last executing test programs:

8.772782338s ago: executing program 0 (id=59):
syz_usb_connect(0x2, 0x6b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f9092407"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @empty}, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0x4c, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0x170}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xff, 0x1, 0x8}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x8a, 0x1, 0x10, 0x6}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x8}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}, {0x7a, &(0x7f0000000180)=@string={0x7a, 0x3, "f299c9bbbeafa1db742fc6824c1590a830e2241b0e23cd051b054214be736fb757f89e8efc794d4a96f0ed6951945f1fa159d15cb444432feb844c2b05d8675603ad770c2583f5ce5b54ab6af575df4acc3506d0f1b2ac7e74bd8dcf8a1d161884bbcedc4cc4946490f762c0c5a12d4472a67a2366a9a972"}}, {0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="04032211176a474c573174595e310dfe81d19e9706f0610bbe23f44b3798c42f1120365ad011960b8464f5affb4a865ba92f4c2811dc71f307e8366e562123047da6a1469860554444e966e72d2b7e6c9d7d9c25c30567ba06399620b15763b6ad9c"]}, {0xd5, &(0x7f0000000340)=@string={0xd5, 0x3, "407c218916eb524d4f0b5780a53a727c2b0f34ac974ee7a36d4065db644adf97fc723da1b7c99e57e86651ec79c81cea107dbb137519d57240324b342eb3ef5f3ee2eeecf3aa2ef2643424af9251d6e8db52aab2f1e4f07cc0f68decf1b76e3a462e6ac547cab8125cd7e7ded7ce4eea57c12371722efb9d7b127f0f0cfe60a92020bd42e9f22890f52c5c522feaefc804a8922243dff542fe56752682c150e10598a37687253a240c36c73736017c60b2b542965d3d5d1b8ab6a44706e74eb609431b249b39edcde002dc937922bbd4bcd461"}}]})

8.412871568s ago: executing program 2 (id=62):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x8, 0x8, 0x30314247, 0x1, 0x4, [{0x7, 0x8000}, {0x30000, 0x570}, {0x9, 0x8}, {0x400007, 0x9}, {0x5, 0x80000005}, {0x2, 0x400a}, {}, {0xffffffd5, 0x36b8}], 0x2b, 0x2, 0x0, 0x2, 0x4}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fdf0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

7.892445298s ago: executing program 3 (id=65):
madvise(&(0x7f0000dad000/0x4000)=nil, 0x4000, 0xa)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

6.910498084s ago: executing program 0 (id=68):
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="737461636b203a007e1c2d901405008f51686a1b04e567ccd50b2dc767809e2f197b5315feba4faea17a2cde2d8f4b4e866793e4feae2f90d85e4f868184ab3000000046d8eec8d1b4510514e7a963283044375bcc42e1599905aeba00c4083184d608b0f09a98853bff5571393aafa283347d02b9b1857f78e6278c893827656ade3b2b0a31d415f951ac77cf539a90f32ded6b74ed100700f19499e13f10dac7ed5b00"/179], 0xb3)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x3, 0xc, 0xe, 0x1})
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl(r5, 0xe, &(0x7f0000000040)="45349a2930879d0d20bba5e5905e80c44ebcdae8a87cdb55e295da37bcc7f2f831f3da0e2f97bd87194267f132ac627e90a8471d8529500333f8732ebd9feef3f4353dd657837c61254c645fc27555f906a1c5795dc5f3983be9b7d08b796feaf7e2897adc6326c480812d9b15dc367ed7f31d4011ab9ba08dc32bd6c6c7872fcf47df51418c662ed560693128086c17e3d3b73b5f747d39de5f1c3e1b079389b4f4225599687d819fce10062cc7737d1c75b17012d93dd5c035aa8f36552b1526ffcb83a7f1de1709")
writev(r1, &(0x7f0000000680)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000440)="ff22adc677dca7dee3647ec58d139c49526fd028ba26eaef2e7380b50a9f8725116e08613c194a34ebcd122aae144ca472ff3e08a4c3024cefb9296ade10cc77f3ee06a229a85674a631190d0954151a10687ede1f67cd86ff9b4e352d9328745cfc28310ec4f9a63a7531cea5d78d72de388697a59b1fc196df0fbe3d28f80c93d069ace980a42e4a9ed2cadcc6d13a4572", 0x92}, {&(0x7f0000000140)="624321abcb8b808a017949c9f6", 0xd}, {&(0x7f0000000240)}, {&(0x7f0000000580)="3855580b37ce31bcc576a8a265fe7bbc43ec5fd711921808f468e3df29c9f9e362df406a318c2b2941518800664378fdb2170d4861a1b83f2b62fab3afd53bcacecb5edf61d465706879be6cbe4b5548", 0x50}, {&(0x7f0000000600)="ee73a623fadf5da0d7f97ba2f2c7bed5ddf1d1a1d345873c93844becb14cc4696d3fdfc755d04ed072208328c3464e4514d2f44f656de0d71b70c3d24bd7fe60d7b18fcf23910e418b", 0x49}], 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r9, 0x0, 0xc004004)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r8}, 0x0, 0x0)

6.59037989s ago: executing program 3 (id=69):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000280)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000340)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5.739814024s ago: executing program 4 (id=70):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async, rerun: 64)
r1 = socket$inet(0xa, 0x801, 0x84) (rerun: 64)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x5) (async)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0x0, 0x6f1e, 0x2, 0xe, 0x4, 0x253c, 0x2, 0x4}, 0x20) (async)
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) (async)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5.43683538s ago: executing program 4 (id=71):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
write(r2, &(0x7f0000000280), 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @win={{0x1, 0x4, 0x1266, 0x9}, 0x0, 0xffff, 0x0, 0x7ffffffd, 0x0, 0x3}}, 0x1})
linkat(r1, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000080000000100000a20000000000a05000000000000000000010000030900010073797a300000000034000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000008000a400000000114"], 0x7c}}, 0x8001)

5.337082411s ago: executing program 4 (id=72):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0)
r1 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x801)
write$snddsp(r5, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES64=r1], 0x48}}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_RECVMSG={0xa, 0x25, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x2}})
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x21)
io_uring_enter(r1, 0x7a94, 0x11289, 0x1, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00')
lseek(r6, 0x1000000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
getsockname$qrtr(r7, &(0x7f0000000500), &(0x7f00000000c0)=0xc)
ioctl$VIDIOC_S_AUDOUT(r7, 0x40345632, &(0x7f0000000240)={0xe, "3aefbac06cf229333993e739392ca0fb5eede87f103d564f4572031dfba02266", 0x2, 0x1})
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bb7af7e7aeaf860b13aaa6ff1cd51784a602d83470f6ceba364b2d53942ec7212b6e542e3bdce5bdacb321ba068b506319caf45b47d836138ef48cd6a115476be600e159e953631e590c216b2816740ebcbf8961bbce4d851bc0ec9aec4d52a38bf24e4c9ef1a2b201cefcaabdfd3033b82855f3f188da935b7befd589432ee74628023276627"], 0x0)
r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006ceb85409c240290adde000000015eebc5576391d20a4f4f85125961270902120001000000000904000000a4df6d00"], 0x0)
syz_usb_control_io$uac1(r9, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}}, 0x0)
fsopen(&(0x7f0000000180)='debugfs\x00', 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=<r11=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r11, 0x1, &(0x7f0000000300))
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
mremap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil)
syz_usb_control_io(r8, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616000000d2"], 0x0, 0x0})

5.210492165s ago: executing program 2 (id=73):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
sendto$inet(r0, &(0x7f0000000340)="e4bf", 0x2, 0x20000060, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)='>', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b00)="1df0603e702c83edeb625c", 0xb}, {&(0x7f00000021c0)="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", 0x215}, {&(0x7f0000000100)="ccae0da80e2a91", 0x7}], 0x3}}], 0x2, 0x850)

4.968712578s ago: executing program 1 (id=74):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r6, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0xf6, r5, 0x13, {0x280000000000000, 0x2ec}, 0x51}, 0x1)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x10005)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x4, 0x0, 0x0, 0x11, &(0x7f0000000040)="dc73b7b973e8497fc71cefb74e5c810e46", 0x5})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000100))

4.804070274s ago: executing program 1 (id=75):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="142000003a33e1f5fdfadee2020c29bd7000fedbbe038ac105e8d8f7033e410c5825cfe30d025d5bd57da221bdb4686896ee1d1d8f3036fea750d07bb396c23d401e"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c000200070000f1ffffffff0b000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

4.660728866s ago: executing program 1 (id=76):
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpgrp(0xffffffffffffffff)
prlimit64(r0, 0x3, &(0x7f0000000080)={0x9, 0xffffffffffffd06f}, &(0x7f0000000040))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x10, 0xffffffffffffffff, 0x0)

4.529229124s ago: executing program 1 (id=77):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) (async)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) (async)
read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, <r3=>0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x2b, 0xea, 0x410000, 0x50, 0x0, 0xfa7, 0x2cc, 0x0, 0x0, 0x80, 0x3}}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002200)={'vlan1\x00', &(0x7f00000021c0)=@ethtool_wolinfo={0x6, 0x3, 0x4, "60d8402f1b6c"}})
sendmsg$nl_generic(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfd, {0xa}, [@nested={0x4, 0xe6}, @nested={0x14, 0x26, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @u32}, @typed={0x8, 0x14f, 0x0, 0x0, @fd=r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@ipv4_newaddr={0x40, 0x14, 0xb63d309ae3956bb2, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x10, 0xfe, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x40}}, 0xbdba8bbdeb86520f) (async)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000002480)={0x517, 0xffffffff, 0x8, 0x7fffffff, 0x6, 0x4}) (async, rerun: 32)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
read(r0, &(0x7f00000024c0)=""/4096, 0x1000) (async)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000034c0)={0x6, @local, 0x4e23, 0x2, 'wrr\x00', 0x10, 0x3, 0xb}, 0x2c)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r8, 0xc048ae65, &(0x7f0000003500))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000003580)) (async)
fsetxattr$security_evm(r7, &(0x7f00000035c0), &(0x7f0000003600)=@v1={0x2, "6151f83abd057313b42f15ad96c367"}, 0x10, 0x3) (async)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000003640)) (async)
fsopen(&(0x7f0000003680)='ntfs3\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000036c0)={{0x1, 0x1, 0x18, <r9=>r2, {0x3}}, './file0/file0\x00'})
ioctl$KVM_CAP_PTP_KVM(r9, 0x4068aea3, &(0x7f0000003700))
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r9, 0xc1105518, &(0x7f00000037c0)={{0x1, 0x2, 0x4, 0x4, '\x00', 0x4}, 0x4, 0x1, 0x8, r4, 0x1, 0xfffffff7, 'syz0\x00', &(0x7f0000003780)=['+\x00'], 0x2}) (async)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003940), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x2c, r10, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x8001)
fsetxattr$security_ima(r5, &(0x7f0000003a40), &(0x7f0000003a80)=@ng={0x4, 0x11, "bbd0557f"}, 0x6, 0x3) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004e00)={r2, 0x20, &(0x7f0000004dc0)={&(0x7f0000003d00)=""/4096, 0x1000, <r11=>0x0, &(0x7f0000004d00)=""/139, 0x8b}}, 0x10) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000004ec0)={0x6, 0x1b, &(0x7f0000003ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3fe000, 0x0, 0x0, 0x0, 0x2c126808}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003bc0)='GPL\x00', 0x5, 0x4a, &(0x7f0000003c00)=""/74, 0x41100, 0x1, '\x00', r6, @fallback=0x5, r2, 0x8, &(0x7f0000003c80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000003cc0)={0x3, 0x3, 0xc005, 0x6}, 0x10, r11, r2, 0x6, 0x0, &(0x7f0000004e40)=[{0x5, 0x3, 0x5, 0x8}, {0x5, 0x1, 0x1, 0x5}, {0x2, 0x4, 0x3, 0xf}, {0x0, 0x2, 0x7, 0x9}, {0x1, 0x5, 0xf, 0xa}, {0x2, 0x4, 0x7, 0x3}], 0x10, 0x5, @void, @value}, 0x94)

4.5284459s ago: executing program 2 (id=78):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000480)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000500)=""/11, 0xb}], 0x2, &(0x7f0000000700)=""/171, 0xab}, 0x8000}], 0x1, 0x102, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x6, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001100050002000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0040008f02684dd9"], 0x20}}, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) (async, rerun: 32)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) (async)
open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
syz_pidfd_open(0x0, 0x0) (async)
syz_open_procfs$pagemap(0x0, &(0x7f00000002c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="0204000802000000000000000000000062e9b49831e584eb24505e91c1acc4d88c898d06d1814f9306827f8f7be428f454b5678f7b4fc983f3f92f8131c79da93ead8c3b98bc8a3055ab5400c0b140e2959e48f519e4c1eb776831c4d27aef2acbc8deea3bbcfd806a5d7a96ecb081"], 0x10}, 0x1, 0x7}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async)
openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcffffffe81bb9dfed7ca60b60ea000000000095000000000000001aecbd3dfacf191c715b9a48672ff5f25fe8f5ce3c674e9bfe9e63dc9a1470f5"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)

4.308819949s ago: executing program 2 (id=79):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00e5"], 0x24}}, 0x0)

4.268702636s ago: executing program 2 (id=80):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e"], 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0)
syz_usb_connect$uac1(0x3, 0x8d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0xf0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x3, 0x1, [0x6], 0x9}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xbc, 0x66, 0x8, {0x7, 0x25, 0x1, 0x1, 0x3, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x88, 0x8, 0xdf, {0x7, 0x25, 0x1, 0x80, 0x41, 0x8}}}}}}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x31, &(0x7f00000006c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x71, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xd, 0x40, 0x200, 0x3}, @generic={0x3, 0x10, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "7020ba1e055154d3a5b1c0443711391b"}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc09}}, {0xbe, &(0x7f00000007c0)=@string={0xbe, 0x3, "1f6d4b68912f0f39622e3af89217556f2006a54e7853575d916ca96fb6b73d7cb8d1f1c08a7f07374924ae5028ef98ec73ad43cef4b9b51f459b5e90b2a3d539b6e0c3cf3a53b0d72e53193de4490d8d81b5f3a0cfec3f73ac8ccd810392c84819b2fed102939fec00889a2e3d02a11e9028a13142d4e9fa37758256f0908b222b649b934bb953b5b41e32f1f3023fd274a3ba98f2c9e09778c36e135065b1e21df087995b1f85cd1827f6dc75d90e8a4e34adab578e1b51b06a30d1"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x3401}}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
syz_usb_disconnect(r4)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000480))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x1c, 0x80000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdde6, r5}, 0x38)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x2000)=nil, 0x3)

3.791418547s ago: executing program 1 (id=81):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
poll(0x0, 0x0, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

3.62068368s ago: executing program 0 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000180))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

3.56924136s ago: executing program 0 (id=83):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380))
pselect6(0x40, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x9, 0x3, 0x5}, 0x0, &(0x7f0000000300)={0x1ff, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0xbe}, 0x0, 0x0)
r2 = syz_io_uring_setup(0x1a91, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x4, 0x2c9}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
sysfs$2(0x2, 0x8001, &(0x7f0000000000)=""/192)

3.386936555s ago: executing program 3 (id=84):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}, {0xfffc}}}, 0x24}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) (async, rerun: 64)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (rerun: 64)
write$dsp(r4, &(0x7f0000002000)='`', 0x88020)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000000)=0x4)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r2, 0xc7631000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) (async)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xafd8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) (async, rerun: 64)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e)
syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2.176851933s ago: executing program 4 (id=85):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = epoll_create(0xe)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000001})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x28, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000007, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.759462216s ago: executing program 3 (id=86):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0)

1.52552005s ago: executing program 0 (id=87):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000100)={0x14})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)

940.748039ms ago: executing program 4 (id=88):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
sendto$inet(r0, &(0x7f0000000340)="e4bf", 0x2, 0x20000060, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)='>', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b00)="1df0603e702c83edeb625c", 0xb}, {&(0x7f00000021c0)="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", 0x215}, {&(0x7f0000000100)="ccae0da80e2a91", 0x7}], 0x3}}], 0x2, 0x850)

755.687398ms ago: executing program 3 (id=89):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="12050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805d0610c0", 0x4c}, {&(0x7f0000001340)="1c393502dda1a67d93b1ceccbe972c4f", 0x10}], 0x2}, 0x9cdc2384056b48b8) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) (async)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000001480)=ANY=[@ANYBLOB="12011003020000202505a1a4400001020301090248000101ab3d8da1399b5fbbfd04c1829cbd5ef6edfff90904006202020600050424060000f90534000e9b0d240f010700000003000002388d1fa800742b5fa4241525eb06000524010300090582024000070108090503024000000214"], &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x40, 0x4, 0x10, 0x1}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x8, 0x1, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0xb7, 0x6}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3c, &(0x7f0000001400)=ANY=[@ANYBLOB="3c0353bb98073f214813e0781f57120c0b448f884803d9654bd1ed50ba0aadc6cbc504af031c436c784ed992e46752291c8b357827719ce87ad5d81247acd3f64e45c93a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}]}) (async)
r1 = syz_usbip_server_init(0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0x4048090}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"a456ac27f3c7b53a811e4d5240c7102a1b6a779f3793a654cd887800e9b53ef232dec3939ac78fbc41fcc91febd39ad1bf6f892eadbc96e3a830c487f548c9c0e39c380ddea4ae8b12e1c51e335d186977819158fe3e47da9f4b32f6df3d31455b35ab3f4c0936c8863dbd2725fcddaa83728e1912ce13d0b9933edda6348f035d7bf1a9cb905a609f79745d732ec963559681789696584851f7b2ef2f8b858a7a4c6fb4556f985c4407ae2a3a3b19f513a0a10bfc751b6688f05406219657ca898e69a56694b795f59dc4b5e64dbea1970a5ab477ead2180b3780c33aa1d691232ac28580c76288e8ec504a35238e27793c2da55569cb8a778b2361128309350309c9b8ee691e2ffbb52c7a3a2ca62ffe231ea9c29672e52333b79dd6c2bddb806faba898f94ec552d7b572e681b50e687003a22d533940cbd4f5b72981d2ff11595951327954893a9f8aeb56254469768f004d13d7a42960d3302408e82055369f5396e8fb59af05f8979dda7feb6a7662b35e87a062698633f45f8f3c12bb8c9dbab808e1f6e021fbade5e201943918e1d9531f57b1189a7b4177c35c2f405a39846ceee79bd9ca444fb61c2d388053f0215ecdd7c21d691722c9bcdb43c63f55ddc3a5bfb264e2bd105f6d76602c0e7cb1cadc450ffdc3003e13f7dd7f4f2451388d0e4bf2bd3e7d5a83596093e967419ef6d3714bd19e7758bca6bba713d20f73097fe45119a0147b1a187b2273453a8d11f78f828919b73130b4d1abc56ce19c6b9f0557d5c8c1d932919f779165c22b824a3107712a9b84fab3f80a1330730d3b7590d2bdae6694aec36c4197cf7fac20597e67e5fa6553dc2efe7fe8bf22b6f415c8112647ad2570ec18123cbfae3e8a2a8e5026387df8805219711d4839f64d26175ca4655053e0332a0dd12b15cb67749fc49f11e582a22dacc177d551efb8f7cde3c4f95f9974d5dbc5a7c2ec9282ab35c13b25fc3a2ff34e7294b6fe306d67039f495b273f48c69a86c638cd6ff091b8906cf8209bb694fc79bda8ff257d5b36a6af76375db242c040d4e5a5c9ce23679443b5f16d890edfeb0d35d7f6f4666bcd8fd94ca292f8bfb1bab4741b707e9a4ada09f41a9db06f45ab02aedff4a5ae247827de6c187d737242cfc6951355711d630d488514d467319abb2747ab49acbaef5e7ae6b91d421f84505d1862a4411b4949d1c8a732cca145a199379b8978ad639a26e08d09d52d7d0cddcc788b88ad3459fe4afc33a9f493ab6b56d7847954a2feeef0de010727d98e4bdc23a05f5728795b077c62052a1f2b8466fee1c829fe3f9bd1d8c872153806d69e028f9cf643972984a15cf630fc4716837a7d04e5c633bc9915aedfb8e8f6695cb80eca6d267d5087cf84d8551263f28577d18899b167a5067eb72835929e825245d40d4e402ab7af200e72019b0e6911b8b6bf405e8805a78ab7475f3efd5635c3cb288937a7fb165e6e3b86f0109238c03031ff2c971a548813119c5328b379bb39b5abe87865f264f6fcc296930853a45f472f5ce068ccde75675198dc5a1e1b1d947e5867b6368c75c455f294c3679846f55abb5ec4ece022543fe77f2eaa2e2b0c02c71acc56945fb59a9a5fa8486b7de35d76f63331dc9caa3a5955d7eda1088bea7e3d82e8a3d70c1b584d9b8752b4721d068e0d09cae8a39df99ed8a4c07c48ae2364927800d7475bd55bbdcab4caa0c23ef0bc9a70ba6f32f0aa86a0ad09cd2b1d442b3cec2f20fc0122ecb783cf6a6fd276d030bbf991a981272f5afa179628ab97e948342a789f0be38e3a4a13b7d148a0c32c85fcd319c487a1ecbcee77fa655bc3349ad92adb163d2ec49dc76a72e45ee643dcf8f401bfbd7f82c979c09ef74d32d0e8848dce45534e30d5f2df642120d617342436d1a73b5dd7770bf38be44d4df2dabd60748670d24e8486ea2457a409482e4c267f0a67af33e63391cf64b079629d50670041965f2250dc4f8529a586e4d408d1f76a60f4bc9ddd9b466abf7b470544cd45f6819d82364dc37a48f8243c06e5f7906bb666fe2b93cfbc66d857b53b978ae83e93d5732e3929ac484a452082d505c567b32735553c78d51c3d3ab9cd19ae03de5b005d24265d70290b350a3ef357fa8b4dfe1058e22793e82d7e4c92c024b0d5058e2e3cc34095674768c210a640b1a6e28290c9e70afa68722465897b2cd061da0a1c6ac1d33e2d22f5d9e3799212d1809ae6d2683491ef35e6b5c8b44e0765b143f754521371069d53b08711ba1f6dc7a69405e240208ed9d0f726a625d2e0114d168d364b5213e9f4d8a9221d9f72dda69519ad0f21cb53ba67b66ad217909c9f70631833bd677e040176aeecbb29f5101a5c068838fd8e97ebdad1ca688b72b4991ce50cf826d28b59bd6d956621509fb89fcbcb1be2fe2fb1b1ca3bea242e1dfe4521ee8b1a2bc437d790d671686c3e049e3b3bf1c614a1da7f37709f2410fc93b33899efcb4f6e175578540858b548a166b010dbadacf4d8e24a0eaf4727d451c5cbff2d22f6374935365e1e4fadaa4faa857164faf9c069995801160c63ac365b6aaa48ea250c9520f9ad1c7ae77ab82538ecf182595ee10803769335be371db53dd70707bf66a1af595ecf2e940c3d0feb7abe09f0e588db00b1c503fb01f1a7bcb389c0510655f3fac0ea5a81fe09040430b1add61d8fb1d3fd33dca0a1435d841ff480b2979760ab6b91d5101f69ea23b62a0b9a4fed85037d310f7726e50d3c6aaa59d4a6cc0f11a272a3e94a2ba41070f04574c466161de21bd6f49e243f8aef23c0eb475dfdd84a4551d4620332d6f1523b948d62883f901807c78f8ee0eec064964df975e2502fdaff19cd9a704f7e04ae4697745b22be4b89f6387fef292a59d4d2e8fabed9db7a66ad2500e49587660679ab72e0bf1f9cb12421d988d431b9ae3f19423e9e1d69c933990273d440c68525dedaafcefc8c787b459fde83a816fdb8639dd560fd01e033cf8fffdcd0bf34860cf962d30a34d5bdc349004f80e10572b2f52e1cb157a8868ccbd8b1b61cfbe4b78fd01fca21c4659d68cbd8425ed3a2af010843e6cfb4768774ab91150e2a66685f4cafb2d043190873bbfd95bcc75f4ad7fe4023eaf9b50b2bc74e5cf88329cbcd7335e48283f1ffd762f06283d93a4c6e8833bd55f87d8ab8d14facbb767b53fec8d0f0dae2f144c51c659459d13f95031074fbba0e17e2ec956927bef32e38d346acb9bb4db4b2ea7f7c47a5d639a054e1f189e09b29afd84abb440d58038399c4fac3ffa884ac6b22d220a291cab18303b7308709ef28bf14c3c6f7cd4f1a997aae3d427ac5c64d3b0cc30c16f33c335303d75541c11dab4fef5f56c2f19146e8e3104528b585945aff0af2b56ccf412fc0f159e17f0d6ece72b37adbc5db4c4e3032bebb54bde73582f9a1420779d7887e3c45093f1dc3a0b7c9c5b73284b7047ed71b8eeb933cb182981dce900717b8ab7ee1655057175f35bb9eacade726d7af0627e6faa7b3e87bd71d4a897ebec7331f3e0482fa04dc93a11059f7c9fe41856799f59ac0e73df0442d6d0d12b3a93362c5ea015a2ee9d2909ff3202c1a078ea60a3135fdef29ff1380929afa48e5e91f5da597e056faf06d8d1a9b9fb672c40c5fd43a4dee623ade05f89f6180720f4015d30b88df4114255c361e2d39c294cf384f997e09aed5285c45c6c5fceaaa893d5b4760379dba107152ad689856114f604b7a400cd57a493328abeb4f1fc35d76f34eb66a2ae265106c61deaf014f5da27e02589643ff2b62baf40819ea6c9afbf1555730bb75497ec720e229a6850ab4c04edefb4749cdc67d1bcf59180280b84f5d7b93198242cda3db8969ebc3df539f29995766df17c1105fa216428906aead72c67f649f97d20202194fde9255e4a3a2eac5dc1ef174b309f8d14228551b107c0e6c7952ff6e93d56d5e625b04a5def275162c7e8f58fe3ef72b5b2b789fc03d61c43d86f897a95d676d7dc96ba34ea46e42465d7346c8670928ea2f1905dd5ef31e3e0ff555804b9e295162e9220618d1a444d66df69bcb223dadbe4ede5031861372d6931b8b7e9a0ca9a365d6f20d31dfb3e55fe7abf2014a89dff1ea8afb528bc71987a136ab45b04ae3c206fa9fb9d83d4a85f7db1de4e26732d76792a7c26d5a09f7f9b2d58e83c828ae14c1b8a2923c7f815f720454352c7dda4c76ddfa2eeba69f90b80e61b73d2847a96dd4f2d6932375f739721db92adc1dc0d3ac9768c91a5af287ebabf1467447c2036b59fb025e41dad97bd9a2ce1ad75e23c0668b7da6e4a8a737c1fd501943e307a3b9c0ef126fcdfe9bed260ae13d6af63609d44be71d3b05e664cfda61525f9a67f0494014a34321281c2ea19d08702549a84ad6e76ecd3e91654bad52c90f9f9d46300f823c636392ff475db328d3246147ba76d5756116c8e629cc54c880134d21af12855626b686c680f5c9000a6dd2632ccf20727a834ba9740e963fc625d7e9b5c6a61f8041982cb7bf8bf89611827efbed62a6bc160856a676366b260010b0714382653dc077d2782d5266095c21ef3f4c4df1d40cdb9dab477cde26c7b6e9cfa934d9c83ba35e807b9b9e3af8233e1cb9f933e15818221e08877f9bc32c42da68f57d15e79005955de17039175a9b15714bdd08fabca48027d8cf97ad02bcadd44b6c62c47691d900d1d193418337d24231e012a98805d8e9e935dc93908d70b463a92d9aa8fca659e10f00d160e755e8d8e7a5453a78fac0f781ab120f0f8569c85c21d63763a774036dd98cae0abf820ef0d039d0f162a3625807c699777339062d749f0ef3425545f389be74125f360b1c00841df34449616c4eafdc15aa8943673ae18d7394a3289c1c2419f628c5bcfc9fccdfc17d19a9aeffafe327c3d15a59428738460465c415bb5887232347d79ef1bb5a837c1c922858168e01a324ac359cc70e25268a396668211a42b1e930d510738054a9643da199dab1fc7c673ef00ffe3cfa8950dfee1242859a9ce35fee2fea7513cebe0bf632f2b9ecd894f3aa4f0c4ff2d1fd02254574a730a75373db2470252ece01487a3e673359caf6b8281a85c64130b506a908882bf8578b0e5530194599431ba0a3126b2b5ce9b32ab2c1211fdd46159755a56c789a8c2b4d7003599735b4c0b7e6757c456ef9d2f2dcef6c26f6fb44e0cc4f3dd06ec25b5641325a03ddcea3a7a48ef0afbe5274da4e3e29a04c95e152d191975727eb92f710a5cc47d921e66d373cba6a4905aa021f6032cb261e30427dd260f69d9e9847bb700b6e6212582d442809793636a99efd547781db79451c9d962a7abbd1c39726b8e8718234bdc9ff8c400bd0095808b116a8a03713345cd4b31c59ace9de0efa061754e371c0bb06ef22f3f6dd1f499caea7bcee402025155253e1f9392686c8b72baafa394ddc28edfc5e76dadb2c3b16c8cfa6a969a0837362a65013c32a998132a7e44ab735a26d34cb05604d08243cc01fdbf7248bdaba6d0741ce359032ad7dc69f041fe42f03a728256fd798af347aeb713585924a27f8b418b12ab204857771ffe0e579bc60dfcb4022250584dcda56aa36afb3a876eed704a72b5b809378a19a0d8c63fde3a1a6dd90b3ee19e7dd2fee4d245446c3eac42acc139bd25831242eca808949436cd76ad6a4c5bb5a7effb0b7574cb7029d1cd86d41c69f81716bc524dab16a4c723f2545142bd208455b05265c59e623a5363395c555a77df6691e51bde25c8396", 0x1000}}, 0x1006)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000004e000100"], 0x18}}, 0x0)
write$usbip_server(r1, &(0x7f0000000200)=ANY=[], 0xfffffffffffffeb1)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xff, @private1, 0x9}, 0x1c) (async)
r4 = syz_io_uring_setup(0x2007eee, &(0x7f0000000440)={0x0, 0x8675, 0x100, 0x0, 0xfa}, &(0x7f0000004000), &(0x7f0000000340))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
io_uring_enter(r4, 0x2, 0x2, 0xb, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r5, 0xfffffffffffffffd, 0x58)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x0, 0x0, 0x1, 0x1}, 0x20) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000002c0), 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000240)=0x200) (async)
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r7, 0x2, 0x0) (async)
getdents64(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)

681.17359ms ago: executing program 4 (id=90):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000042c0)={@map, 0xffffffffffffffff, 0x21, 0x0, 0xffffffffffffffff, @void, @value}, 0x20)
ioctl$TCSETSW2(r1, 0x5435, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f00000005c0)={<r4=>0x0, <r5=>0x0})
futex(&(0x7f0000000580)=0x1, 0x100, 0x0, &(0x7f0000000600)={r4, r5+60000000}, &(0x7f0000000640), 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x800, 0x2})
quotactl$Q_SETINFO(0x8000000040000502, &(0x7f0000000040)=@md0, r3, &(0x7f00000002c0)={0x8, 0x7, 0x1})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r7=>0x0]}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r7, 0x2}, &(0x7f0000000240)=0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x103fe, 0x2})
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0)
read$hiddev(r10, &(0x7f0000001780)=""/4094, 0xffe)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1b01040000000905830300b3"], 0x0)
r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r11, 0xaf01, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r11, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000071e68c68", @ANYRES32=r2, @ANYBLOB="08008a00", @ANYBLOB="42c2449cb4ddc5fdf18f292c05137c9540a1e4c039a9887554b2a7bb8f2de25ea92c9ad8fa65c8492e5c8be77aa474907a6cb4cc4d77cda34573d52de8592de4ac154d1a425f9e46e8200b6b9e06ed35ca2a9069406334c0ba3818be41c166894dc62f863a359a8a05bb52d6c2a272b31f4c7d39db6832df6790c9651f78e47ecefe9159857904d21b63e504057bf542ec4b4b79f317d0e7d22e6ed2ad4632b403a19d0b09b3f81ed0a2dac9c85ceb9d88ae17d3a44a5cf28494ad1d7e6ef145870afb906c3b68ae8ceafba9"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

451.049116ms ago: executing program 1 (id=91):
openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x80, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, 0x0)
futex(&(0x7f00000002c0), 0x2, 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0)
unshare(0x22000400)
r3 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000080)="9112")
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x9a2, 0x0, 0x0)
set_tid_address(0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r4, &(0x7f00000012c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000020601030000000000000000820000f41caf0305000400020000000500050002000000140007801800028014000240000000000000000000000000000000010d0005000a0000000500050002000000050005000700000010706f7274000500050001"], 0x70}, 0x1, 0x0, 0x0, 0x8804}, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242)
fsetxattr$security_capability(r7, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(r7, &(0x7f0000001d80)={0x2, 0x4}, 0x2)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000000070101000000000000000002000002340007800800014000800007080002400000000408000140000000f108000140000000070800014080000001080001ffffffff060c000640fffffffffffffffb0c000240000000000000000782ae8b3cc80671c7f3d141c22714e9b85833662277cdc4fddb3e9229a3"], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@FRA_DST={0x4, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40094)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000001a2000010000000000000000000a00000000000000000000f1213f2f521400110064766d72703100"/52], 0x30}}, 0x0)

389.654653ms ago: executing program 2 (id=92):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000280)={0x1, 0x200, 0x6, 0x7, 0x6, 0x5})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0})
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x1, 0x97, 0xca, 0x10, 0xc88, 0x21, 0x1947, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x40, 0x3, [{{0x9, 0x4, 0xa0, 0x4, 0x0, 0x3a, 0xd0, 0x94, 0xc}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x5, 0x0})
fsetxattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc0398062f2405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
open(0x0, 0x0, 0x0) (async)
r7 = open(0x0, 0x0, 0x0)
renameat2(r7, 0x0, 0xffffffffffffffff, 0x0, 0x2) (async)
renameat2(r7, 0x0, 0xffffffffffffffff, 0x0, 0x2)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1407, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003f4ffffff3d2e69000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003f4ffffff3d2e69000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0)

204.295473ms ago: executing program 3 (id=93):
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES32], 0xb3)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = syz_io_uring_setup(0x1b4e, &(0x7f0000000040)={0x0, 0x6cb0, 0x4020, 0xc, 0x90}, &(0x7f0000000200), &(0x7f0000000100))
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40040)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x103002, 0x0)
r4 = io_uring_setup(0x761b, &(0x7f0000000340)={0x0, 0x7e84, 0x40, 0x2, 0x1c4, 0x0, r1})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000500)=[r2, r1], 0x2)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r3], 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r5 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0x3, 0xc, 0xe, 0x1})
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "6f398f4a", "50cc97386065eda9"}, 0x28)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl(r8, 0xe, &(0x7f0000000040)="45349a2930879d0d20bba5e5905e80c44ebcdae8a87cdb55e295da37bcc7f2f831f3da0e2f97bd87194267f132ac627e90a8471d8529500333f8732ebd9feef3f4353dd657837c61254c645fc27555f906a1c5795dc5f3983be9b7d08b796feaf3e2897adc6326c480812d9b15dc367ed7f31d4011ab9ba08dc32bd6c6c7872fcf47df51418c662ed560693128086c17e3d3b74b5f747d39de5f1c3e1b079389b4f4225599687d819fce10062cc7737d1c75b17012d93dd5c035aa8f36552b1526ff8b83a7f1de1709")
writev(r0, &(0x7f0000000680)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000440)="ff22adc677dca7dee3647ec58d139c49526fd028ba26eaef2e7380b50a9f8725116e08613c194a34ebcd122aae144ca472ff3e08a4c3024cefb9296ade10cc77f3ee06a229a85674a631190d0954151a10687ede1f67cd86ff9b4e352d9328745cfc28310ec4f9a63a7531cea5d78d72de388697a59b1fc196df0fbe3d28f80c93d069ace980a42e4a9ed2cadcc6d13a4572", 0x92}, {&(0x7f0000000140)="624321abcb8b808a017949c9f6", 0xd}, {&(0x7f0000000240)}, {&(0x7f0000000580)="3855580b37ce31bcc576a8a265fe7bbc43ec5fd711921808f468e3df29c9f9e362df406a318c2b2941518800664378fdb2170d4861a1b83f2b62fab3afd53bcacecb5edf61d465706879be6cbe4b5548", 0x50}, {&(0x7f0000000600)="ee73a623fadf5da0d7f97ba2f2c7bed5ddf1d1a1d345873c93844becb14cc4696d3fdfc755d04ed072208328c3464e4514d2f44f656de0d71b70c3d24bd7fe60d7b18fcf23910e418b", 0x49}], 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

0s ago: executing program 0 (id=94):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0)
r0 = memfd_secret(0x80000)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0xff)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xd}, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts.
[   83.057533][ T5825] cgroup: Unknown subsys name 'net'
[   83.196150][ T5825] cgroup: Unknown subsys name 'cpuset'
[   83.205892][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.942081][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.613205][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.624634][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.633533][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.641599][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.682498][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.691326][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.698341][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.700066][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.706784][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.715070][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.724594][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.730110][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.736823][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.743170][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.756843][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.757968][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.764972][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.780006][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.781406][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.808726][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.820496][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.829640][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.837521][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.853020][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.868956][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.304190][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   88.494532][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.502636][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.510375][ T5850] bridge_slave_0: entered allmulticast mode
[   88.517902][ T5850] bridge_slave_0: entered promiscuous mode
[   88.557524][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.564942][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.572518][ T5850] bridge_slave_1: entered allmulticast mode
[   88.580195][ T5850] bridge_slave_1: entered promiscuous mode
[   88.665746][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.689718][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   88.713007][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.865540][ T5850] team0: Port device team_slave_0 added
[   88.875197][ T5850] team0: Port device team_slave_1 added
[   88.975142][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   89.023687][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.030999][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.059085][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.071335][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   89.112412][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.121806][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.148248][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.180366][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   89.242299][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.249619][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.256870][ T5853] bridge_slave_0: entered allmulticast mode
[   89.264620][ T5853] bridge_slave_0: entered promiscuous mode
[   89.322849][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.330390][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.337845][ T5853] bridge_slave_1: entered allmulticast mode
[   89.345164][ T5853] bridge_slave_1: entered promiscuous mode
[   89.467056][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.476999][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.484606][ T5851] bridge_slave_0: entered allmulticast mode
[   89.494769][ T5851] bridge_slave_0: entered promiscuous mode
[   89.525303][ T5850] hsr_slave_0: entered promiscuous mode
[   89.532671][ T5850] hsr_slave_1: entered promiscuous mode
[   89.548698][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.558231][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.565386][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.572958][ T5851] bridge_slave_1: entered allmulticast mode
[   89.580418][ T5851] bridge_slave_1: entered promiscuous mode
[   89.654687][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.692509][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.702500][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.710687][ T5854] bridge_slave_0: entered allmulticast mode
[   89.718924][ T5854] bridge_slave_0: entered promiscuous mode
[   89.755685][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.794170][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.801824][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.809773][ T5854] bridge_slave_1: entered allmulticast mode
[   89.817070][ T5854] bridge_slave_1: entered promiscuous mode
[   89.823717][ T5842] Bluetooth: hci0: command tx timeout
[   89.830051][ T5149] Bluetooth: hci1: command tx timeout
[   89.846291][ T5853] team0: Port device team_slave_0 added
[   89.855194][ T5853] team0: Port device team_slave_1 added
[   89.863480][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.897840][ T5149] Bluetooth: hci3: command tx timeout
[   89.903651][ T5149] Bluetooth: hci4: command tx timeout
[   89.909555][ T5842] Bluetooth: hci2: command tx timeout
[   89.961525][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.968926][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.976205][ T5856] bridge_slave_0: entered allmulticast mode
[   89.985221][ T5856] bridge_slave_0: entered promiscuous mode
[   90.010886][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.023675][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.030740][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.057334][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.083840][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.091261][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.098708][ T5856] bridge_slave_1: entered allmulticast mode
[   90.106082][ T5856] bridge_slave_1: entered promiscuous mode
[   90.123032][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.149521][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.156502][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.182886][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.204092][ T5851] team0: Port device team_slave_0 added
[   90.213394][ T5851] team0: Port device team_slave_1 added
[   90.275450][ T5854] team0: Port device team_slave_0 added
[   90.304870][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.318291][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.332986][ T5854] team0: Port device team_slave_1 added
[   90.408262][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.415298][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.442249][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.454798][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.465737][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.492171][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.561388][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.568596][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.594647][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.625311][ T5856] team0: Port device team_slave_0 added
[   90.634339][ T5856] team0: Port device team_slave_1 added
[   90.647196][ T5853] hsr_slave_0: entered promiscuous mode
[   90.655406][ T5853] hsr_slave_1: entered promiscuous mode
[   90.662223][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.670185][ T5853] Cannot create hsr debugfs directory
[   90.676733][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.684234][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.710690][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.768615][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.775607][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.801795][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.860166][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.867190][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.893209][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.926209][ T5851] hsr_slave_0: entered promiscuous mode
[   90.933348][ T5851] hsr_slave_1: entered promiscuous mode
[   90.940574][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.948242][ T5851] Cannot create hsr debugfs directory
[   91.057050][ T5854] hsr_slave_0: entered promiscuous mode
[   91.064133][ T5854] hsr_slave_1: entered promiscuous mode
[   91.072202][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.079861][ T5854] Cannot create hsr debugfs directory
[   91.106879][ T5856] hsr_slave_0: entered promiscuous mode
[   91.114245][ T5856] hsr_slave_1: entered promiscuous mode
[   91.120846][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.129257][ T5856] Cannot create hsr debugfs directory
[   91.341843][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.399028][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.435665][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.470893][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.721630][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.734133][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.763969][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.791343][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.859467][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.875084][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.886941][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.898518][ T5842] Bluetooth: hci0: command tx timeout
[   91.904039][ T5842] Bluetooth: hci1: command tx timeout
[   91.910458][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.976749][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.983543][ T5842] Bluetooth: hci2: command tx timeout
[   91.983605][ T5842] Bluetooth: hci4: command tx timeout
[   91.983642][ T5842] Bluetooth: hci3: command tx timeout
[   92.060888][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   92.110127][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.117444][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.130376][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.137558][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.161451][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.194738][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.252670][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.327282][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.430024][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.468829][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.490865][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.516664][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.532249][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.609339][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   92.650370][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.657531][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.667417][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.674581][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.704586][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.735136][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.775273][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   92.832904][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.840139][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.893352][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.900564][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.934204][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.993585][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   93.034261][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.051882][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.059092][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.086413][ T5850] veth0_vlan: entered promiscuous mode
[   93.112147][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.119377][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.158945][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   93.169130][ T5850] veth1_vlan: entered promiscuous mode
[   93.193594][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.200876][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.223153][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.254077][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.261330][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.406443][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.432273][ T5850] veth0_macvtap: entered promiscuous mode
[   93.471130][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.484836][ T5850] veth1_macvtap: entered promiscuous mode
[   93.570875][ T5854] veth0_vlan: entered promiscuous mode
[   93.585376][ T5853] veth0_vlan: entered promiscuous mode
[   93.605764][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.623495][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.652139][ T5853] veth1_vlan: entered promiscuous mode
[   93.664916][ T5854] veth1_vlan: entered promiscuous mode
[   93.686437][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.700087][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.709448][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.718756][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.754044][ T5851] veth0_vlan: entered promiscuous mode
[   93.781059][ T5851] veth1_vlan: entered promiscuous mode
[   93.855435][ T5853] veth0_macvtap: entered promiscuous mode
[   93.880356][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.913322][ T5854] veth0_macvtap: entered promiscuous mode
[   93.924683][ T5854] veth1_macvtap: entered promiscuous mode
[   93.936037][ T5853] veth1_macvtap: entered promiscuous mode
[   93.944005][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.965032][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.984691][ T5149] Bluetooth: hci1: command tx timeout
[   93.984754][ T5842] Bluetooth: hci0: command tx timeout
[   94.055214][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.067503][ T5842] Bluetooth: hci3: command tx timeout
[   94.067923][ T5848] Bluetooth: hci2: command tx timeout
[   94.081973][ T5149] Bluetooth: hci4: command tx timeout
[   94.085195][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.103680][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.124812][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.136455][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.147367][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.158166][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.169850][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.178131][ T5851] veth0_macvtap: entered promiscuous mode
[   94.203119][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.206502][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.221510][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.224024][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.241275][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.252777][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.263588][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.273618][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.285695][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.299042][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.318525][ T5851] veth1_macvtap: entered promiscuous mode
[   94.333652][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.344004][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.353659][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.362904][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.374469][ T5856] veth0_vlan: entered promiscuous mode
[   94.411830][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.422868][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.433472][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.442614][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.465480][ T5856] veth1_vlan: entered promiscuous mode
[   94.484640][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.491408][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.514568][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.525229][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.535964][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.546520][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.557409][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.569500][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.602630][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.615718][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.626241][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.658055][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.674866][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.685879][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.704707][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.740699][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.749848][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.759595][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.768699][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.892137][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.909475][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.975047][ T5856] veth0_macvtap: entered promiscuous mode
[   94.981932][  T975] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.993783][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.004095][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.032299][ T5856] veth1_macvtap: entered promiscuous mode
[   95.052745][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.062369][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.101699][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.113109][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.125375][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.137356][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.148629][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.159188][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.165746][  T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.169299][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.194684][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.210184][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.225694][  T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.237299][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   95.250137][  T975] usb 4-1: SerialNumber: syz
[   95.251554][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.268482][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.280495][  T975] usb 4-1: bad CDC descriptors
[   95.288029][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.314977][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.326454][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.342518][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.353180][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.366036][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.378799][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.402066][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.409138][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.415561][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.419606][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.440472][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.453068][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.526550][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.555169][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.567547][ T5899] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   95.635297][ T5899] team0: Port device wlan1 added
[   95.679752][ T5899] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   95.728942][ T5899] syzkaller1: entered promiscuous mode
[   95.734624][ T5899] syzkaller1: entered allmulticast mode
[   95.737446][ T5904] Zero length message leads to an empty skb
[   95.772479][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.783951][ T5899] process 'syz.3.4' launched './file0' with NULL argv: empty string added
[   95.797704][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.870605][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.888944][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.059406][ T5149] Bluetooth: hci0: command tx timeout
[   96.065697][ T5149] Bluetooth: hci1: command tx timeout
[   96.128461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.136809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.155523][ T5848] Bluetooth: hci3: command tx timeout
[   96.156882][ T5842] Bluetooth: hci2: command tx timeout
[   96.172733][ T5149] Bluetooth: hci4: command tx timeout
[   96.182008][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   96.191718][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.233357][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.408027][  T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.567760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[   96.620419][  T975] usb 5-1: config 0 has no interfaces?
[   96.678385][  T975] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   96.735144][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.793803][  T975] usb 5-1: Product: syz
[   96.802692][  T975] usb 5-1: Manufacturer: syz
[   96.809597][  T975] usb 5-1: SerialNumber: syz
[   96.863636][  T975] usb 5-1: config 0 descriptor??
[   97.121720][   T30] audit: type=1326 audit(1744777207.321:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f00c5b8e169 code=0x7ffc0000
[   97.347201][   T47] cfg80211: failed to load regulatory.db
[   97.381009][   T30] audit: type=1326 audit(1744777207.361:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f00c5b8e169 code=0x7ffc0000
[   97.429322][   T30] audit: type=1326 audit(1744777207.361:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5928 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f00c5b8e169 code=0x7ffc0000
[   97.591981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.662175][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.864998][   T47] usb 4-1: USB disconnect, device number 2
[   97.899065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.958015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.966800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.975365][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.138417][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.477783][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.649366][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.658225][   T10] usb 4-1: Using ep0 maxpacket: 16
[   98.685560][   T10] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[   98.722381][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.742510][   T10] usb 4-1: Product: syz
[   98.746748][   T10] usb 4-1: Manufacturer: syz
[   98.764117][   T10] usb 4-1: SerialNumber: syz
[   98.791731][   T10] usb 4-1: config 0 descriptor??
[   98.836098][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.875645][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   98.906813][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.939307][    T9] usb 2-1: Product: syz
[   98.952071][    T9] usb 2-1: Manufacturer: syz
[   98.966345][    T9] usb 2-1: SerialNumber: syz
[   98.996958][    T9] usb 2-1: config 0 descriptor??
[   99.030381][    T9] ch341 2-1:0.0: ch341-uart converter detected
[   99.038384][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.077197][ T5958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   99.089922][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.246339][   T10] usb_8dev 4-1:0.0 can0: sending command message failed
[   99.277391][   T10] usb_8dev 4-1:0.0 can0: can't get firmware version
[   99.369407][   T10] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22
[   99.404334][   T10] usb 4-1: USB disconnect, device number 3
[   99.529257][ T5891] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   99.700370][ T5891] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   99.725029][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.785817][ T5891] usb 3-1: config 0 descriptor??
[   99.814813][ T5891] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   99.992271][   T47] usb 5-1: USB disconnect, device number 2
[  100.018418][ T5891] gp8psk: usb in 128 operation failed.
[  100.073651][    T9] ch341-uart ttyUSB0: break control not supported, using simulated break
[  100.211009][    T9] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  100.259834][ T5891] gp8psk: usb in 146 operation failed.
[  100.284080][ T5891] gp8psk: failed to get FW version
[  100.295583][ T5970] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.19'.
[  100.309029][    T9] usb 2-1: USB disconnect, device number 2
[  100.335303][ T5891] gp8psk: FPGA Version = 173
[  100.407484][    T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  100.488188][    T9] ch341 2-1:0.0: device disconnected
[  100.507976][   T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.534148][ T5891] gp8psk: usb in 138 operation failed.
[  100.562480][ T5891] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  100.579947][ T5891] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  100.594218][ T5891] usb 3-1: USB disconnect, device number 2
[  100.687721][   T47] usb 1-1: Using ep0 maxpacket: 32
[  100.720699][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.738161][   T47] usb 1-1: unable to read config index 0 descriptor/start: -71
[  100.771389][   T47] usb 1-1: can't read configurations, error -71
[  100.852017][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'.
[  101.583695][ T5992] netlink: 64 bytes leftover after parsing attributes in process `syz.2.25'.
[  101.663342][ T5995] netlink: 84 bytes leftover after parsing attributes in process `syz.4.26'.
[  101.896439][ T6003] netlink: 'syz.4.27': attribute type 11 has an invalid length.
[  102.604862][ T6023] dccp_invalid_packet: P.Data Offset(0) too small
[  103.424525][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.693082][   T10] usb 1-1: config 0 has no interfaces?
[  103.702510][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  103.711951][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.826414][   T10] usb 1-1: Product: syz
[  103.838767][   T10] usb 1-1: Manufacturer: syz
[  103.843439][   T10] usb 1-1: SerialNumber: syz
[  103.947716][   T10] usb 1-1: config 0 descriptor??
[  104.171517][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.250575][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.817780][   T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  104.988300][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  105.117894][   T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  105.297921][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  105.312559][   T10] usb usb2-port1: attempt power cycle
[  105.677827][   T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  105.728498][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  105.862074][   T10] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  105.938445][   T10] usb 2-1: Invalid ep0 maxpacket: 16
[  105.944257][   T10] usb usb2-port1: unable to enumerate USB device
[  105.978227][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  106.060451][   T47] usb 1-1: USB disconnect, device number 4
[  106.206417][    T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  106.247640][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.255704][    T9] usb 5-1: Product: syz
[  106.273314][    T9] usb 5-1: Manufacturer: syz
[  106.282492][    T9] usb 5-1: SerialNumber: syz
[  106.304580][    T9] usb 5-1: config 0 descriptor??
[  106.316389][    T9] gspca_main: sunplus-2.14.0 probing 055f:c230
[  106.597092][ T6094] fuse: Bad value for 'user_id'
[  106.612115][ T6094] fuse: Bad value for 'user_id'
[  106.828374][   T47] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  106.841369][ T6099] vivid-000: disconnect
[  107.004969][   T47] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  107.028144][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.060461][   T47] usb 4-1: Product: syz
[  107.064714][   T47] usb 4-1: Manufacturer: syz
[  107.079404][   T47] usb 4-1: SerialNumber: syz
[  107.093425][   T47] usb 4-1: config 0 descriptor??
[  107.105588][   T47] gspca_main: sq930x-2.14.0 probing 2770:930c
[  107.272405][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  107.441157][ T5892] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  107.451366][ T5892] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  107.461947][ T5892] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  107.471642][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.487285][ T5892] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  107.686745][ T6096] vivid-000: reconnect
[  107.690098][ T5892] gspca_sn9c2028: read1 error -71
[  107.704107][ T5892] gspca_sn9c2028: read1 error -71
[  107.710261][ T5892] gspca_sn9c2028: read1 error -71
[  107.715533][ T5892] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71
[  107.733209][ T5892] usb 3-1: USB disconnect, device number 3
[  107.913230][ T6093] capability: warning: `syz.3.50' uses 32-bit capabilities (legacy support in use)
[  108.007799][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.197667][ T5891] usb 2-1: Using ep0 maxpacket: 32
[  108.207268][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.239409][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.252621][ T5891] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  108.267105][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.270085][   T47] gspca_sq930x: ucbus_write failed -110
[  108.293391][ T5891] usb 2-1: config 0 descriptor??
[  108.527746][   T47] gspca_sq930x: Sensor ov9630 not yet treated
[  108.538053][   T47] sq930x 4-1:0.0: probe with driver sq930x failed with error -22
[  108.647720][ T5888] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  108.857784][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.934581][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  108.946112][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  108.950888][ T5892] usb 5-1: USB disconnect, device number 3
[  108.999271][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  109.050873][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  109.089632][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  109.112373][ T5888] usb 3-1: Manufacturer: syz
[  109.144859][ T5888] usb 3-1: config 0 descriptor??
[  109.562815][ T5888] rc_core: IR keymap rc-hauppauge not found
[  109.577367][ T5888] Registered IR keymap rc-empty
[  109.593805][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  109.610498][  T975] usb 4-1: USB disconnect, device number 4
[  109.629387][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  109.681527][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  109.890198][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[  109.989521][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.047947][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.080017][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.178155][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.819367][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.828597][ T6143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.888654][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  110.966735][ T6143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.007951][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  111.087895][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  111.127915][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  111.171887][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  111.220121][ T5891] usbhid 2-1:0.0: can't add hid device: -71
[  111.226197][ T5891] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  111.246533][ T5888] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  111.280533][ T5888] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  111.307657][ T5891] usb 2-1: USB disconnect, device number 7
[  111.362991][ T5888] usb 3-1: USB disconnect, device number 4
[  111.483419][   T30] audit: type=1326 audit(1744777221.691:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdac98e169 code=0x0
[  111.529051][ T5892] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  111.645234][   T30] audit: type=1326 audit(1744777221.851:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c5b8e169 code=0x7fdf0000
[  111.727481][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.736330][ T5892] usb 1-1: not running at top speed; connect to a high speed hub
[  111.750145][ T5892] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  111.767684][ T5892] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  111.827550][ T5892] usb 1-1: config 4 has no interface number 0
[  111.878577][ T5892] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  111.933084][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.945733][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  111.969205][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  111.978787][ T5892] usb 1-1: Product: syz
[  112.027198][ T5892] usb 1-1: Manufacturer: syz
[  112.036806][ T5892] usb 1-1: SerialNumber: syz
[  112.049486][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.092067][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.108403][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  112.125560][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.142033][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.164945][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.174345][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.196132][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.205656][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.226174][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.244721][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.268742][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.282836][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.306769][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.343108][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.344248][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.354454][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.379083][ T5888] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  112.394730][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.404249][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.428474][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.460495][ T5888] usb 2-1: config 0 descriptor??
[  112.475191][ T5892] usb 1-1: USB disconnect, device number 5
[  112.484729][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.539393][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.588109][ T6164] netlink: 136 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.597173][ T6164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  112.949285][ T5888] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  113.019065][ T5888] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  113.140014][ T5888] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[  113.717852][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.897735][ T5888] usb 4-1: Using ep0 maxpacket: 16
[  113.929145][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  113.994149][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.036553][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  114.047210][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.072596][ T5888] usb 4-1: Product: syz
[  114.088617][ T5888] usb 4-1: Manufacturer: syz
[  114.107497][ T5888] usb 4-1: SerialNumber: syz
[  114.136729][ T5888] usb 4-1: config 0 descriptor??
[  114.164968][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  114.192785][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  114.308203][   T47] usb 2-1: reset high-speed USB device number 8 using dummy_hcd
[  114.452717][   T47] usb 2-1: device descriptor read/64, error -71
[  114.738471][   T47] usb 2-1: reset high-speed USB device number 8 using dummy_hcd
[  114.765919][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  114.777966][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  114.877799][   T47] usb 2-1: device descriptor read/64, error -71
[  114.917756][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.057867][ T5887] usb 5-1: device descriptor read/64, error -71
[  115.310088][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  115.406413][ T5888] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  115.432740][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  115.450711][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  115.459531][ T5887] usb 5-1: device descriptor read/64, error -71
[  115.472497][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  115.524478][ T5890] IPVS: starting estimator thread 0...
[  115.588074][ T5887] usb usb5-port1: attempt power cycle
[  115.617781][ T6210] IPVS: using max 30 ests per chain, 72000 per kthread
[  115.772272][  T975] usb 2-1: USB disconnect, device number 8
[  115.883124][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  115.891411][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  115.908887][ T5888] usb 4-1: USB disconnect, device number 5
[  115.947758][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  115.978476][ T5887] usb 5-1: device descriptor read/8, error -71
[  116.239809][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  116.247687][ T5887] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  116.279815][ T5887] usb 5-1: device descriptor read/8, error -71
[  116.521847][    T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  116.538398][ T5887] usb usb5-port1: unable to enumerate USB device
[  116.538968][    T9] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  116.586908][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  116.608529][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.659613][ T6230] netem: unknown loss type 13
[  116.678761][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  116.717085][ T6230] netem: change failed
[  116.777273][ T6230] netem: unknown loss type 13
[  116.804599][ T6230] netem: change failed
[  116.830618][    T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  116.919569][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.931629][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.971936][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.983754][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.999713][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.393048][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.446800][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.447745][ T5887] usb 3-1: USB disconnect, device number 5
[  119.658150][  T975] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.890414][   T47] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  119.979029][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  120.058819][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  120.081869][   T47] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  120.097171][   T47] usb 5-1: config 179 has no interface number 0
[  120.110949][   T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  120.137211][   T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  120.148902][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  120.157456][   T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  120.169702][   T47] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  120.181220][   T47] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  120.194717][   T47] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  120.204065][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.212818][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short
[  120.228196][ T5887] usb 3-1: config 1 has an invalid interface number: 160 but max is 0
[  120.237898][ T5887] usb 3-1: config 1 has no interface number 0
[  120.239248][ T6256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.244073][ T5887] usb 3-1: config 1 interface 160 has no altsetting 0
[  120.258142][ T5888] usb 2-1: Using ep0 maxpacket: 16
[  120.267982][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.279153][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  120.287066][ T6256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  120.287824][ T5887] usb 3-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47
[  120.303767][ T5888] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  120.313262][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.336531][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.347325][ T5887] usb 3-1: Product: syz
[  120.354045][ T5887] usb 3-1: Manufacturer: syz
[  120.360596][ T5888] usb 2-1: config 0 descriptor??
[  120.378242][ T5887] usb 3-1: SerialNumber: syz
[  120.467847][   T24] usb 1-1: Using ep0 maxpacket: 16
[  120.475971][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.495584][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5
[  120.504956][   T24] usb 1-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3
[  120.513402][   T24] usb 1-1: Product: syz
[  120.518710][   T24] usb 1-1: Manufacturer: syz
[  120.532533][   T24] usb 1-1: SerialNumber: syz
[  120.556327][   T24] usb 1-1: config 0 descriptor??
[  120.574038][   T24] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state
[  120.605546][   T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  120.610926][ T6259] __nla_validate_parse: 6 callbacks suppressed
[  120.610951][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'.
[  120.641705][   T24] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT)
[  120.645166][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'.
[  120.651109][   T24] usb 1-1: media controller created
[  120.668315][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'.
[  120.681443][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'.
[  120.811269][ T5887] usb 3-1: palm_os_4_probe - error -71 getting connection info
[  120.825669][ T5888] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  120.861601][ T5887] visor 3-1:1.160: Handspring Visor / Palm OS converter detected
[  120.896117][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.913753][ T5887] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  120.947769][ T5887] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  120.998865][ T6257] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI
[  121.010811][ T6257] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[  121.019262][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.1.91 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) 
[  121.031091][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  121.041181][ T6257] RIP: 0010:__mutex_lock+0x15d/0x10c0
[  121.046609][ T6257] Code: c0 80 f6 73 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d 40 ba 41 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 17 52 fb f5 4d 39 76 60 0f 85 81 0d 00 00
[  121.066502][ T6257] RSP: 0018:ffffc9000baceea0 EFLAGS: 00010202
[  121.072659][ T6257] RAX: 0000000000000019 RBX: ffffc9000bacef60 RCX: ffffffff9a73f603
[  121.080659][ T6257] RDX: ffff88802cc5bc00 RSI: ffffffff8e4fde72 RDI: 00000000000000c8
[  121.088655][ T6257] RBP: ffffc9000bacf038 R08: ffffc9000bacefa7 R09: 0000000000000000
[  121.096723][ T6257] R10: ffffc9000bacef80 R11: fffff52001759df5 R12: 0000000000000000
[  121.104719][ T6257] R13: ffffc9000bacef68 R14: 0000000000000068 R15: dffffc0000000000
[  121.112712][ T6257] FS:  00007fbdad7356c0(0000) GS:ffff888125093000(0000) knlGS:0000000000000000
[  121.121653][ T6257] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.128276][ T6257] CR2: 00002000000012c0 CR3: 0000000032d58000 CR4: 00000000003526f0
[  121.136269][ T6257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  121.144258][ T6257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  121.152337][ T6257] Call Trace:
[  121.155625][ T6257]  <TASK>
[  121.158560][ T6257]  ? __mutex_lock+0x380/0x10c0
[  121.163381][ T6257]  ? __lock_acquire+0xad5/0xd80
[  121.168251][ T6257]  ? dvb_usbv2_generic_write+0x26/0x50
[  121.173747][ T6257]  ? __pfx___mutex_lock+0x10/0x10
[  121.178829][ T6257]  ? __pfx___mutex_lock+0x10/0x10
[  121.183876][ T6257]  ? trace_contention_end+0x3c/0x120
[  121.189185][ T6257]  ? __mutex_lock+0x380/0x10c0
[  121.193965][ T6257]  dvb_usbv2_generic_write+0x26/0x50
[  121.199276][ T6257]  mxl111sf_ctrl_msg+0x172/0x2e0
[  121.204239][ T6257]  mxl111sf_write_reg+0xda/0x1f0
[  121.209285][ T6257]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[  121.214862][ T6257]  ? lockdep_hardirqs_on+0x9d/0x150
[  121.220147][ T6257]  mxl111sf_i2c_xfer+0x923/0x8aa0
[  121.225197][ T6257]  ? free_frozen_page_commit+0x743/0x1150
[  121.230972][ T6257]  ? do_raw_spin_unlock+0x13c/0x8b0
[  121.236207][ T6257]  ? rcu_is_watching+0x15/0xb0
[  121.241014][ T6257]  ? is_bpf_text_address+0x26/0x2a0
[  121.246251][ T6257]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[  121.251755][ T6257]  ? arch_stack_walk+0xff/0x150
[  121.256642][ T6257]  ? stack_trace_save+0x11a/0x1d0
[  121.261725][ T6257]  ? __kernel_text_address+0xd/0x40
[  121.266938][ T6257]  ? __pfx_stack_trace_save+0x10/0x10
[  121.272329][ T6257]  ? check_noncircular+0xee/0x160
[  121.277389][ T6257]  ? lockdep_unlock+0x8d/0x120
[  121.282162][ T6257]  ? validate_chain+0x8a7/0x24e0
[  121.287141][ T6257]  ? __lock_acquire+0xad5/0xd80
[  121.292001][ T6257]  ? do_raw_spin_lock+0x151/0x370
[  121.297042][ T6257]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[  121.302509][ T6257]  __i2c_transfer+0x859/0x2250
[  121.307283][ T6257]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  121.313198][ T6257]  ? lockdep_hardirqs_on+0x9d/0x150
[  121.318425][ T6257]  ? __pfx___i2c_transfer+0x10/0x10
[  121.323641][ T6257]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  121.329062][ T6257]  ? i2c_transfer+0x12d/0x430
[  121.333762][ T6257]  i2c_transfer+0x2c2/0x430
[  121.338280][ T6257]  ? __pfx_i2c_transfer+0x10/0x10
[  121.343317][ T6257]  i2c_transfer_buffer_flags+0x182/0x260
[  121.348967][ T6257]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  121.355135][ T6257]  ? _copy_from_user+0x95/0xb0
[  121.359926][ T6257]  i2cdev_write+0x110/0x1b0
[  121.364451][ T6257]  vfs_writev+0x5ba/0xbc0
[  121.368862][ T6257]  ? __pfx_i2cdev_write+0x10/0x10
[  121.374023][ T6257]  ? __pfx_vfs_writev+0x10/0x10
[  121.378907][ T6257]  do_writev+0x1b8/0x360
[  121.383256][ T6257]  ? __pfx_do_writev+0x10/0x10
[  121.388054][ T6257]  ? do_syscall_64+0xb6/0x230
[  121.392743][ T6257]  do_syscall_64+0xf3/0x230
[  121.397257][ T6257]  ? clear_bhb_loop+0x45/0xa0
[  121.401943][ T6257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.407855][ T6257] RIP: 0033:0x7fbdac98e169
[  121.412290][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.431903][ T6257] RSP: 002b:00007fbdad735038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  121.440331][ T6257] RAX: ffffffffffffffda RBX: 00007fbdacbb5fa0 RCX: 00007fbdac98e169
[  121.448505][ T6257] RDX: 0000000000000001 RSI: 00002000000012c0 RDI: 0000000000000008
[  121.456585][ T6257] RBP: 00007fbdaca10a68 R08: 0000000000000000 R09: 0000000000000000
[  121.464612][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.472638][ T6257] R13: 0000000000000000 R14: 00007fbdacbb5fa0 R15: 00007fbdaccdfa28
[  121.480670][ T6257]  </TASK>
[  121.483711][ T6257] Modules linked in:
[  121.488206][ T6257] ---[ end trace 0000000000000000 ]---
[  121.499219][ T6268] netlink: 92 bytes leftover after parsing attributes in process `syz.1.91'.
[  121.521395][   T24] usb 1-1: selecting invalid altsetting 2
[  121.527859][ T6257] RIP: 0010:__mutex_lock+0x15d/0x10c0
[  121.537773][ T6257] Code: c0 80 f6 73 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 07 0e 00 00 83 3d 40 ba 41 0e 00 75 21 49 8d 7e 60 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 17 52 fb f5 4d 39 76 60 0f 85 81 0d 00 00
[  121.567712][   T24] set interface failed
[  121.567807][ T5887] usb 3-1: USB disconnect, device number 6
[  121.608952][ T6257] RSP: 0018:ffffc9000baceea0 EFLAGS: 00010202
[  121.641115][ T5887] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  121.652667][ T6257] RAX: 0000000000000019 RBX: ffffc9000bacef60 RCX: ffffffff9a73f603
[  121.669600][ T5887] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  121.678986][ T6257] RDX: ffff88802cc5bc00 RSI: ffffffff8e4fde72 RDI: 00000000000000c8
[  121.711234][ T5887] visor 3-1:1.160: device disconnected
[  121.714192][ T6257] RBP: ffffc9000bacf038 R08: ffffc9000bacefa7 R09: 0000000000000000
[  121.732232][ T6257] R10: ffffc9000bacef80 R11: fffff52001759df5 R12: 0000000000000000
[  121.741292][ T6257] R13: ffffc9000bacef68 R14: 0000000000000068 R15: dffffc0000000000
[  121.761452][ T6257] FS:  00007fbdad7356c0(0000) GS:ffff888124f93000(0000) knlGS:0000000000000000
[  121.775486][ T6257] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  121.783867][ T6257] CR2: 00005633a1d4d5a8 CR3: 0000000032d58000 CR4: 00000000003526f0
[  121.796567][ T6257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  121.808829][ T6257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  121.817183][ T6257] Kernel panic - not syncing: Fatal exception
[  121.823629][ T6257] Kernel Offset: disabled
[  121.827990][ T6257] Rebooting in 86400 seconds..