x3, 0x6)

2.407188336s ago: executing program 0 (id=2153):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000363000/0x2000)=nil, 0x2000, 0x2000006, 0x10, 0xffffffffffffffff, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) (async, rerun: 32)
io_setup(0x42, &(0x7f0000000100)=<r4=>0x0) (rerun: 32)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000840)="88cf5c1e42aa7907253ebead27b3db2c", 0x10}], 0x1) (async)
io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000000)='e', 0x3f}]) (async)
r5 = accept$unix(r1, 0x0, &(0x7f0000000140))
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
close(0xffffffffffffffff)
r6 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x3, 0x0) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x30, 0xffffffffffffffff, 0x2558000)
sched_setattr(0x0, 0x0, 0x0) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x85)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2200808, &(0x7f0000000380)=ANY=[]) (async)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
setsockopt$inet_int(r7, 0x0, 0x6, 0x0, 0x0) (async)
connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)='X', 0x1}, {&(0x7f0000000280)="e53b8ab66707226995707756ea68c3b2668007b5b3d2a4ccd7e5b3fc45649d5d702a9b6cbc535de6fdab733dc54827ff8ddee348d775842a2233f07104d6dadc8aab838d03dbe1b6163bd209de", 0x4d}], 0x2) (rerun: 64)

2.392851736s ago: executing program 4 (id=2154):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r0=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xb, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c, 0x2}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x21, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

1.794562092s ago: executing program 6 (id=2155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x200, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x7}}]}})
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r2, &(0x7f0000000400)=""/207, 0xcf, 0x4eb)
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000200)={r1})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0xaae}, 0x20, 0x0, 0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)="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", 0x155, 0x0, &(0x7f0000000680)={0x2, 0xaf, {0x0, 0xc, 0x7d, "d7e640c1041c9e33d5de4dad913a60ac4cd24477c196d7c456a4f1cc6cb0e2c6f6d633a94e697e16248e1ff4a9c6229c88b0d1893a78e72deccbcac6c73cfde174f9674c9b50170a3463a1eb1287ddda9eaf7f0344676ab0041bdf2558989c184797860f1904ddca7d0be5a5c979b4a310d1a58b219285ac946e68b1b1", 0x25, "b8fdaeac6b0e2747ab4084f944478c5b865e617b333e3928270978624e7f2d47eadca7f133"}, 0xd4, "126a2e6cfc573789753bc89872730313c3dc3cdbdb5813bb8e4b6b1d5ec6bbb9c48fffce4d87c956fd9008219c1089127a6e4c1541ed0d65e693c75b40d71661aa8a04468f68edb031ce86f30bbaa5d25316d7fecb644c6f0c8811196ed22583e34ab359ef1576919e052cc00a338be0a6a3b59e7c1bae38973bba5ec96022b8c3ee159b536c9f7512e0aeca0e465c9210d28a2078c6c35e9bc334db7c580a4e420c425df1fd17d20db18f8c644f9f1d1dd926688bdc2e533c67f6410d23b337eb0c969fa1a431aca77766d73b4e3cf5612eb2a5"}, 0x18f})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0)
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2000, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x10, 0x0, @void}}}}}}}}, 0x32)

1.783951683s ago: executing program 1 (id=2156):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000007000000008000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x13, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00')
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7fff}, 0xc) (async)
r5 = syz_io_uring_setup(0x49f, &(0x7f0000000540)={0x0, 0xff95, 0x400, 0x3, 0x35b, 0x0, r3}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (rerun: 64)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) (async)
io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
ioctl$SIOCAX25DELUID(r9, 0x89e2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x12b383, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) (async)
read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x0)

1.690271419s ago: executing program 4 (id=2157):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x4a, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(0x0, 0x0, 0x1)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xf, 0x35, 0x8, 0x4da, 0x390d, 0x991a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0x84, 0x6a, 0x92, 0x0, [], [{{0x9, 0x5, 0x16873d934242cc64, 0x2, 0x8, 0x8, 0x3, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0x1, 0x1}}]}}]}}]}}, 0x0)

1.607308472s ago: executing program 0 (id=2158):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x3, 0x4, 0x0, 0x7, 0x1, 0x3, 0x5, 0x1, 0x5, 0x6, 0x8, 0x9, 0x5, 0x8, 0x6, 0x8}})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xff}}, 0x14)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2}, 0x20)
close(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)

1.477690643s ago: executing program 1 (id=2159):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0015"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r2 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x24a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xed, 0x39}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x70, 0x8, 0x58}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x3, 0x3, 0x6, 0x20, 0x2}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x7, 0x1, 0xe}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x401}}, {0x35, &(0x7f00000002c0)=@string={0x35, 0x3, "a81f4ea08235e68002493f6f643d5922689465100f74d4d64be66c1f7b3cfb76bb1e060bb7759263957b009213411afbd5ccab"}}]})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f00000004c0)={0x40, 0x7, 0xcc, {0xcc, 0xd, "9451148e8107ca98a7a13f04bb8d087b3f63c7e31b1a9b4b3b8d79d57a2c793aaffca9c22d4a929d7ccebf7625345377c5ccb8bf7429247dcf1a4cefa72aa0ec5717253e40571aff396787747c7c18350de377deaed1336af091033757b02eefd90b84fe6ebff78a8ba34385d8765b1b76d5b490ff697c4cdd415e1a4858ddef2a5ad682baddc01328247e7ffc442a82426b743c41951eda12692a83c3d3054a893c5344eaeb5fc726f91bf3ba9955a491f25767259e835a7a2fe975fa2d2126bd427f5fd76c3094c6be"}}, &(0x7f0000000380)={0x0, 0x3, 0x19, @string={0x19, 0x3, "86287b776f9d2e78a0c2e1cfc4bc32137fc171f26be9ac"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="00280f0000008b095e2e067b5eccc6d7a7d87caf5f"], &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x67, 0x1, {0x22, 0x8a6}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x20, 0x0, 0x98, "20173afae1702e0ca6c6d0461d54b0c00fc0336ecb31a5beaec82541643908f7ba84a8985d5249e97e5445c8282c6a1e822e5bcf4dee1393af1dffeac87aeb728eac4bb70d5d206a2d135ba4c024a4990311bbbfc39119fd7bf323fe85786f04d0bf73152cd39229c3123aaa295732b26c189b1cc59b49f3727a3297a15c18083a961e905b788083f31340eb0a5658296d69d46615eafb4b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000780)={0x20, 0x1, 0x7a, "02c3a50e448bf6afdda997716cdcf232f31e6d92f1c96b7613d8b9d5e259c4d89ba929d9dfb0dae6bd6762d33af42909c9bfe72aec52e336b34eabd3486bde08dbc6efce8a1bb07affe8b3d3f9e0b5aed6dc116c19325823ad0f7aa57bf794e6ab3addd5ff99c8aec6ecc30fa6b281f5feaf0f0b2ee1e7da7a88"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x81}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x7c, r7, 0x4, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x7c}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x13, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

672.411272ms ago: executing program 6 (id=2160):
keyctl$clear(0x3, 0xfffffffffffffffc)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x3}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000340)={0x2, 0x2b4}, 0x0)
landlock_restrict_self(r4, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
add_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000680)="5cde244229", 0x5, r1)
keyctl$link(0x8, r0, r1)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000600)={'\x00', 0xa000, 0xa, 0x7, 0x8000000000000000, 0xff})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4000}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43f", 0x10}], 0x1}, 0x20048050)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x25)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

272.380426ms ago: executing program 6 (id=2161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}, {&(0x7f0000000000)=""/75, 0x4b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)

178.85832ms ago: executing program 6 (id=2162):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000001240)=0x37e1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001280)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000004180)={0x10000008})
bind$llc(r4, &(0x7f0000000180)={0x1a, 0x17, 0xa, 0x6, 0x36, 0x81, @random="6bdb72576b7e"}, 0x10)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
sendmsg$nl_xfrm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001640)=@allocspi={0xf8, 0x28, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in=@multicast1, 0x0, 0x376, 0x4e23}, {@in6=@loopback, 0x20, 0x32}, @in6=@loopback, {0x0, 0x6}, {}, {0x0, 0x0, 0x2}}, 0x0, 0x4}}, 0xf8}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

0s ago: executing program 0 (id=2163):
r0 = socket$netlink(0x10, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="110026bd7000ffdbdf250700000077ff0300", @ANYRES32=r3, @ANYBLOB="08000500010000001400040070696d726567000000000000000000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x46014)
r4 = socket(0x11, 0x80a, 0x0)
bind$rxrpc(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
timer_create(0x0, 0x0, 0x0)
sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000002c0), 0x0, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0)
read$msr(r12, &(0x7f0000000780)=""/4, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x802, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

sp0: Synchronizing with TNC
[  478.507760][T12146] [U] �`
[  478.535594][   T24] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc
[  478.568840][   T24] usb 2-1: USB disconnect, device number 53
[  478.652726][ T9757] udevd[9757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.672500][ T5852] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  478.717231][ T5852] usb 1-1: device descriptor read/8, error -71
[  478.824898][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'.
[  478.840114][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'.
[  478.845951][ T5852] usb usb1-port1: unable to enumerate USB device
[  480.260362][T12177] lo speed is unknown, defaulting to 1000
[  480.721922][T12179] Invalid ELF header type: 3 != 1
[  481.267999][T12168] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  482.632913][ T5852] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  482.831987][T12223] i2c i2c-0: Invalid block write size 33
[  482.982594][ T5852] usb 2-1: Using ep0 maxpacket: 16
[  482.991271][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  483.032093][ T5852] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  483.112746][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.136697][ T5852] usb 2-1: Product: syz
[  483.141016][ T5852] usb 2-1: Manufacturer: syz
[  483.181424][ T5852] usb 2-1: SerialNumber: syz
[  483.650849][ T5852] usb 2-1: config 0 descriptor??
[  483.691755][ T5852] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  485.068658][ T5852] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  485.095851][T12235] netlink: 'syz.6.1513': attribute type 9 has an invalid length.
[  485.108760][T12230] sp0: Synchronizing with TNC
[  485.164332][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'.
[  485.175313][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'.
[  485.291897][ T5852] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  485.500655][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.509862][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.678207][ T5852] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  486.692131][ T5852] em28xx 2-1:0.0: board has no eeprom
[  487.617358][ T5852] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  487.766035][ T5852] em28xx 2-1:0.0: dvb set to bulk mode.
[  488.399778][ T5851] em28xx 2-1:0.0: Binding DVB extension
[  488.511734][ T5938] usb 2-1: USB disconnect, device number 54
[  488.536699][ T5938] em28xx 2-1:0.0: Disconnecting em28xx
[  488.575002][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  488.575020][   T30] audit: type=1800 audit(1755945011.994:170): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1520" name="bus" dev="overlay" ino=1627 res=0 errno=0
[  488.633289][ T5851] em28xx 2-1:0.0: Registering input extension
[  488.725112][ T5938] em28xx 2-1:0.0: Closing input extension
[  488.745084][T12276] tipc: Enabling of bearer <eth:vlan1> rejected, failed to enable media
[  488.979674][ T5938] em28xx 2-1:0.0: Freeing device
[  489.826835][T12291] netlink: 'syz.4.1526': attribute type 2 has an invalid length.
[  489.836452][T12293] netlink: 'syz.4.1526': attribute type 2 has an invalid length.
[  490.152417][ T5938] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  490.331868][ T5938] usb 6-1: Using ep0 maxpacket: 32
[  490.360398][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  490.405770][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  490.437326][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  490.449106][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  490.481458][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  490.508332][ T5938] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  490.527634][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.538696][ T5938] usb 6-1: Product: syz
[  490.542960][ T5938] usb 6-1: Manufacturer: syz
[  490.547676][ T5938] usb 6-1: SerialNumber: syz
[  490.565816][ T5938] usb 6-1: config 0 descriptor??
[  490.814351][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -32
[  491.086698][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1531'.
[  491.146866][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'.
[  491.180850][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'.
[  491.267669][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.298868][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.317011][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.352009][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.365919][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.384145][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.395838][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.407900][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.424263][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.435272][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.443141][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.450686][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.468171][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.541815][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.564376][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.583310][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.611683][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.625735][ T5938] iforce 6-1:0.0: usb_submit_urb failed: -71
[  491.652537][ T5938] input input41: Timeout waiting for response from device.
[  491.662787][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  491.707377][ T5938] usb 6-1: USB disconnect, device number 59
[  492.009556][T12341] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1537'.
[  492.113808][T12346] netlink: 'syz.5.1538': attribute type 6 has an invalid length.
[  492.168235][T12343] lo speed is unknown, defaulting to 1000
[  492.214619][T12347] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  492.411703][ T5938] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  492.579226][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.629706][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.639749][ T5938] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  492.649197][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.666714][ T5938] usb 2-1: config 0 descriptor??
[  492.911987][ T5851] IPVS: starting estimator thread 0...
[  493.012822][T12357] IPVS: using max 28 ests per chain, 67200 per kthread
[  493.087642][ T5938] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  493.158882][ T5938] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  493.292406][ T5938] cp2112 0003:10C4:EA90.0016: Part Number: 0x00 Device Version: 0x4D
[  493.795652][   T30] audit: type=1326 audit(1755945017.214:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7918ebe9 code=0x7ffc0000
[  493.859410][   T30] audit: type=1326 audit(1755945017.214:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7918ebe9 code=0x7ffc0000
[  493.885303][   T30] audit: type=1326 audit(1755945017.214:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7918d550 code=0x7ffc0000
[  493.910546][   T30] audit: type=1326 audit(1755945017.214:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e79190417 code=0x7ffc0000
[  493.970900][   T30] audit: type=1326 audit(1755945017.214:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e7918ebe9 code=0x7ffc0000
[  493.995128][   T30] audit: type=1326 audit(1755945017.214:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e79190417 code=0x7ffc0000
[  494.078289][   T30] audit: type=1326 audit(1755945017.224:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e7918d84a code=0x7ffc0000
[  494.167190][   T30] audit: type=1326 audit(1755945017.224:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e7918d550 code=0x7ffc0000
[  494.279389][   T30] audit: type=1326 audit(1755945017.224:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2e79190417 code=0x7ffc0000
[  494.315671][T12384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.371310][   T30] audit: type=1326 audit(1755945017.224:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12371 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e7918ebe9 code=0x7ffc0000
[  494.455433][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.478702][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.484858][ T5938] usb 2-1: reset high-speed USB device number 55 using dummy_hcd
[  496.188857][ T5938] usb 2-1: device descriptor read/64, error -71
[  497.001897][ T5938] usb 2-1: reset high-speed USB device number 55 using dummy_hcd
[  497.010988][ T5938] usb 2-1: device reset changed ep0 maxpacket size!
[  497.241107][ T5851] usb 2-1: USB disconnect, device number 55
[  497.264036][T12429] sctp: [Deprecated]: syz.5.1560 (pid 12429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  497.264036][T12429] Use struct sctp_sack_info instead
[  497.294120][ T5852] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  497.472433][ T5852] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  497.527375][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.768311][ T5852] usb 7-1: config 0 descriptor??
[  497.841183][ T5851] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  498.075313][ T5852] usb 7-1: Cannot read MAC address
[  498.087591][ T5852] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  498.130773][ T5851] usb 2-1: Using ep0 maxpacket: 16
[  498.136362][ T5852] usb 7-1: USB disconnect, device number 32
[  498.148844][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -61
[  498.200510][ T5851] usb 2-1: can't read configurations, error -61
[  498.308866][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1563'.
[  498.350908][ T5851] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  498.500870][ T5851] usb 2-1: Using ep0 maxpacket: 16
[  498.511509][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -61
[  498.519212][ T5851] usb 2-1: can't read configurations, error -61
[  498.525862][ T5851] usb usb2-port1: attempt power cycle
[  498.733208][ T5992] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  499.014873][ T5992] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  499.025550][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.052334][ T5992] usb 1-1: config 0 descriptor??
[  500.502514][ T5992] usb 1-1: Cannot set autoneg
[  500.507624][ T5992] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[  501.463739][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  501.511785][ T5992] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  501.556037][ T6005] usb 1-1: USB disconnect, device number 56
[  501.682838][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  501.696904][ T5992] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  501.709027][ T5992] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  501.718592][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.742409][ T5992] usb 2-1: config 0 descriptor??
[  501.758844][ T5992] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  501.768935][ T5992] dvb-usb: bulk message failed: -22 (3/0)
[  501.794642][ T5992] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  501.807972][ T5992] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  501.815569][ T5992] usb 2-1: media controller created
[  501.835145][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  501.871314][ T5992] dvb-usb: bulk message failed: -22 (6/0)
[  501.886205][ T5992] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  501.907237][ T5992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42
[  501.951141][ T6005] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  501.959395][ T5992] dvb-usb: schedule remote query interval to 150 msecs.
[  501.977893][ T5992] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  501.999793][ T5851] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  502.150858][ T5992] dvb-usb: bulk message failed: -22 (1/0)
[  502.165759][ T5992] dvb-usb: error while querying for an remote control event.
[  502.180357][ T5851] usb 6-1: Using ep0 maxpacket: 8
[  502.795166][ T5851] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  502.806710][ T5851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  502.809025][ T5992] dvb-usb: bulk message failed: -22 (1/0)
[  502.816574][ T5851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  502.816602][ T5851] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  502.816645][ T5851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  502.816668][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.864360][ T6005] usb 1-1: Using ep0 maxpacket: 32
[  502.870477][ T5992] dvb-usb: error while querying for an remote control event.
[  502.881965][ T6005] usb 1-1: too many configurations: 122, using maximum allowed: 8
[  502.892248][ T6005] usb 1-1: unable to read config index 0 descriptor/start: -61
[  502.899963][ T6005] usb 1-1: can't read configurations, error -61
[  503.031991][ T5992] dvb-usb: bulk message failed: -22 (1/0)
[  503.037572][ T5851] usb 6-1: GET_CAPABILITIES returned 0
[  503.037856][ T5992] dvb-usb: error while querying for an remote control event.
[  503.044565][ T5851] usbtmc 6-1:16.0: can't read capabilities
[  503.051509][ T6005] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  503.144632][ T5851] usb 2-1: USB disconnect, device number 59
[  503.194481][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  503.230396][ T6005] usb 1-1: Using ep0 maxpacket: 32
[  503.237096][ T6005] usb 1-1: too many configurations: 122, using maximum allowed: 8
[  503.254292][ T6005] usb 1-1: unable to read config index 0 descriptor/start: -61
[  503.262369][ T6005] usb 1-1: can't read configurations, error -61
[  503.275216][ T6005] usb usb1-port1: attempt power cycle
[  503.355766][ T5852] usb 6-1: USB disconnect, device number 60
[  503.630579][ T6005] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  503.672662][ T6005] usb 1-1: Using ep0 maxpacket: 32
[  504.114601][ T6005] usb 1-1: too many configurations: 122, using maximum allowed: 8
[  504.125245][ T6005] usb 1-1: unable to read config index 0 descriptor/start: -61
[  504.133404][ T6005] usb 1-1: can't read configurations, error -61
[  504.418737][ T6005] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  504.629467][ T6005] usb 1-1: Using ep0 maxpacket: 32
[  505.643568][ T6005] usb 1-1: device descriptor read/all, error -71
[  505.657691][ T6005] usb usb1-port1: unable to enumerate USB device
[  506.917057][T12555] lo speed is unknown, defaulting to 1000
[  507.205291][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1601'.
[  507.489256][ T5852] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  508.214112][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.235117][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  508.356237][ T5852] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  508.385640][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.445131][ T5852] usb 7-1: config 0 descriptor??
[  508.698197][ T5852] kovaplus 0003:1E7D:2D50.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0
[  508.810139][ T6005] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  508.831440][ T5852] kovaplus 0003:1E7D:2D50.0017: couldn't init struct kovaplus_device
[  508.870665][ T5852] kovaplus 0003:1E7D:2D50.0017: couldn't install mouse
[  508.944147][ T5852] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -71
[  508.950076][ T6005] usb 6-1: device descriptor read/64, error -71
[  508.993263][ T5852] usb 7-1: USB disconnect, device number 33
[  509.229682][ T6005] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  509.440840][ T6005] usb 6-1: device descriptor read/64, error -71
[  509.637835][ T6005] usb usb6-port1: attempt power cycle
[  510.099344][ T5852] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[  510.139501][ T6005] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  510.190264][ T6005] usb 6-1: device descriptor read/8, error -71
[  510.294048][ T5852] usb 7-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config
[  510.308449][ T5852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  510.319047][ T5852] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  510.398574][ T5852] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  510.421908][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.430717][ T5852] usb 7-1: Product: syz
[  510.435690][ T5852] usb 7-1: Manufacturer: syz
[  510.440373][ T5852] usb 7-1: SerialNumber: syz
[  510.479335][ T6005] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  510.501816][T12606] vivid-001: disconnect
[  510.506813][T12606] vivid-001: reconnect
[  510.512647][ T6005] usb 6-1: device descriptor read/8, error -71
[  510.629990][ T6005] usb usb6-port1: unable to enumerate USB device
[  510.665581][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.679961][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.385922][ T5852] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  511.417847][ T5852] cdc_ncm 7-1:1.0: bind() failure
[  511.465303][ T5852] usb 7-1: USB disconnect, device number 34
[  511.686667][T12618] netlink: 'syz.6.1613': attribute type 1 has an invalid length.
[  513.474238][T12634] syz.6.1616 (12634) used greatest stack depth: 17656 bytes left
[  513.579362][T12636] tmpfs: Bad value for 'nr_blocks'
[  514.117107][T12647] netlink: 'syz.6.1622': attribute type 10 has an invalid length.
[  514.202091][T12647] dummy0: entered promiscuous mode
[  514.213326][T12647] team0: Port device dummy0 added
[  514.387823][T12663] 9pnet_fd: Insufficient options for proto=fd
[  515.844617][T12695] netlink: 'syz.0.1633': attribute type 83 has an invalid length.
[  515.863373][T12695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  516.459683][ T5852] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  517.071257][ T5852] usb 2-1: config 0 has no interfaces?
[  517.120553][ T5852] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.04
[  517.178614][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.205824][T12715] xt_policy: too many policy elements
[  517.209462][ T5852] usb 2-1: config 0 descriptor??
[  517.449536][ T6005] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  517.616371][    T9] usb 2-1: USB disconnect, device number 60
[  517.796309][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  517.796347][   T30] audit: type=1326 audit(1755945041.117:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.6.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f232018ebe9 code=0x0
[  517.909247][ T6005] usb 1-1: Using ep0 maxpacket: 16
[  518.031236][ T6005] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  518.169051][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.189750][   T30] audit: type=1326 audit(1755945041.257:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12727 comm="syz.6.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f232018ebe9 code=0x0
[  518.278146][ T6005] usb 1-1: Product: syz
[  518.298383][ T6005] usb 1-1: Manufacturer: syz
[  518.318972][ T6005] usb 1-1: SerialNumber: syz
[  518.341856][ T6005] usb 1-1: config 0 descriptor??
[  518.417026][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1646'.
[  518.785167][ T6005] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  518.803412][ T6005] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  518.825959][ T6005] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  518.836725][ T6005] usb 1-1: media controller created
[  518.857673][ T6005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  519.244054][ T6005] zl10353_read_register: readreg error (reg=127, ret==0)
[  519.257160][ T5915] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  519.267080][ T6005] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  519.276022][ T6005] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  519.297937][ T6005] usb 1-1: USB disconnect, device number 61
[  519.410021][ T6005] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  519.448251][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  519.460720][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  519.476248][ T5915] usb 6-1: config 0 has no interface number 0
[  519.499489][ T5915] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  519.510785][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.527526][ T5915] usb 6-1: Product: syz
[  519.532499][ T5915] usb 6-1: Manufacturer: syz
[  519.537254][ T5915] usb 6-1: SerialNumber: syz
[  519.559921][ T5915] usb 6-1: config 0 descriptor??
[  519.570688][ T5915] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  519.748235][    T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  519.878306][    T9] usb 2-1: device descriptor read/64, error -71
[  519.888578][ T5851] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  520.039929][ T5851] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  520.050681][ T5851] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  520.060823][ T5851] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  520.074127][ T5851] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  520.083247][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.088229][ T6005] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[  520.099119][ T5851] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  520.128292][    T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  520.143941][ T5851] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  520.268374][    T9] usb 2-1: device descriptor read/64, error -71
[  520.272997][ T6005] usb 7-1: unable to get BOS descriptor or descriptor too short
[  520.285070][ T6005] usb 7-1: no configurations
[  520.289788][ T6005] usb 7-1: can't read configurations, error -22
[  520.305356][ T5851] usb 1-1: USB disconnect, device number 62
[  520.379756][    T9] usb usb2-port1: attempt power cycle
[  520.718232][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  520.749976][    T9] usb 2-1: device descriptor read/8, error -71
[  520.877895][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1657'.
[  520.934108][T12774] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  520.953451][T12774] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.962170][T12774] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.980826][ T5915] gspca_spca1528: reg_w err -71
[  520.991919][ T5915] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  521.006139][ T5915] usb 6-1: USB disconnect, device number 65
[  521.022026][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  521.049503][    T9] usb 2-1: device descriptor read/8, error -71
[  521.138156][ T6005] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  521.168451][    T9] usb usb2-port1: unable to enumerate USB device
[  521.302183][ T6005] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  521.313218][ T6005] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  521.323469][ T6005] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  521.335122][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  521.343238][ T6005] usb 7-1: SerialNumber: syz
[  521.394241][T12780] C: entered promiscuous mode
[  521.399390][T12780] team_slave_1: entered promiscuous mode
[  521.405627][T12780] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  521.413916][ T3006] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  521.415373][T12780] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  521.548094][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  521.754408][ T6005] usb 7-1: 0:2 : does not exist
[  521.810639][ T6005] usb 7-1: USB disconnect, device number 36
[  521.813114][    T9] usb 1-1: Using ep0 maxpacket: 32
[  521.824103][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  521.838569][    T9] usb 1-1: config 0 has no interface number 0
[  521.844732][    T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.859237][    T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.871557][    T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  521.882315][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.902271][ T9757] udevd[9757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  521.924522][    T9] usb 1-1: config 0 descriptor??
[  522.697948][    T9] uclogic 0003:28BD:0094.0018: failed retrieving string descriptor #100: -71
[  522.706875][    T9] uclogic 0003:28BD:0094.0018: failed retrieving pen parameters: -71
[  522.728234][    T9] uclogic 0003:28BD:0094.0018: pen probing failed: -71
[  522.735191][    T9] uclogic 0003:28BD:0094.0018: failed probing parameters: -71
[  522.765415][    T9] uclogic 0003:28BD:0094.0018: probe with driver uclogic failed with error -71
[  522.786194][T12809] netlink: 'syz.6.1667': attribute type 1 has an invalid length.
[  522.824824][    T9] usb 1-1: USB disconnect, device number 63
[  522.934586][T12809] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.003851][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'.
[  523.014267][T12813] bond1: (slave ip6erspan0): making interface the new active one
[  523.053511][T12813] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  523.079182][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.996359][ T6005] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  524.337772][ T6005] usb 2-1: Using ep0 maxpacket: 16
[  524.354687][ T6005] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  524.393809][ T6005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.454153][ T6005] usb 2-1: config 0 has no interface number 0
[  524.492223][ T6005] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  524.547681][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.566041][ T6005] usb 2-1: Product: syz
[  524.581220][ T6005] usb 2-1: Manufacturer: syz
[  524.585891][ T6005] usb 2-1: SerialNumber: syz
[  524.646060][ T6005] usb 2-1: config 0 descriptor??
[  524.879278][ T6005] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[  524.887598][ T6005] usb 2-1: No valid video chain found.
[  525.083862][ T6005] usb 2-1: USB disconnect, device number 65
[  525.138356][    T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  525.299852][    T9] usb 7-1: config 6 has an invalid interface number: 223 but max is 1
[  525.317579][    T9] usb 7-1: config 6 has an invalid interface number: 168 but max is 1
[  525.389556][T12865] Invalid source name
[  525.393648][T12865] UBIFS error (pid: 12865): cannot open "/dev/sg0", error -22
[  525.419018][T12865] netlink: 'syz.4.1688': attribute type 3 has an invalid length.
[  525.870000][    T9] usb 7-1: config 6 has no interface number 0
[  525.876151][    T9] usb 7-1: config 6 has no interface number 1
[  525.887517][    T9] usb 7-1: config 6 interface 223 has no altsetting 0
[  525.894351][    T9] usb 7-1: config 6 interface 168 has no altsetting 0
[  525.940352][    T9] usb 7-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4
[  525.957368][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.976504][    T9] usb 7-1: Product: syz
[  525.999917][    T9] usb 7-1: Manufacturer: syz
[  526.004583][    T9] usb 7-1: SerialNumber: syz
[  526.155113][T12876] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  526.617170][    T9] usb 7-1: USB disconnect, device number 37
[  526.755084][T12881] netlink: 'syz.4.1693': attribute type 13 has an invalid length.
[  527.171796][ T5851] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[  527.286442][T12901] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  527.296346][T12901] /dev/nullb0: Can't open blockdev
[  527.469253][ T5851] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  527.590701][ T5851] usb 6-1: config 0 has no interface number 0
[  527.718441][ T5851] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  528.224635][ T5851] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  528.236981][ T5851] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  528.246566][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.269943][ T5851] usb 6-1: config 0 descriptor??
[  528.307650][ T5851] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  528.524863][ T5851] usb 6-1: USB disconnect, device number 66
[  528.899912][T12921] program syz.0.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  529.567140][ T6005] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  529.808116][T12932] loop2: detected capacity change from 0 to 7
[  529.832652][T12932] Dev loop2: unable to read RDB block 7
[  529.841736][T12932]  loop2: unable to read partition table
[  529.851577][T12932] loop2: partition table beyond EOD, truncated
[  529.857138][ T6005] usb 2-1: device descriptor read/64, error -71
[  529.872594][T12932] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  530.227399][ T6005] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  530.377552][ T6005] usb 2-1: device descriptor read/64, error -71
[  530.417104][ T5851] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  530.497275][ T6005] usb usb2-port1: attempt power cycle
[  530.557244][ T5851] usb 7-1: device descriptor read/64, error -71
[  530.712540][T12948] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  530.753310][ T5915] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  530.807242][ T2990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  530.807306][ T5851] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  530.837112][ T6005] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  530.867647][ T6005] usb 2-1: device descriptor read/8, error -71
[  530.936994][ T5851] usb 7-1: device descriptor read/64, error -71
[  531.062127][ T5851] usb usb7-port1: attempt power cycle
[  531.117001][ T6005] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  531.137758][ T6005] usb 2-1: device descriptor read/8, error -71
[  531.247313][ T6005] usb usb2-port1: unable to enumerate USB device
[  531.406887][ T5851] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  531.427368][ T5851] usb 7-1: device descriptor read/8, error -71
[  531.683369][ T5851] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  531.717510][ T5851] usb 7-1: device descriptor read/8, error -71
[  531.777003][ T6005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  531.847834][ T5851] usb usb7-port1: unable to enumerate USB device
[  531.865776][ T6388] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  531.899539][ T6388] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.116791][ T5915] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  532.257007][ T5915] usb 6-1: device descriptor read/64, error -71
[  532.496842][ T5915] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  532.626879][ T5915] usb 6-1: device descriptor read/64, error -71
[  532.656983][ T5992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  532.737295][ T5915] usb usb6-port1: attempt power cycle
[  533.087686][ T5915] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  533.116668][ T5851] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  533.124673][ T5915] usb 6-1: device descriptor read/8, error -71
[  533.266672][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  533.273890][ T5851] usb 1-1: too many configurations: 31, using maximum allowed: 8
[  533.290639][ T5851] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 224
[  533.299817][ T5851] usb 1-1: can't read configurations, error -22
[  533.407557][ T5915] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  533.436638][ T5851] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  533.462037][ T5915] usb 6-1: device descriptor read/8, error -71
[  533.608102][ T5915] usb usb6-port1: unable to enumerate USB device
[  533.609576][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  533.646327][ T5851] usb 1-1: too many configurations: 31, using maximum allowed: 8
[  533.668195][ T5851] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 224
[  533.686581][ T5851] usb 1-1: can't read configurations, error -22
[  533.697012][ T5851] usb usb1-port1: attempt power cycle
[  533.844391][T13002] vcan0: tx drop: invalid da for name 0x0000000000000002
[  534.046604][ T5915] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  534.076756][ T5851] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  534.107277][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  534.116754][ T5851] usb 1-1: too many configurations: 31, using maximum allowed: 8
[  534.138925][ T5851] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 224
[  534.158090][ T5851] usb 1-1: can't read configurations, error -22
[  534.221092][ T5915] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  534.238849][ T5915] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  534.256735][ T5915] usb 2-1: Product: syz
[  534.266518][ T5915] usb 2-1: Manufacturer: syz
[  534.277071][ T5915] usb 2-1: SerialNumber: syz
[  534.287861][ T5915] usb 2-1: config 0 descriptor??
[  534.301700][ T5851] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  534.327283][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  534.333265][ T5851] usb 1-1: too many configurations: 31, using maximum allowed: 8
[  534.355525][ T5851] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 224
[  534.364815][ T5851] usb 1-1: can't read configurations, error -22
[  534.371687][ T5851] usb usb1-port1: unable to enumerate USB device
[  534.467480][T13016] netlink: 'syz.6.1729': attribute type 1 has an invalid length.
[  534.475606][T13016] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1729'.
[  534.652602][T13021] ipip0: entered promiscuous mode
[  534.671784][T13021] ipip0: entered allmulticast mode
[  534.884584][ T5915] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  534.895262][ T5915] asix 2-1:0.0: probe with driver asix failed with error -61
[  534.912039][ T5915] usb 2-1: USB disconnect, device number 70
[  534.971846][   T30] audit: type=1326 audit(1755945058.389:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232018ebe9 code=0x7ffc0000
[  535.075830][   T30] audit: type=1326 audit(1755945058.419:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232018ebe9 code=0x7ffc0000
[  535.097474][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.723613][   T30] audit: type=1326 audit(1755945058.419:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f232018ebe9 code=0x7ffc0000
[  535.746803][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.759784][T13039] macsec1: entered allmulticast mode
[  535.768097][   T30] audit: type=1326 audit(1755945058.419:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2320185ba7 code=0x7ffc0000
[  535.778628][T13039] macvlan1: entered allmulticast mode
[  535.793371][   T30] audit: type=1326 audit(1755945058.419:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f232012ade9 code=0x7ffc0000
[  535.816522][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.856801][   T30] audit: type=1326 audit(1755945058.419:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2320185ba7 code=0x7ffc0000
[  535.878727][   T30] audit: type=1326 audit(1755945058.419:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f232012ade9 code=0x7ffc0000
[  535.900199][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.999937][T13039] veth1_vlan: entered allmulticast mode
[  536.011869][   T30] audit: type=1326 audit(1755945058.419:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2320185ba7 code=0x7ffc0000
[  536.016574][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  536.033358][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.034441][   T30] audit: type=1326 audit(1755945058.419:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f232012ade9 code=0x7ffc0000
[  536.101829][T13039] macvlan1: left allmulticast mode
[  536.110991][T13039] veth1_vlan: left allmulticast mode
[  536.162545][   T30] audit: type=1326 audit(1755945058.419:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.6.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2320185ba7 code=0x7ffc0000
[  536.184064][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.376301][ T5915] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  536.554509][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.585933][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.616443][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  536.649778][ T5915] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  536.686197][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.715620][ T5915] usb 1-1: config 0 descriptor??
[  536.997450][T13062] overlayfs: failed to clone upperpath
[  537.471697][ T5915] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  537.539969][T13047] input: syz1 as /devices/virtual/input/input45
[  537.568129][ T5915] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  538.256670][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  538.420881][T13076] /dev/nullb0: Can't open blockdev
[  538.582771][    T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  538.595968][    T9] usb 2-1: config 0 has no interface number 0
[  538.616093][    T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  538.628177][    T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  538.658329][    T9] usb 2-1: config 0 interface 255 has no altsetting 0
[  538.677285][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  538.700771][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.708946][    T9] usb 2-1: Product: syz
[  538.715958][    T9] usb 2-1: Manufacturer: syz
[  538.720593][    T9] usb 2-1: SerialNumber: syz
[  538.736627][    T9] usb 2-1: config 0 descriptor??
[  538.755994][ T5851] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  538.766444][    T9] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  538.887773][T13082] netlink: 'syz.4.1749': attribute type 12 has an invalid length.
[  538.896117][T13082] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1749'.
[  538.926157][ T5851] usb 6-1: Using ep0 maxpacket: 32
[  538.934583][ T5851] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  538.943096][ T5851] usb 6-1: config 0 has no interface number 0
[  538.954283][    T9] sonixb 2-1:0.255: Error reading register 00: -71
[  538.964665][ T5851] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  538.976321][    T9] usb 2-1: USB disconnect, device number 71
[  538.989226][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.999032][ T5851] usb 6-1: Product: syz
[  539.003414][ T5851] usb 6-1: Manufacturer: syz
[  539.009610][ T5851] usb 6-1: SerialNumber: syz
[  539.020942][ T5851] usb 6-1: config 0 descriptor??
[  539.035960][ T5915] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  539.038193][ T5851] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  539.073213][ T5851] usb 6-1: selecting invalid altsetting 1
[  539.084682][ T5851] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  539.101101][ T5851] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  539.112801][ T5851] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  539.136450][ T5851] usb 6-1: media controller created
[  539.169784][ T5852] usb 1-1: USB disconnect, device number 68
[  539.186238][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  539.346052][ T5915] usb 7-1: Using ep0 maxpacket: 16
[  539.354143][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.359302][ T5851] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  539.365650][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  539.383471][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  539.393349][ T5915] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  539.403413][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  539.418454][ T5915] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  539.427817][ T5915] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  539.507101][ T5851] zl10353_read_register: readreg error (reg=127, ret==-71)
[  539.517180][ T5851] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  539.541710][ T5915] usb 7-1: Manufacturer: syz
[  539.552147][ T5915] usb 7-1: config 0 descriptor??
[  539.571489][ T5851] usb 6-1: USB disconnect, device number 71
[  539.667884][T13092] input: syz1 as /devices/virtual/input/input46
[  539.935850][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1751'.
[  540.106748][   T30] kauditd_printk_skb: 94 callbacks suppressed
[  540.106788][   T30] audit: type=1326 audit(1755945063.400:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  540.260375][   T30] audit: type=1326 audit(1755945063.400:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.4.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  540.545100][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.555908][ T5915] rc_core: IR keymap rc-hauppauge not found
[  540.564829][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.568116][ T5915] Registered IR keymap rc-empty
[  540.593053][T13104] netlink: 'syz.4.1754': attribute type 1 has an invalid length.
[  540.601233][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.635832][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.668853][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  540.725396][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input47
[  540.809930][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.876142][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.906180][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.927116][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.952865][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  540.997090][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  541.028966][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  541.066009][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  541.126385][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  541.167391][ T5915] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  541.232543][ T5915] mceusb 7-1:0.0: Registered ÿ with mce emulator interface version 1
[  541.266646][ T5915] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  542.132457][ T5851] usb 7-1: USB disconnect, device number 42
[  542.876164][T13136] veth1_to_bond: entered allmulticast mode
[  542.882392][T13136] veth1_to_bond: entered promiscuous mode
[  542.892233][T13136] netlink: 'syz.1.1762': attribute type 2 has an invalid length.
[  542.904328][T13135] veth1_to_bond: left promiscuous mode
[  542.915601][T13135] veth1_to_bond: left allmulticast mode
[  542.979959][T13138] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  543.011139][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1763'.
[  543.086087][ T5851] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  543.087750][T13146] --map-set only usable from mangle table
[  543.235687][ T5915] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  543.267871][ T5851] usb 7-1: Using ep0 maxpacket: 16
[  543.316934][ T5851] usb 7-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config
[  543.388283][ T5851] usb 7-1: config 53 has 0 interfaces, different from the descriptor's value: 1
[  543.607762][ T5851] usb 7-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice= c.bc
[  543.608680][ T5915] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  543.637644][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.646971][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.659123][ T5915] usb 2-1: Product: syz
[  543.668346][ T5915] usb 2-1: Manufacturer: syz
[  543.670594][ T5851] usb 7-1: Product: syz
[  543.683891][ T5915] usb 2-1: SerialNumber: syz
[  543.686720][ T5851] usb 7-1: Manufacturer: syz
[  543.693370][ T5851] usb 7-1: SerialNumber: syz
[  543.721324][ T5915] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  543.766072][ T5992] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  543.790810][T13153] 9pnet: p9_errstr2errno: server reported unknown error 
[  544.047947][ T5851] usb 7-1: USB disconnect, device number 43
[  544.200777][ T5852] usb 2-1: USB disconnect, device number 72
[  544.335444][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  544.535765][    T9] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[  544.720193][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  544.765319][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  544.798262][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  544.815556][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.866590][ T5992] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  544.906249][ T5992] ath9k_htc: Failed to initialize the device
[  545.014599][ T5852] usb 2-1: ath9k_htc: USB layer deinitialized
[  545.038654][    T9] usb 6-1: Product: syz
[  545.042877][    T9] usb 6-1: Manufacturer: syz
[  545.049554][    T9] usb 6-1: SerialNumber: syz
[  545.074918][    T9] usb 6-1: config 0 descriptor??
[  545.161543][    T9] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  545.319258][    T9] em28xx 6-1:0.0: Device initialization failed.
[  545.483198][    T9] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  545.796950][    T9] usb 6-1: USB disconnect, device number 72
[  545.931449][T13181] input: syz0 as /devices/virtual/input/input48
[  545.946927][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'.
[  546.002869][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'.
[  546.023943][T13185] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1776'.
[  546.365519][ T5852] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  546.451824][T13189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  546.461725][T13189] syzkaller0: entered promiscuous mode
[  546.467799][T13189] syzkaller0: entered allmulticast mode
[  546.575660][ T5852] usb 7-1: Using ep0 maxpacket: 16
[  546.640989][T13189] tipc: Resetting bearer <eth:syzkaller0>
[  546.648462][ T5852] usb 7-1: unable to get BOS descriptor or descriptor too short
[  546.659709][ T5852] usb 7-1: too many configurations: 193, using maximum allowed: 8
[  546.670225][T13187] tipc: Resetting bearer <eth:syzkaller0>
[  546.701936][ T5852] usb 7-1: unable to read config index 0 descriptor/start: -61
[  546.709951][ T5852] usb 7-1: can't read configurations, error -61
[  546.716830][T13187] tipc: Disabling bearer <eth:syzkaller0>
[  546.885217][ T5852] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  547.048549][ T5852] usb 7-1: Using ep0 maxpacket: 16
[  547.080715][ T5852] usb 7-1: unable to get BOS descriptor or descriptor too short
[  547.088585][ T5852] usb 7-1: too many configurations: 193, using maximum allowed: 8
[  547.126620][ T5852] usb 7-1: unable to read config index 0 descriptor/start: -61
[  547.134822][ T5852] usb 7-1: can't read configurations, error -61
[  547.152317][ T5852] usb usb7-port1: attempt power cycle
[  547.213390][T13193] overlayfs: failed to resolve './file0': -40
[  547.231927][T13206] overlayfs: failed to clone upperpath
[  547.652275][ T5852] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  547.711303][ T5852] usb 7-1: Using ep0 maxpacket: 16
[  547.721190][ T5852] usb 7-1: unable to get BOS descriptor or descriptor too short
[  547.738015][ T5852] usb 7-1: too many configurations: 193, using maximum allowed: 8
[  547.955214][ T5992] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  548.395700][ T5852] usb 7-1: unable to read config index 0 descriptor/start: -61
[  548.405027][ T5852] usb 7-1: can't read configurations, error -61
[  548.484844][ T5992] usb 6-1: Using ep0 maxpacket: 32
[  548.502509][ T5992] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  548.521666][ T5992] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  548.537736][ T5852] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  548.540726][ T5992] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  548.565085][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  548.586454][ T5992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  548.598430][ T5852] usb 7-1: Using ep0 maxpacket: 16
[  548.606734][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  548.618802][ T5852] usb 7-1: unable to get BOS descriptor or descriptor too short
[  548.619580][ T5992] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  548.636700][ T5992] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  548.646687][ T5852] usb 7-1: too many configurations: 193, using maximum allowed: 8
[  548.661662][ T5852] usb 7-1: unable to read config index 0 descriptor/start: -61
[  548.674672][ T5852] usb 7-1: can't read configurations, error -61
[  548.680383][ T5992] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  548.682943][ T5852] usb usb7-port1: unable to enumerate USB device
[  548.713381][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.742646][ T5992] usb 6-1: config 0 descriptor??
[  548.762969][T13212] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  548.782921][ T5992] usblp0: Disabling reads from problematic bidirectional printer
[  549.261757][T13247] can0: slcan on ttyS3.
[  551.284277][T13247] can0 (unregistered): slcan off ttyS3.
[  551.349765][ T5992] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  551.435054][ T5992] usb 6-1: USB disconnect, device number 73
[  551.477506][ T5992] usblp0: removed
[  552.991784][T13276] smc: net device bond0 erased user defined pnetid SYZ2
[  553.035689][T13276] IPv6: Can't replace route, no match found
[  553.052820][T13276] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1802'.
[  553.131356][T13284] lo speed is unknown, defaulting to 1000
[  553.227933][T13287] fuse: Bad value for 'fd'
[  553.243236][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'.
[  553.808485][T13298] 9pnet_fd: Insufficient options for proto=fd
[  554.103702][T13287] 8021q: adding VLAN 0 to HW filter on device bond1
[  554.295968][T13292] 8021q: adding VLAN 0 to HW filter on device bond1
[  554.313515][T13292] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  554.346149][T13292] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  554.414188][T13296] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  554.466168][T13293] smc: net device bond0 applied user defined pnetid SYZ2
[  554.473565][T13294] smc: net device bond0 erased user defined pnetid SYZ2
[  554.864282][ T5992] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  555.314024][ T5992] usb 1-1: Using ep0 maxpacket: 8
[  555.330974][ T5992] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  555.366831][ T5992] usb 1-1: config 0 interface 0 has no altsetting 0
[  555.373511][ T5992] usb 1-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  555.396624][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.418618][ T5992] usb 1-1: config 0 descriptor??
[  555.850210][ T5992] thrustmaster 0003:044F:B300.001A: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.0-1/input0
[  555.903984][ T5992] thrustmaster 0003:044F:B300.001A: no inputs found
[  556.067503][ T5852] usb 1-1: USB disconnect, device number 69
[  557.024652][T13346] 9pnet_fd: Insufficient options for proto=fd
[  557.115607][T13354] netlink: 'syz.0.1821': attribute type 1 has an invalid length.
[  557.123396][T13354] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1821'.
[  558.243764][ T5851] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  558.338266][T13376] fuse: Bad value for 'fd'
[  558.405835][ T5851] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  558.414249][ T5851] usb 1-1: config 0 has no interface number 0
[  558.423432][ T5851] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  558.444034][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.452374][ T5851] usb 1-1: Product: syz
[  558.457259][ T5851] usb 1-1: Manufacturer: syz
[  558.473778][ T5851] usb 1-1: SerialNumber: syz
[  558.482082][ T5851] usb 1-1: config 0 descriptor??
[  558.521419][T13383] 9pnet_fd: Insufficient options for proto=fd
[  558.553696][ T5992] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  558.661337][T13393] netlink: 'syz.5.1836': attribute type 3 has an invalid length.
[  558.669523][T13393] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1836'.
[  558.685340][T13392] netlink: 'syz.5.1836': attribute type 3 has an invalid length.
[  558.693173][T13392] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1836'.
[  558.698060][ T5851] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  558.722232][ T5992] usb 2-1: config 0 interface 0 has no altsetting 0
[  558.729172][ T5992] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[  558.738716][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.747523][ T5851] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  558.760793][ T5992] usb 2-1: config 0 descriptor??
[  558.770788][ T5851] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  558.935812][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.034086][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.369475][T13380] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1832'.
[  559.416147][ T5992] isku 0003:1E7D:3264.001B: unexpected long global item
[  559.443896][ T5992] isku 0003:1E7D:3264.001B: parse failed
[  559.449816][ T5992] isku 0003:1E7D:3264.001B: probe with driver isku failed with error -22
[  559.753949][T13380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.776277][T13380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.845603][ T5852] usb 2-1: USB disconnect, device number 73
[  559.977166][T13417] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1845'.
[  560.113771][T13418] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1845'.
[  560.204403][T13417] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1845'.
[  560.266569][T13418] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1845'.
[  560.308872][T13423] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1846'.
[  560.333638][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  561.253367][ T5992] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  561.412256][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  561.424277][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.434910][ T5992] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  561.444133][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.453257][    C1] vcan0: j1939_tp_rxtimer: 0xffff888063818c00: rx timeout, send abort
[  561.464310][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888063818c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  561.482980][ T5992] usb 2-1: config 0 descriptor??
[  561.505416][ T5992] hub 2-1:0.0: USB hub found
[  562.383064][ T5992] hub 2-1:0.0: 2 ports detected
[  562.513365][ T5915] usb 6-1: new full-speed USB device number 74 using dummy_hcd
[  562.675497][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.686403][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  562.698292][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  562.711938][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  562.722010][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  562.737964][ T5915] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  562.748692][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  562.758255][ T5915] usb 6-1: Product: syz
[  562.762505][ T5915] usb 6-1: Manufacturer: syz
[  562.767265][ T5915] usb 6-1: SerialNumber: syz
[  562.775458][ T5915] usb 6-1: config 0 descriptor??
[  562.899375][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  563.005692][ T5915] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  563.012636][ T5915] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  563.211199][ T5915] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  563.219023][ T5915] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  563.231628][ T5915] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  563.412566][ T5915] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  563.727498][ T5992] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  563.884566][T13482] Unsupported ieee802154 address type: 0
[  564.305530][ T5915] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32
[  564.314042][ T5992] usb 2-1: USB disconnect, device number 74
[  564.323372][ T5915] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  564.735904][ T5915] usb 6-1: USB disconnect, device number 74
[  564.752916][ T5852] kernel read not supported for file /dsp (pid: 5852 comm: kworker/0:4)
[  564.806321][T13495] 9pnet_virtio: no channels available for device /dev/nbd6
[  565.019792][T13497] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1866'.
[  565.654226][   T30] audit: type=1326 audit(1755945089.073:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13509 comm="syz.5.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb687f8ebe9 code=0x0
[  567.002783][ T5852] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  567.804245][ T5852] usb 6-1: Using ep0 maxpacket: 16
[  567.821654][ T5852] usb 6-1: config 0 has an invalid interface number: 63 but max is 0
[  567.838435][ T5852] usb 6-1: config 0 has no interface number 0
[  567.853657][ T5852] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.865299][ T5852] usb 6-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.875515][ T5852] usb 6-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  567.889696][ T5852] usb 6-1: config 0 interface 63 has no altsetting 0
[  567.896564][ T5852] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  567.905850][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.922134][ T5852] usb 6-1: config 0 descriptor??
[  568.371116][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1884'.
[  568.427740][T13561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1884'.
[  569.017227][ T5852] uclogic 0003:28BD:0909.001C: interface is invalid, ignoring
[  569.087578][T13569] =======================================================
[  569.087578][T13569] WARNING: The mand mount option has been deprecated and
[  569.087578][T13569]          and is ignored by this kernel. Remove the mand
[  569.087578][T13569]          option from the mount to silence this warning.
[  569.087578][T13569] =======================================================
[  569.152651][ T5915] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  569.193577][T13568] vcan0: tx drop: invalid da for name 0x0000000000000002
[  569.496224][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.509310][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.521360][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  569.537587][ T5915] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  569.548805][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.564176][ T5915] usb 7-1: config 0 descriptor??
[  569.630221][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'.
[  569.639495][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1892'.
[  569.649006][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'.
[  569.659650][ T5852] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  569.668741][T13582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'.
[  569.823729][ T5852] usb 2-1: Using ep0 maxpacket: 32
[  569.845088][ T5852] usb 2-1: config 0 interface 0 has no altsetting 0
[  569.864792][ T5852] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  569.882504][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.902489][ T5852] usb 2-1: Product: syz
[  569.906705][ T5852] usb 2-1: Manufacturer: syz
[  569.911347][ T5852] usb 2-1: SerialNumber: syz
[  569.926011][ T5852] usb 2-1: config 0 descriptor??
[  569.981630][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.993807][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.030401][ T5915] viewsonic 0003:2133:0018.001D: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.6-1/input0
[  570.142054][T13578] netlink: 'syz.1.1891': attribute type 3 has an invalid length.
[  570.150455][T13578] netlink: 'syz.1.1891': attribute type 1 has an invalid length.
[  570.158351][T13578] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1891'.
[  570.247163][ T5915] usb 6-1: USB disconnect, device number 75
[  570.372876][ T5852] gs_usb 2-1:0.0: Configuring for 77 interfaces
[  570.379218][ T5852] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  570.387345][ T5852] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22
[  570.614051][ T5915] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  570.724314][ T6005] usb 7-1: USB disconnect, device number 49
[  570.772351][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  570.780472][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  570.800696][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  570.816877][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  570.826772][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.836750][ T5915] usb 6-1: Product: syz
[  570.841090][ T5915] usb 6-1: Manufacturer: syz
[  570.845838][ T5915] usb 6-1: SerialNumber: syz
[  570.888137][ T5915] usb 6-1: config 0 descriptor??
[  570.939256][ T5915] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  570.964471][ T5915] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  571.379572][ T5915] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  571.393856][ T5915] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  571.608071][ T5915] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  571.615540][T13605] xt_hashlimit: size too large, truncated to 1048576
[  571.622462][T13604] xt_hashlimit: size too large, truncated to 1048576
[  571.675143][ T5915] em28xx 6-1:0.0: No AC97 audio processor
[  572.308978][ T5915] usb 6-1: USB disconnect, device number 76
[  572.340104][ T5915] em28xx 6-1:0.0: Disconnecting em28xx
[  572.357189][T13613] input: syz1 as /devices/virtual/input/input49
[  572.380967][ T5915] em28xx 6-1:0.0: Freeing device
[  572.444768][ T5992] usb 2-1: USB disconnect, device number 75
[  572.480501][T13615] vcan0: tx drop: invalid da for name 0x0000000000000002
[  572.898288][T13626] cramfs: Unknown parameter 'discard'
[  573.499480][T13624] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1902'.
[  574.294008][T13634] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  574.914997][T13643] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  575.256321][T13643] CIFS mount error: No usable UNC path provided in device string!
[  575.256321][T13643] 
[  575.307342][T13643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  576.409017][   T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  576.452023][   T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.555286][T13657] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1912'.
[  576.671909][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'.
[  576.743617][ T5915] libceph: connect (1)[c::]:6789 error -101
[  576.773870][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  576.815812][ T5992] libceph: connect (1)[c::]:6789 error -101
[  576.888906][   T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  576.891808][ T5992] libceph: mon0 (1)[c::]:6789 connect error
[  576.923489][   T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.033928][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1917'.
[  577.071036][   T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.089434][   T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.186840][ T5992] libceph: connect (1)[c::]:6789 error -101
[  577.199718][ T5992] libceph: mon0 (1)[c::]:6789 connect error
[  577.206357][ T5915] libceph: connect (1)[c::]:6789 error -101
[  577.222831][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  577.236966][   T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.256775][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  577.269762][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  577.282599][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  577.292056][   T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.303826][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  577.311944][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  577.339737][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  577.350077][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  577.359530][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  577.446814][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  577.454860][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  577.469737][T13659] ceph: No mds server is up or the cluster is laggy
[  577.475148][T13664] ceph: No mds server is up or the cluster is laggy
[  577.826227][   T78] team0: left allmulticast mode
[  577.833543][   T78] team_slave_0: left allmulticast mode
[  577.852415][   T78] team_slave_1: left allmulticast mode
[  577.871715][   T78] bridge0: port 3(team0) entered disabled state
[  577.902370][   T78] bridge_slave_1: left allmulticast mode
[  577.908078][   T78] bridge_slave_1: left promiscuous mode
[  577.938780][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.032584][   T78] bridge_slave_0: left allmulticast mode
[  578.044676][   T78] bridge_slave_0: left promiscuous mode
[  578.075572][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.084303][T13700] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1923'.
[  578.729042][T13706] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  578.800351][T13690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1920'.
[  579.346907][T13712] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  579.541510][ T5843] Bluetooth: hci4: command tx timeout
[  579.551485][   T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  579.564226][   T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  579.575532][   T78] bond0 (unregistering): Released all slaves
[  579.695273][T13690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  579.783454][T13682] lo speed is unknown, defaulting to 1000
[  579.791061][ T5992] lo speed is unknown, defaulting to 1000
[  579.801547][   T78] tipc: Left network mode
[  579.808375][ T5992] syz0: Port: 1 Link DOWN
[  580.274860][ T5852] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  580.561237][ T5852] usb 7-1: Using ep0 maxpacket: 8
[  580.578294][ T5852] usb 7-1: config 0 has an invalid interface number: 150 but max is 0
[  580.611256][ T5852] usb 7-1: config 0 has an invalid interface number: 112 but max is 0
[  580.619819][ T5852] usb 7-1: config 0 has an invalid interface number: 3 but max is 0
[  580.681887][ T5852] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  580.690911][ T5852] usb 7-1: config 0 has no interface number 0
[  580.704388][ T5852] usb 7-1: config 0 has no interface number 1
[  580.711086][ T5852] usb 7-1: config 0 has no interface number 2
[  580.717263][ T5852] usb 7-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  580.765624][ T5852] usb 7-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[  580.780741][   T30] audit: type=1326 audit(1755945104.205:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.804646][ T5852] usb 7-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[  580.818995][ T5852] usb 7-1: config 0 interface 150 has no altsetting 0
[  580.825916][   T30] audit: type=1326 audit(1755945104.205:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.847636][ T5852] usb 7-1: config 0 interface 112 has no altsetting 0
[  580.855032][ T5852] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  580.864263][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.872435][   T30] audit: type=1326 audit(1755945104.205:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.895834][   T30] audit: type=1326 audit(1755945104.205:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.919660][   T30] audit: type=1326 audit(1755945104.205:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.943643][ T5852] usb 7-1: config 0 descriptor??
[  580.956114][   T30] audit: type=1326 audit(1755945104.205:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  580.998805][   T30] audit: type=1326 audit(1755945104.205:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  581.023271][   T30] audit: type=1326 audit(1755945104.205:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  581.047603][   T30] audit: type=1326 audit(1755945104.205:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  581.070237][   T30] audit: type=1326 audit(1755945104.205:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f874a78ebe9 code=0x7ffc0000
[  581.287808][ T5852] usb 7-1: string descriptor 0 read error: -71
[  581.316337][ T5852] usb 7-1: USB disconnect, device number 50
[  581.611166][ T5843] Bluetooth: hci4: command tx timeout
[  581.774712][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'.
[  583.691097][ T5843] Bluetooth: hci4: command tx timeout
[  584.223917][T13786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'.
[  584.278752][T13786] vlan4: entered promiscuous mode
[  584.291451][T13786] bridge0: entered promiscuous mode
[  584.408507][   T78] hsr_slave_0: left promiscuous mode
[  584.426138][   T78] hsr_slave_1: left promiscuous mode
[  584.437511][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.456510][   T78] batman_adv: batadv0: Removing interface: batadv_slave_0
[  584.465500][   T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.476378][   T78] batman_adv: batadv0: Removing interface: batadv_slave_1
[  584.502318][   T78] veth1_macvtap: left promiscuous mode
[  584.716219][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'.
[  585.057544][   T78] veth0_macvtap: left promiscuous mode
[  585.063357][   T78] veth1_vlan: left promiscuous mode
[  585.068704][   T78] veth0_vlan: left promiscuous mode
[  585.116223][T13794] input: syz1 as /devices/virtual/input/input50
[  585.547001][T13803] cramfs: Unknown parameter 'discard'
[  585.781205][ T5843] Bluetooth: hci4: command tx timeout
[  586.389014][T13806] vcan0: tx drop: invalid da for name 0x0000000000000002
[  586.719834][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'.
[  586.870368][ T5915] usb 7-1: new full-speed USB device number 51 using dummy_hcd
[  587.054542][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  587.080379][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  587.100503][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  587.126431][ T5915] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  587.147451][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.155614][ T5915] usb 7-1: Product: syz
[  587.159804][ T5915] usb 7-1: Manufacturer: syz
[  587.164518][ T5915] usb 7-1: SerialNumber: syz
[  587.176461][ T5915] usb 7-1: config 0 descriptor??
[  587.214702][T13817] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  587.229833][T13817] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  587.251507][ T5915] usb 7-1: ucan: probing device on interface #0
[  587.449976][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.466171][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.543558][   T78] team_slave_1 (unregistering): left promiscuous mode
[  587.561722][   T78] team0 (unregistering): Port device team_slave_1 removed
[  587.637981][   T78] team_slave_0 (unregistering): left promiscuous mode
[  587.655232][   T78] team0 (unregistering): Port device team_slave_0 removed
[  588.203307][T13682] chnl_net:caif_netlink_parms(): no params data found
[  588.375089][ T5915] ucan 7-1:0.0 can0: registered device
[  588.388923][ T5915] ucan 7-1:0.0 can0: firmware string: unknown
[  588.448917][ T5915] usb 7-1: USB disconnect, device number 51
[  588.658936][T13682] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.668053][T13682] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.675468][T13682] bridge_slave_0: entered allmulticast mode
[  588.687563][T13682] bridge_slave_0: entered promiscuous mode
[  588.714046][T13682] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.737269][T13682] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.750371][T13682] bridge_slave_1: entered allmulticast mode
[  588.787190][T13682] bridge_slave_1: entered promiscuous mode
[  588.986309][T13853] cramfs: Unknown parameter 'discard'
[  589.504415][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.603014][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.178294][T13682] team0: Port device team_slave_0 added
[  590.196784][T13682] team0: Port device team_slave_1 added
[  590.268308][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.293900][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.325096][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.366278][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.374478][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.421276][ T5915] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  590.432730][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.553204][T13682] hsr_slave_0: entered promiscuous mode
[  590.560919][T13682] hsr_slave_1: entered promiscuous mode
[  590.567435][T13682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  590.575363][T13682] Cannot create hsr debugfs directory
[  590.592968][ T5915] usb 7-1: Using ep0 maxpacket: 8
[  590.610602][ T5915] usb 7-1: config 0 has an invalid interface number: 150 but max is 0
[  590.629293][ T5915] usb 7-1: config 0 has an invalid interface number: 112 but max is 0
[  590.649959][ T5915] usb 7-1: config 0 has an invalid interface number: 3 but max is 0
[  590.658024][ T5915] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  590.682107][ T5915] usb 7-1: config 0 has no interface number 0
[  590.688244][ T5915] usb 7-1: config 0 has no interface number 1
[  590.699075][ T5915] usb 7-1: config 0 has no interface number 2
[  590.709956][ T5915] usb 7-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  590.740139][ T5915] usb 7-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[  590.759927][ T5915] usb 7-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[  590.789917][ T5915] usb 7-1: config 0 interface 150 has no altsetting 0
[  590.796766][ T5915] usb 7-1: config 0 interface 112 has no altsetting 0
[  590.810060][ T5915] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  590.819164][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.846857][ T5915] usb 7-1: config 0 descriptor??
[  591.818708][T13682] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  591.882478][T13682] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  591.913027][T13682] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  591.931522][T13886] lo speed is unknown, defaulting to 1000
[  591.932592][T13682] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  591.970342][    T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  592.155304][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.198823][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  592.242092][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  592.306403][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.322433][T13682] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.342441][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.368773][    T9] usb 2-1: Product: syz
[  592.388816][    T9] usb 2-1: Manufacturer: syz
[  592.405462][    T9] usb 2-1: SerialNumber: syz
[  592.420341][T13682] 8021q: adding VLAN 0 to HW filter on device team0
[  592.443642][    T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  592.469234][    T9] cdc_ncm 2-1:1.0: bind() failure
[  592.492193][T11419] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.499399][T11419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.569350][T11419] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.576581][T11419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.654961][ T5938] usb 2-1: USB disconnect, device number 76
[  592.996538][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  592.996557][   T30] audit: type=1326 audit(1755945116.386:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b85ba7 code=0x7ffc0000
[  594.130234][   T30] audit: type=1326 audit(1755945116.386:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1b2ade9 code=0x7ffc0000
[  595.027000][T13903] lo speed is unknown, defaulting to 1000
[  595.042130][   T30] audit: type=1326 audit(1755945116.386:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b85ba7 code=0x7ffc0000
[  595.064095][   T30] audit: type=1326 audit(1755945116.386:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1b2ade9 code=0x7ffc0000
[  595.086105][ T5915] usb 7-1: string descriptor 0 read error: -71
[  595.121147][   T30] audit: type=1326 audit(1755945116.386:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b85ba7 code=0x7ffc0000
[  595.169797][T13682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.178179][ T5915] usb 7-1: USB disconnect, device number 52
[  595.237797][   T30] audit: type=1326 audit(1755945116.386:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1b2ade9 code=0x7ffc0000
[  595.265214][T13913] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1972'.
[  595.310094][   T30] audit: type=1326 audit(1755945116.396:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  595.345006][   T30] audit: type=1326 audit(1755945116.396:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b85ba7 code=0x7ffc0000
[  595.452253][   T30] audit: type=1326 audit(1755945116.396:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54f1b2ade9 code=0x7ffc0000
[  595.496805][ T9637] udevd[9637]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.555993][   T30] audit: type=1326 audit(1755945116.396:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13904 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b85ba7 code=0x7ffc0000
[  596.005989][T13930] cramfs: Unknown parameter 'discard'
[  598.306221][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1980'.
[  598.455424][ T5938] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  599.248539][T13682] veth0_vlan: entered promiscuous mode
[  599.289349][T13682] veth1_vlan: entered promiscuous mode
[  599.396440][T13682] veth0_macvtap: entered promiscuous mode
[  599.409856][ T5938] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16
[  599.519587][T13967] overlayfs: missing 'lowerdir'
[  599.563999][ T5938] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  599.919261][ T5938] usb 2-1: config 1 interface 0 has no altsetting 0
[  599.944442][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  599.953893][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.969245][T13682] veth1_macvtap: entered promiscuous mode
[  599.984800][ T5938] usb 2-1: Product: syz
[  600.012786][ T5938] usb 2-1: Manufacturer: Ї
[  600.047454][ T5938] usb 2-1: SerialNumber: syz
[  600.074788][T13682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.112456][T13682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.046187][T13682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.163143][T13682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.252144][T13682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.355669][T13682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  601.542374][ T5938] usb 2-1: can't set config #1, error -71
[  601.554481][ T5938] usb 2-1: USB disconnect, device number 77
[  602.098629][ T6005] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  602.237106][T11419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.258254][ T6005] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  602.275959][T11419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.277337][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161
[  602.332518][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.343085][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.359511][ T6005] usb 2-1: Product: syz
[  602.366164][ T6005] usb 2-1: Manufacturer: syz
[  602.381305][ T6005] usb 2-1: SerialNumber: syz
[  602.393401][ T6005] usb 2-1: config 0 descriptor??
[  602.424445][ T6005] usb 2-1: interface 1 not found
[  602.536096][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'.
[  602.547543][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'.
[  602.574992][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1989'.
[  602.603655][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1989'.
[  602.628799][ T5852] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  602.876993][ T6005] usb 2-1: USB disconnect, device number 78
[  602.938835][ T5852] usb 7-1: device descriptor read/64, error -71
[  603.177596][T14002] lo speed is unknown, defaulting to 1000
[  603.868455][ T5852] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  604.236278][ T5852] usb 7-1: device descriptor read/64, error -71
[  604.359118][ T5852] usb usb7-port1: attempt power cycle
[  604.928395][ T5852] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  605.038706][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'.
[  605.063821][T14015] netlink: 'syz.1.1995': attribute type 20 has an invalid length.
[  605.080015][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'.
[  605.095359][ T5852] usb 7-1: device descriptor read/8, error -71
[  605.246647][T14015] netlink: 'syz.1.1995': attribute type 20 has an invalid length.
[  605.338310][T14023] smc: net device bond0 applied user defined pnetid SYZ2
[  605.464215][T14023] smc: net device bond0 erased user defined pnetid SYZ2
[  605.513229][ T5852] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  605.616622][ T5852] usb 7-1: device descriptor read/8, error -71
[  605.732046][ T5852] usb usb7-port1: unable to enumerate USB device
[  605.834719][T14020] 9pnet_fd: Insufficient options for proto=fd
[  607.044093][T14045] 9p: Unknown uid 00000000004294967295
[  607.134265][T14050] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2008'.
[  607.146035][T14050] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2008'.
[  607.156505][T14050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.171433][ T5852] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  607.386331][ T5852] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  607.512151][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.520865][ T5852] usb 7-1: Product: syz
[  607.525621][ T5852] usb 7-1: Manufacturer: syz
[  607.530542][ T5852] usb 7-1: SerialNumber: syz
[  607.539295][ T5852] usb 7-1: config 0 descriptor??
[  607.765323][ T5852] usb 7-1: ignoring: probably an ADSL modem
[  608.323144][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'.
[  608.423611][ T5852] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  608.464289][ T5852] usb 7-1: USB disconnect, device number 57
[  608.475690][T14083] netlink: 'syz.4.2016': attribute type 27 has an invalid length.
[  608.485080][T14083] netlink: 'syz.4.2016': attribute type 3 has an invalid length.
[  608.493151][T14083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'.
[  608.706263][T14070] Bluetooth: hci0: Opcode 0x080f failed: -4
[  608.821753][T14088] binder: BINDER_SET_CONTEXT_MGR already set
[  608.833913][T14088] binder: 14086:14088 ioctl 4018620d 200000000040 returned -16
[  608.921469][ T5915] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  608.963379][ T5915] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  609.126398][T14089] fido_id[14089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  609.268924][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2019'.
[  609.403426][T14103] 9pnet_fd: Insufficient options for proto=fd
[  609.447225][T14094] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  609.447261][T14094] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  609.724149][T14109] bridge0: port 2(gretap0) entered blocking state
[  609.784142][T14109] bridge0: port 2(gretap0) entered disabled state
[  609.829899][T14109] gretap0: entered allmulticast mode
[  609.866008][T14109] gretap0: entered promiscuous mode
[  609.886976][T14109] bridge0: port 2(gretap0) entered blocking state
[  609.894171][T14109] bridge0: port 2(gretap0) entered forwarding state
[  609.940038][T14112] gretap0: left allmulticast mode
[  609.947985][T14112] gretap0: left promiscuous mode
[  609.955561][T14112] bridge0: port 2(gretap0) entered disabled state
[  610.703258][T14126] netlink: 'syz.4.2027': attribute type 32 has an invalid length.
[  611.414939][T14133] netlink: 'syz.4.2030': attribute type 17 has an invalid length.
[  611.822205][T14147] tmpfs: Unknown parameter '6�1�'$����9F_���^��.֩��kxg��9��TZb�3�;>qM�h�*b�����-Kr>��`MpN�Q��F\~����W���/�Ʌ����s����xG���I"HT�n�ԯ/gxb;��e`+���Y�X��^�oӳ���|�����ȅ�%\�B>9GwT#�gfb��c?��">�ZoӮ��RJVU|~�:i�jѧ$^2��U�H�/�?'
[  611.847216][    C1] vkms_vblank_simulate: vblank timer overrun
[  611.867308][T14147] netlink: 'syz.1.2032': attribute type 11 has an invalid length.
[  611.875269][T14147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2032'.
[  616.634599][T14154] netlink: 'syz.7.2036': attribute type 1 has an invalid length.
[  617.621002][T14173] lo speed is unknown, defaulting to 1000
[  617.629368][ T5852] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  617.786889][ T5852] usb 2-1: Using ep0 maxpacket: 16
[  617.797084][ T5852] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  617.805546][ T5852] usb 2-1: config 0 has no interface number 0
[  617.826752][ T5852] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.838348][ T5938] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  617.892096][ T5852] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.918111][ T5852] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  617.936819][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.987163][ T5852] usb 2-1: config 0 descriptor??
[  618.036923][ T5938] usb 8-1: Using ep0 maxpacket: 32
[  618.046262][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.064504][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  618.074711][ T5938] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  618.084203][ T5938] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.128343][ T5938] usb 8-1: config 0 descriptor??
[  618.189775][ T5938] hub 8-1:0.0: USB hub found
[  618.405150][ T5938] hub 8-1:0.0: 1 port detected
[  618.647808][ T5852] uclogic 0003:28BD:0071.001F: failed retrieving string descriptor #100: -71
[  618.679537][ T5852] uclogic 0003:28BD:0071.001F: failed retrieving pen parameters: -71
[  618.716746][ T5852] uclogic 0003:28BD:0071.001F: pen probing failed: -71
[  618.724699][ T5852] uclogic 0003:28BD:0071.001F: failed probing parameters: -71
[  618.737181][ T5852] uclogic 0003:28BD:0071.001F: probe with driver uclogic failed with error -71
[  618.751325][ T5852] usb 2-1: USB disconnect, device number 79
[  618.821344][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.849195][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.950124][T14185] i2c i2c-0: Invalid block write size 34
[  618.956440][T14185] netlink: 'syz.6.2047': attribute type 1 has an invalid length.
[  619.058525][T14185] 8021q: adding VLAN 0 to HW filter on device bond2
[  619.084472][ T5852] hub 8-1:0.0: activate --> -90
[  619.260443][ T5851] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  619.302421][ T5852] usb 8-1-port1: config error
[  619.314928][ T5851] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  619.372629][ T5851] usb 1-1: USB disconnect, device number 70
[  619.506411][ T5852] usb 8-1-port1: cannot disable (err = -71)
[  619.509681][ T6005] usb 8-1: USB disconnect, device number 2
[  619.519854][ T5852] usb 8-1-port1: attempt power cycle
[  620.014788][T14204] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2053'.
[  620.365935][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  620.365952][   T30] audit: type=1326 audit(1755945143.789:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.463679][   T30] audit: type=1326 audit(1755945143.789:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.485261][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.586718][   T30] audit: type=1326 audit(1755945143.789:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54f1b8d550 code=0x7ffc0000
[  620.613329][T14221] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  620.647531][T14221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  620.693722][   T30] audit: type=1326 audit(1755945143.799:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.715777][   T30] audit: type=1326 audit(1755945143.799:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.748711][   T30] audit: type=1326 audit(1755945143.799:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.794904][   T30] audit: type=1326 audit(1755945143.799:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.845608][   T30] audit: type=1326 audit(1755945143.799:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.846491][ T6005] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  620.867202][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.877787][   T30] audit: type=1326 audit(1755945143.799:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  620.910736][   T30] audit: type=1326 audit(1755945143.799:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14216 comm="syz.4.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f1b8ebe9 code=0x7ffc0000
[  621.074428][T14236] xt_TCPMSS: Only works on TCP SYN packets
[  621.218410][ T6005] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  621.233288][ T6005] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  621.262102][ T6005] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  621.280165][ T6005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  621.290774][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  621.302969][ T6005] usb 2-1: SerialNumber: syz
[  621.532504][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.569230][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.615820][ T6005] rndis_host 2-1:253.0: RNDIS init failed, -71
[  621.634771][ T6005] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71
[  621.654943][ T6005] usb 2-1: USB disconnect, device number 80
[  621.696497][ T5852] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  621.859353][ T5852] usb 8-1: Using ep0 maxpacket: 8
[  621.873424][ T5852] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.892819][ T5852] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  621.916210][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.932608][ T5852] usb 8-1: config 0 descriptor??
[  622.180702][T14245] netlink: 'syz.7.2064': attribute type 1 has an invalid length.
[  622.192297][T14245] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2064'.
[  622.204101][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.240578][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.252488][ T5852] usb 8-1: USB disconnect, device number 7
[  622.388488][ T6005] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  622.588313][ T6005] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  622.657166][ T5992] usb 7-1: new full-speed USB device number 58 using dummy_hcd
[  622.735768][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  622.838591][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  622.859616][ T6005] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  622.881950][ T6005] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  622.894789][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.903398][ T5992] usb 7-1: device descriptor read/64, error -71
[  622.938027][ T6005] usb 2-1: config 0 descriptor??
[  622.947393][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.952734][T14261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  622.967384][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.166296][ T5992] usb 7-1: new full-speed USB device number 59 using dummy_hcd
[  623.246376][ T5852] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  623.326235][ T5992] usb 7-1: device descriptor read/64, error -71
[  623.400961][ T6005] usbhid 2-1:0.0: can't add hid device: -71
[  623.408387][ T5852] usb 8-1: Using ep0 maxpacket: 32
[  623.414943][ T6005] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  623.429512][ T5852] usb 8-1: config 0 has an invalid interface number: 108 but max is 0
[  623.444573][ T6005] usb 2-1: USB disconnect, device number 81
[  623.450727][ T5852] usb 8-1: config 0 has no interface number 0
[  623.466728][ T5992] usb usb7-port1: attempt power cycle
[  623.468776][ T5852] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96
[  623.491880][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.506509][ T5852] usb 8-1: Product: syz
[  623.516349][ T5852] usb 8-1: Manufacturer: syz
[  623.526250][ T5852] usb 8-1: SerialNumber: syz
[  623.539657][ T5852] usb 8-1: config 0 descriptor??
[  623.563834][ T5852] powermate 8-1:0.108: probe with driver powermate failed with error -5
[  623.711234][T14286] netlink: 'syz.4.2075': attribute type 10 has an invalid length.
[  623.721671][T14286] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  623.732324][ T2990] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  623.743756][T14286] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  623.826236][ T5992] usb 7-1: new full-speed USB device number 60 using dummy_hcd
[  623.857472][ T6005] usb 8-1: USB disconnect, device number 8
[  623.887613][ T5992] usb 7-1: device descriptor read/8, error -71
[  623.966199][T14289] xt_l2tp: invalid flags combination: 8
[  624.126459][ T5992] usb 7-1: new full-speed USB device number 61 using dummy_hcd
[  624.156842][ T5992] usb 7-1: device descriptor read/8, error -71
[  624.283617][ T5992] usb usb7-port1: unable to enumerate USB device
[  624.333846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  624.534451][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2079'.
[  624.592649][T14301] netlink: 'syz.4.2080': attribute type 11 has an invalid length.
[  624.601329][T14301] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2080'.
[  624.884063][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2082'.
[  624.970056][T14300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.467452][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2084'.
[  628.483402][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.493612][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.545651][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.579926][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.593365][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.614240][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.662279][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.678854][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.688969][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.706081][T14322] sock: sock_set_timeout: `syz.7.2086' (pid 14322) tries to set negative timeout
[  628.795916][ T5852] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  628.813036][T14340] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  628.955629][ T5852] usb 7-1: Using ep0 maxpacket: 8
[  628.966944][ T5852] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  628.990671][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.013348][ T5852] usb 7-1: Product: syz
[  629.022171][ T5852] usb 7-1: Manufacturer: syz
[  629.035604][ T5852] usb 7-1: SerialNumber: syz
[  629.073516][ T5852] usb 7-1: config 0 descriptor??
[  629.090354][ T5852] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  629.101020][ T5852] dvb-usb: bulk message failed: -22 (2/0)
[  629.110739][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  629.120892][T14331] wg2: entered promiscuous mode
[  629.129421][T14331] wg2: entered allmulticast mode
[  629.134958][T14344] program syz.0.2093 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  629.151813][ T5852] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  629.163774][ T5852] usb 7-1: media controller created
[  630.014813][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  630.060461][ T5852] dvb-usb: bulk message failed: -22 (1/0)
[  630.075693][ T5852] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  630.106491][ T5852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51
[  630.365333][ T5852] dvb-usb: schedule remote query interval to 50 msecs.
[  630.372256][ T5852] dvb-usb: bulk message failed: -22 (2/0)
[  630.381361][T14363] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  630.391390][ T5852] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  630.426930][ T5851] dvb-usb: bulk message failed: -22 (1/0)
[  630.437541][T14362] overlayfs: overlapping lowerdir path
[  630.463379][ T5852] usb 7-1: USB disconnect, device number 62
[  630.477801][ T5851] dvb-usb: error while querying for an remote control event.
[  630.723392][T14368] sock: sock_timestamping_bind_phc: sock not bind to device
[  631.188314][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[  631.196758][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  631.335614][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  631.341406][   T10] dvb-usb: error while querying for an remote control event.
[  631.405794][ T5851] dvb-usb: bulk message failed: -22 (1/0)
[  631.415685][ T5851] dvb-usb: error while querying for an remote control event.
[  631.526227][ T5938] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  631.570614][T14378] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  631.577496][ T5852] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  632.335397][ T5938] usb 1-1: Using ep0 maxpacket: 32
[  632.372534][ T5938] usb 1-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config
[  632.403716][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  632.441092][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  632.462980][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.476291][ T5938] usb 1-1: Product: syz
[  632.480510][ T5938] usb 1-1: Manufacturer: syz
[  632.494126][ T5938] usb 1-1: SerialNumber: syz
[  632.518583][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2106'.
[  632.555413][ T5938] usb 1-1: config 0 descriptor??
[  632.667890][T14394] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  632.706724][T14394] bond3: (slave vcan1): Error -95 calling set_mac_address
[  632.715677][T14406] netlink: 'syz.4.2107': attribute type 10 has an invalid length.
[  632.750664][T14406] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  632.762962][T14406] team0: Port device wlan1 added
[  633.058086][T14410] Smack: duplicate mount options
[  633.076483][T14410] netlink: 780 bytes leftover after parsing attributes in process `syz.6.2110'.
[  635.260805][ T5852] usb 1-1: USB disconnect, device number 71
[  635.770000][T14433] tipc: Started in network mode
[  636.354447][T14433] tipc: Node identity b2ebea34d96c, cluster identity 4711
[  636.386634][T14433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.621119][T14436] syzkaller0: entered promiscuous mode
[  636.664321][T14436] syzkaller0: entered allmulticast mode
[  637.656724][ T5938] tipc: Node number set to 1804069428
[  637.886846][T14454] program syz.6.2119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  638.292070][T14431] tipc: Resetting bearer <eth:syzkaller0>
[  638.316149][ T5851] usb 7-1: new full-speed USB device number 63 using dummy_hcd
[  638.384979][ T5938] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  638.516198][ T5851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  638.530759][T14431] tipc: Disabling bearer <eth:syzkaller0>
[  638.535101][ T5851] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  638.560701][ T5851] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  638.571012][ T5938] usb 2-1: Using ep0 maxpacket: 16
[  638.581950][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.595817][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  638.605885][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.614084][ T5851] usb 7-1: Product: syz
[  638.619163][ T5938] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  638.629607][ T5851] usb 7-1: Manufacturer: syz
[  638.634507][ T5851] usb 7-1: SerialNumber: syz
[  638.645777][ T5938] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  638.717369][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  638.784081][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  638.803524][ T5938] usb 2-1: SerialNumber: syz
[  638.818486][ T5938] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  638.896711][ T5851] usb 7-1: 0:2 : does not exist
[  638.938298][ T5851] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  638.987599][ T5851] usb 7-1: USB disconnect, device number 63
[  639.023163][ T5915] usb 2-1: USB disconnect, device number 82
[  639.114744][ T9757] udevd[9757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  639.154519][ T6005] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  639.328044][ T6005] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.340166][ T6005] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  639.374405][ T6005] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  639.387704][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.421376][ T6005] usb 1-1: config 0 descriptor??
[  639.439544][ T6005] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  639.452073][ T6005] dvb-usb: bulk message failed: -22 (3/0)
[  639.477843][ T6005] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  639.490527][T14484] lo: entered allmulticast mode
[  639.499189][ T6005] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  639.516454][T14483] lo: left allmulticast mode
[  639.533219][ T6005] usb 1-1: media controller created
[  639.566227][ T6005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  639.597708][ T6005] dvb-usb: bulk message failed: -22 (6/0)
[  639.607644][ T6005] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  639.738045][T14487] smc: net device bond0 applied user defined pnetid SYZ2
[  639.752683][T14487] smc: net device bond0 erased user defined pnetid SYZ2
[  640.079782][ T6005] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input52
[  640.165886][ T6005] dvb-usb: schedule remote query interval to 150 msecs.
[  640.172925][ T6005] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  640.324779][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  640.330995][ T5915] dvb-usb: error while querying for an remote control event.
[  640.554874][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  640.602049][ T5915] dvb-usb: error while querying for an remote control event.
[  640.874385][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  640.895180][ T5915] dvb-usb: error while querying for an remote control event.
[  641.174189][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  641.198087][ T5915] dvb-usb: error while querying for an remote control event.
[  641.230235][ T5852] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  641.384208][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  641.395809][ T5915] dvb-usb: error while querying for an remote control event.
[  641.405903][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.439201][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.605915][ T5852] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  641.615586][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.625951][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  641.643383][ T5852] usb 7-1: config 0 descriptor??
[  641.673971][ T5915] dvb-usb: error while querying for an remote control event.
[  641.854117][ T5915] dvb-usb: bulk message failed: -22 (1/0)
[  641.860304][ T5915] dvb-usb: error while querying for an remote control event.
[  641.910011][ T5851] usb 1-1: USB disconnect, device number 72
[  642.020035][ T5851] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  642.115574][T14519] overlayfs: failed to clone upperpath
[  642.116987][ T5852] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0
[  642.393099][ T5852] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  642.559064][T14523] overlayfs: failed to clone upperpath
[  642.595983][ T5852] cp2112 0003:10C4:EA90.0020: error requesting version
[  642.645112][ T5852] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -5
[  642.843990][ T5915] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  643.998991][T14504] cgroup: Invalid name
[  644.234275][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  644.242143][ T5915] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  644.263563][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  644.273074][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  644.797027][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  645.055429][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.071103][ T5915] usb 2-1: Product: Б
[  645.075385][ T5915] usb 2-1: Manufacturer: ࡃ
[  645.080129][ T5915] usb 2-1: SerialNumber:  
[  645.198426][ T6005] usb 7-1: USB disconnect, device number 64
[  645.368298][ T5915] usb 2-1: 0:2 : does not exist
[  645.478830][ T5915] usb 2-1: USB disconnect, device number 83
[  645.571591][ T9757] udevd[9757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  645.647174][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'.
[  645.664443][ T5852] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  645.833792][ T5852] usb 8-1: Using ep0 maxpacket: 8
[  645.845777][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2150'.
[  645.884262][ T5852] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  645.931302][ T5852] usb 8-1: config 0 interface 0 has no altsetting 0
[  645.981649][ T5852] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  646.013061][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.110057][ T5852] usb 8-1: Product: syz
[  646.133228][ T5852] usb 8-1: Manufacturer: syz
[  646.145581][ T5852] usb 8-1: SerialNumber: syz
[  646.644483][ T5852] usb 8-1: config 0 descriptor??
[  646.670704][ T5852] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found
[  646.792750][T14577] netlink: 'syz.6.2155': attribute type 5 has an invalid length.
[  646.982639][ T5852] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected
[  646.994772][ T5852] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  647.245133][T14548] 9pnet_fd: Insufficient options for proto=fd
[  648.059673][ T6005] usb 8-1: USB disconnect, device number 9
[  648.159601][T14594] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  648.323483][   T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  648.743914][T14603] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2162'.
[  648.763511][T14604] netlink: 'syz.0.2163': attribute type 5 has an invalid length.
[  648.799536][T14603] 
[  648.802042][T14603] ======================================================
[  648.809161][T14603] WARNING: possible circular locking dependency detected
[  648.816748][T14603] 6.16.0-syzkaller #0 Not tainted
[  648.822114][T14603] ------------------------------------------------------
[  648.829352][T14603] syz.6.2162/14603 is trying to acquire lock:
[  648.836267][T14603] ffff888035e44e00 (team->team_lock_key#7){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[  648.847281][T14603] 
[  648.847281][T14603] but task is already holding lock:
[  648.855163][T14603] ffff88803310cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  648.866323][T14603] 
[  648.866323][T14603] which lock already depends on the new lock.
[  648.866323][T14603] 
[  648.877358][T14603] 
[  648.877358][T14603] the existing dependency chain (in reverse order) is:
[  648.886372][T14603] 
[  648.886372][T14603] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  648.894830][T14603]        lock_acquire+0x120/0x360
[  648.899879][T14603]        __mutex_lock+0x182/0xe80
[  648.905270][T14603]        dev_set_mtu+0x10e/0x260
[  648.910232][T14603]        team_add_slave+0x8b8/0x2840
[  648.915612][T14603]        do_set_master+0x530/0x6d0
[  648.925901][T14603]        do_setlink+0xcf0/0x41c0
[  648.931924][T14603]        rtnl_newlink+0x160b/0x1c70
[  648.937519][T14603]        rtnetlink_rcv_msg+0x7cc/0xb70
[  648.943264][T14603]        netlink_rcv_skb+0x205/0x470
[  648.948573][T14603]        netlink_unicast+0x75c/0x8e0
[  648.954102][T14603]        netlink_sendmsg+0x805/0xb30
[  648.960358][T14603]        __sock_sendmsg+0x21c/0x270
[  648.965759][T14603]        ____sys_sendmsg+0x505/0x830
[  648.971290][T14603]        ___sys_sendmsg+0x21f/0x2a0
[  648.976896][T14603]        __x64_sys_sendmsg+0x19b/0x260
[  648.982766][T14603]        do_syscall_64+0xfa/0x3b0
[  648.987940][T14603]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.995905][T14603] 
[  648.995905][T14603] -> #0 (team->team_lock_key#7){+.+.}-{4:4}:
[  649.005237][T14603]        validate_chain+0xb9b/0x2140
[  649.010622][T14603]        __lock_acquire+0xab9/0xd20
[  649.016239][T14603]        lock_acquire+0x120/0x360
[  649.021376][T14603]        __mutex_lock+0x182/0xe80
[  649.026893][T14603]        team_device_event+0x544/0xa20
[  649.033309][T14603]        notifier_call_chain+0x1b3/0x3e0
[  649.041039][T14603]        netif_state_change+0x284/0x3a0
[  649.047218][T14603]        do_setlink+0x35de/0x41c0
[  649.052592][T14603]        rtnl_newlink+0x149f/0x1c70
[  649.057828][T14603]        rtnetlink_rcv_msg+0x7cc/0xb70
[  649.063423][T14603]        netlink_rcv_skb+0x205/0x470
[  649.069007][T14603]        netlink_unicast+0x75c/0x8e0
[  649.074588][T14603]        netlink_sendmsg+0x805/0xb30
[  649.080460][T14603]        __sock_sendmsg+0x21c/0x270
[  649.086108][T14603]        ____sys_sendmsg+0x505/0x830
[  649.092922][T14603]        ___sys_sendmsg+0x21f/0x2a0
[  649.099061][T14603]        __x64_sys_sendmsg+0x19b/0x260
[  649.104745][T14603]        do_syscall_64+0xfa/0x3b0
[  649.110068][T14603]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.118776][T14603] 
[  649.118776][T14603] other info that might help us debug this:
[  649.118776][T14603] 
[  649.130433][T14603]  Possible unsafe locking scenario:
[  649.130433][T14603] 
[  649.138310][T14603]        CPU0                    CPU1
[  649.144145][T14603]        ----                    ----
[  649.150061][T14603]   lock(&dev_instance_lock_key#3);
[  649.155325][T14603]                                lock(team->team_lock_key#7);
[  649.162939][T14603]                                lock(&dev_instance_lock_key#3);
[  649.171155][T14603]   lock(team->team_lock_key#7);
[  649.176386][T14603] 
[  649.176386][T14603]  *** DEADLOCK ***
[  649.176386][T14603] 
[  649.186275][T14603] 2 locks held by syz.6.2162/14603:
[  649.192110][T14603]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  649.202031][T14603]  #1: ffff88803310cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  649.213234][T14603] 
[  649.213234][T14603] stack backtrace:
[  649.221258][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.6.2162 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  649.221311][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  649.221324][T14603] Call Trace:
[  649.221338][T14603]  <TASK>
[  649.221349][T14603]  dump_stack_lvl+0x189/0x250
[  649.221378][T14603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  649.221397][T14603]  ? __pfx__printk+0x10/0x10
[  649.221421][T14603]  ? print_lock_name+0xde/0x100
[  649.221443][T14603]  print_circular_bug+0x2ee/0x310
[  649.221467][T14603]  check_noncircular+0x134/0x160
[  649.221490][T14603]  validate_chain+0xb9b/0x2140
[  649.221511][T14603]  ? trace_sched_exit_tp+0x38/0x120
[  649.221545][T14603]  __lock_acquire+0xab9/0xd20
[  649.221563][T14603]  ? team_device_event+0x544/0xa20
[  649.221579][T14603]  lock_acquire+0x120/0x360
[  649.221595][T14603]  ? team_device_event+0x544/0xa20
[  649.221616][T14603]  __mutex_lock+0x182/0xe80
[  649.221637][T14603]  ? team_device_event+0x544/0xa20
[  649.221654][T14603]  ? irqentry_exit+0x74/0x90
[  649.221672][T14603]  ? lockdep_hardirqs_on+0x9c/0x150
[  649.221689][T14603]  ? team_device_event+0x544/0xa20
[  649.221706][T14603]  ? __pfx___mutex_lock+0x10/0x10
[  649.221734][T14603]  team_device_event+0x544/0xa20
[  649.221752][T14603]  notifier_call_chain+0x1b3/0x3e0
[  649.221777][T14603]  netif_state_change+0x284/0x3a0
[  649.221802][T14603]  ? __pfx_netif_state_change+0x10/0x10
[  649.221825][T14603]  ? netif_change_flags+0xe8/0x1a0
[  649.221852][T14603]  do_setlink+0x35de/0x41c0
[  649.221879][T14603]  ? finish_task_switch+0x266/0x950
[  649.221907][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222047][T14603]  ? __pfx_do_setlink+0x10/0x10
[  649.222076][T14603]  ? trace_sched_exit_tp+0x38/0x120
[  649.222103][T14603]  ? __schedule+0x16c8/0x4c90
[  649.222120][T14603]  ? lockdep_hardirqs_on+0x9c/0x150
[  649.222144][T14603]  ? preempt_schedule_irq+0xb5/0x150
[  649.222162][T14603]  ? __pfx___schedule+0x10/0x10
[  649.222175][T14603]  ? __mutex_trylock_common+0x153/0x260
[  649.222197][T14603]  ? __pfx___mutex_trylock_common+0x10/0x10
[  649.222221][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222238][T14603]  ? trace_irq_disable+0x37/0x110
[  649.222262][T14603]  ? preempt_schedule_irq+0xde/0x150
[  649.222277][T14603]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  649.222295][T14603]  ? irqentry_exit+0x74/0x90
[  649.222311][T14603]  ? lockdep_hardirqs_on+0x9c/0x150
[  649.222334][T14603]  rtnl_newlink+0x149f/0x1c70
[  649.222357][T14603]  ? finish_task_switch+0x18b/0x950
[  649.222385][T14603]  ? __pfx_rtnl_newlink+0x10/0x10
[  649.222405][T14603]  ? lockdep_hardirqs_on+0x9c/0x150
[  649.222424][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222441][T14603]  ? trace_sched_exit_tp+0x38/0x120
[  649.222464][T14603]  ? __schedule+0x16c8/0x4c90
[  649.222484][T14603]  ? __pfx_preempt_schedule+0x10/0x10
[  649.222500][T14603]  ? preempt_schedule_irq+0xb5/0x150
[  649.222517][T14603]  ? __pfx___schedule+0x10/0x10
[  649.222534][T14603]  ? __local_bh_enable_ip+0x13e/0x1c0
[  649.222555][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222571][T14603]  ? trace_irq_disable+0x37/0x110
[  649.222593][T14603]  ? preempt_schedule_irq+0xde/0x150
[  649.222611][T14603]  ? __lock_acquire+0xab9/0xd20
[  649.222635][T14603]  ? __pfx_rtnl_newlink+0x10/0x10
[  649.222655][T14603]  rtnetlink_rcv_msg+0x7cc/0xb70
[  649.222678][T14603]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  649.222698][T14603]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  649.222722][T14603]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  649.222750][T14603]  netlink_rcv_skb+0x205/0x470
[  649.222771][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222786][T14603]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  649.222805][T14603]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  649.222832][T14603]  ? netlink_deliver_tap+0x2e/0x1b0
[  649.222857][T14603]  netlink_unicast+0x75c/0x8e0
[  649.222890][T14603]  netlink_sendmsg+0x805/0xb30
[  649.222917][T14603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  649.222940][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.222958][T14603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  649.222974][T14603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  649.223055][T14603]  __sock_sendmsg+0x21c/0x270
[  649.223076][T14603]  ____sys_sendmsg+0x505/0x830
[  649.223102][T14603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  649.223129][T14603]  ? import_iovec+0x74/0xa0
[  649.223150][T14603]  ___sys_sendmsg+0x21f/0x2a0
[  649.223174][T14603]  ? __pfx____sys_sendmsg+0x10/0x10
[  649.223222][T14603]  ? __fget_files+0x2a/0x420
[  649.223240][T14603]  ? __fget_files+0x3a0/0x420
[  649.223262][T14603]  __x64_sys_sendmsg+0x19b/0x260
[  649.223288][T14603]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  649.223317][T14603]  ? rcu_is_watching+0x15/0xb0
[  649.223336][T14603]  ? do_syscall_64+0xbe/0x3b0
[  649.223356][T14603]  do_syscall_64+0xfa/0x3b0
[  649.223375][T14603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.223392][T14603]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  649.223411][T14603]  ? clear_bhb_loop+0x60/0xb0
[  649.223430][T14603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.223446][T14603] RIP: 0033:0x7f232018ebe9
[  649.223463][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  649.223479][T14603] RSP: 002b:00007f2320f2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  649.223498][T14603] RAX: ffffffffffffffda RBX: 00007f23203b6180 RCX: 00007f232018ebe9
[  649.223511][T14603] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007
[  649.223522][T14603] RBP: 00007f2320211e19 R08: 0000000000000000 R09: 0000000000000000
[  649.223533][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  649.223543][T14603] R13: 00007f23203b6218 R14: 00007f23203b6180 R15: 00007fff48fdb378
[  649.223562][T14603]  </TASK>
[  649.873711][   T24] usb 2-1: Using ep0 maxpacket: 16
[  649.882483][   T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  649.894200][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.905686][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  649.922025][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  649.934677][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.945305][   T24] usb 2-1: Product: syz
[  649.950039][   T24] usb 2-1: Manufacturer: syz
[  649.955004][   T24] usb 2-1: SerialNumber: syz
[  650.486121][   T24] usb 2-1: 0:2 : does not exist
[  650.686728][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2159'.
[  650.696092][T14591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.123206][   T24] usb 2-1: USB disconnect, device number 84
[  651.140728][ T9757] udevd[9757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory