last executing test programs:

18m17.988312821s ago: executing program 3 (id=63):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x20008080)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

18m16.576458468s ago: executing program 3 (id=67):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_procfs(0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
write$sequencer(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r4, 0x4b52, &(0x7f0000000040)={0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000500)
mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040044)
r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
kexec_load(0x7c1, 0x0, &(0x7f00000004c0), 0x80000)

18m14.392991711s ago: executing program 3 (id=71):
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000004010100000100000001000000230f00000000"], 0x0, 0x32}, 0x28)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86}}}, 0x104)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_clone(0x11, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000500)=""/31, 0x1f, 0x6677)
recvmsg(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002740)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000740)=""/215, 0xd7}, {&(0x7f0000000900)=""/129, 0x81}, {&(0x7f00000009c0)=""/29, 0x1d}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/220, 0xdc}, {&(0x7f0000002640)=""/252, 0xfc}], 0x8}, 0x42)
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020)

18m11.332668558s ago: executing program 3 (id=73):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)

18m9.589775659s ago: executing program 3 (id=78):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0)

18m5.671876291s ago: executing program 3 (id=86):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="273eebfe0400000086006658322f", 0xe}], 0x1)

18m3.728066136s ago: executing program 32 (id=86):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="273eebfe0400000086006658322f", 0xe}], 0x1)

17m9.387486974s ago: executing program 0 (id=167):
memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ccb000/0x9000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00009e9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
ioctl$TCXONC(r0, 0x540a, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)

17m6.560111108s ago: executing program 0 (id=169):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)

17m2.039535836s ago: executing program 0 (id=174):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0)

17m0.516352981s ago: executing program 0 (id=177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}}, 0x80)

16m57.666833785s ago: executing program 0 (id=182):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)

16m57.120187682s ago: executing program 0 (id=184):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
write$sequencer(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000040)={0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000500)
mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040044)
r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
kexec_load(0x7c1, 0x0, &(0x7f00000004c0), 0x80000)

16m41.685516673s ago: executing program 33 (id=184):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000000)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
write$sequencer(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x10)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000040)={0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000500)
mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040044)
r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
kexec_load(0x7c1, 0x0, &(0x7f00000004c0), 0x80000)

12m55.901449298s ago: executing program 2 (id=708):
socket$inet6(0xa, 0x2, 0x1000007)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000b300000000000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0780000024110000201f6ed871648b00840d3eec0000", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r3, r3, 0x0, 0x200000)

12m54.748471117s ago: executing program 2 (id=711):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
fsopen(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
clock_settime(0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)

12m52.605103707s ago: executing program 2 (id=715):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)

12m52.365223452s ago: executing program 2 (id=717):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x8, 0x4}]}, 0x14, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$usbip_server(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x1671)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
close_range(r1, 0xffffffffffffffff, 0x0)

12m51.830019296s ago: executing program 2 (id=718):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='L', 0x1})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000080)='user_id', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94)
close(r4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

12m46.780435827s ago: executing program 2 (id=742):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
io_setup(0x7, &(0x7f0000000500)=<r3=>0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}])

12m30.953607517s ago: executing program 34 (id=742):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
io_setup(0x7, &(0x7f0000000500)=<r3=>0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}])

4m42.989604014s ago: executing program 5 (id=3178):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
read(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
recvmsg(r3, 0x0, 0x0)

4m40.939465381s ago: executing program 5 (id=3183):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000700)=[{0xa019, 0x9000, 0x0, 0x0}], 0x1})

4m38.022753003s ago: executing program 5 (id=3192):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000500)=<r2=>0x0)
read$FUSE(r0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x7a, 0x31, 0x24, @dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x7800, 0x5, 0x18e}})
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}])

4m32.246557274s ago: executing program 5 (id=3228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0x8, 0x3, '\x00', 0xfffffffffffffff8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xd}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xe}]}})
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, 0x0)

4m30.983489421s ago: executing program 5 (id=3236):
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
symlink(&(0x7f0000000080)='.\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000)
userfaultfd(0x80001)
socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_ENTRY(r0, &(0x7f0000002340)={0x90, 0xfffffffffffffffe, 0x0, {0x1, 0x1, 0x1a2, 0x9ea, 0x40, 0x6f, {0x6, 0x3, 0x9, 0x200, 0x71, 0x8, 0x2, 0x7, 0x9, 0x2000, 0x7, 0x0, 0x0, 0x1, 0x7}}}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r4, 0x5452, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, 0x0)
gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x1, 0x800000000004, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb201fffe)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)

4m29.511167756s ago: executing program 5 (id=3238):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(r4, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

4m14.230635463s ago: executing program 35 (id=3238):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(r4, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

3m56.835935083s ago: executing program 7 (id=3441):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
landlock_restrict_self(r2, 0x0)
r4 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r5, 0x0, &(0x7f0000002280))
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, 0x7}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan1\x00'})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x4}, {0x1, 0x4, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x1000, 0x1a, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="7679a2e4c792", 0xfa98, 0x4, [0x2, 0x24, 0x28, 0x40, 0x26, 0x5, 0x3, 0x2f, 0x27, 0x3e, 0x2, 0x2d, 0x3f, 0x17, 0x1f, 0xc], 0x0, 0x0, 0x8}}}, {{@ip={@empty, @multicast2, 0xffffffff, 0xffffffff, 'wlan1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x6}, {0x1, 0x0, 0x4}, 0x7f, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r6, 0x2)
r7 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')
readv(r1, &(0x7f0000001e80)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1)

3m54.104707263s ago: executing program 7 (id=3455):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80e0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

3m53.750819291s ago: executing program 7 (id=3458):
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r0 = socket$inet6(0x2d, 0x806, 0x0)
accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6, 0x0, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0)
fchmod(0xffffffffffffffff, 0x100)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010"], 0x30}}, 0x0)

3m50.381208146s ago: executing program 7 (id=3477):
socket$inet6(0xa, 0x2, 0x1000007)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0780000024110000201f6ed871648b00840d3eec0000", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r2, r2, 0x0, 0x200000)

3m49.191296029s ago: executing program 7 (id=3484):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(r4, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

3m40.808875795s ago: executing program 7 (id=3509):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7})
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10)
r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
socket(0x2d, 0x2, 0x0)
shmctl$IPC_RMID(r4, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6)

3m25.579241933s ago: executing program 36 (id=3509):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7})
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10)
r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
socket(0x2d, 0x2, 0x0)
shmctl$IPC_RMID(r4, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6)

2m46.223640086s ago: executing program 6 (id=3835):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
poll(&(0x7f0000000140)=[{r0, 0xf102}], 0x1, 0x8000007)

2m46.154398041s ago: executing program 6 (id=3836):
socket$inet6(0xa, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4008845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m45.963765926s ago: executing program 6 (id=3838):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

23.924636413s ago: executing program 1 (id=4141):
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x29, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x119, 0x9, 0x0, 0x33)
connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0xe060400)
unshare(0x2c060000)
semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4)

23.5899529s ago: executing program 8 (id=4142):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r5 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x1, 0x2, 0xfffffffffffffffe, 0x9})
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

22.453359217s ago: executing program 8 (id=4144):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='L', 0x1})
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000080)='user_id', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

21.009186682s ago: executing program 1 (id=4145):
socket$inet_udp(0x2, 0x2, 0x0)
socket(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="abb7102bf379"])
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

19.069276304s ago: executing program 1 (id=4148):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(r4, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

17.065282151s ago: executing program 8 (id=4153):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x1, 0x2, 0xfffffffffffffffe, 0x9})
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

15.256113256s ago: executing program 8 (id=4155):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11c}}, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0)

14.235516537s ago: executing program 1 (id=4158):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400051f370000100002000000000000fcffffff000000d284c336b292725d034b6f823cef11d61b7397720125f251864272e486b5cb2c7b63b027688fe888defb90441a3cb201a9c2f41a9ba554104647f35730f7330db363bd036d27efcc224474678e2bb02dc2705827596d1190803786234d31bdae1ad521387e159c49b325381f5cdb85cde1b0d7be11645344f678c4"], 0x14}}, 0x20008080)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000d90c00000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc702000008000000182600", @ANYRES32, @ANYBLOB="0800000056080000000000008500000007000000090000000000000095000000000000001d00000000000000000000001eb339e2db6fbc67adefed7a2d160b85e45a389ff0f93fc3d1290cd8506858aea431a95e0f69effc1c58a665723066bec6ed55e88b2190a4842bfebd3a0099a6c20f4ef600000000000010a13c540e6cbecc4ec879e864f2382f6b87b1713c58ef1428d0fef0d5fa95717fac575080438c76a70755b7550bc940ca727d3d310a2f40ef7752b0ef9dc2163c14cc5b36c27b449dcddc8f76184b685f95f49e3ff74b9d81f26a6da534aa696d7f6ec3f151d0d39ddf1a747c799330b354e40e722a162cabe2c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

14.078487235s ago: executing program 4 (id=4159):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
socket$nl_generic(0x10, 0x3, 0x10)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(0xffffffffffffffff, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

13.102128521s ago: executing program 1 (id=4160):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000c200)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x2b, 0x6, 0x14480620, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x7}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x80640, 0x186)
syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x3, {0xfffffffffffffffd, 0x1000000000000000, 0x975a, 0x40000000000305, 0x6, 0xd, {0x5, 0x4, 0x4, 0xfe2b25e, 0x3, 0x2, 0x6, 0x4, 0x3, 0x6000, 0x3, r5, r6, 0x8, 0x1417}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ce904c90c053d8dbdd210000000800000000", @ANYRES32=r1, @ANYBLOB="1c005e80080002000000000110000100ffffffef000000000d000000"], 0x38}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000a00))
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40))
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000240)=0x1)

12.263099736s ago: executing program 1 (id=4161):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
fsopen(0x0, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=@unlock_all, 0xb)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000, 0x3f})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0)

10.484360098s ago: executing program 8 (id=4162):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x33ed0000)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$usbmon(0x0, 0x22a7, 0x20001)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x404)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

10.484167294s ago: executing program 9 (id=4163):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080))
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

9.690228995s ago: executing program 8 (id=4164):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

9.533719427s ago: executing program 9 (id=4165):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

9.475722066s ago: executing program 6 (id=3839):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "369f1eae", "bb10000000000001"}, 0x28)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x6}, 0x0, 0x0)

9.300016848s ago: executing program 9 (id=4166):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

8.217865183s ago: executing program 6 (id=4167):
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r2 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2})
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6ca662254709b89e1e000001"}})
r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil)
fstatfs(r4, &(0x7f00000003c0)=""/146)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000010b4041c9340000102030109027e000301048009080b00010100200009040000000101200009240108000a1e000809240d0601000203000c2403030001e002020600050904010000010220000904010101010220000905010920000a0306082501013c810e0009040200000102200009040101"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})

8.07927805s ago: executing program 4 (id=4168):
r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000240)=[@request_death, @clear_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="ec77b3c70b80e11380298b97c39316bd537d241cf2cfdfc81cc4a3d9ce3b4ac7e8591123380f80ad227532b79119d0802a1bc1bbd76d0488e0be0800a96f709d5640d8fb31b5ce1e6a3e9a47f9e8e22e"})

7.935715731s ago: executing program 4 (id=4169):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400051f370000100002000000000000fcffffff000000d284c336b292725d034b6f823cef11d61b7397720125f251864272e486b5cb2c7b63b027688fe888defb90441a3cb201a9c2f41a9ba554104647f35730f7330db363bd036d27efcc224474678e2bb02dc2705827596d1190803786234d31bdae1ad521387e159c49b325381f5cdb85cde1b0d7be11645344f678c4"], 0x14}}, 0x20008080)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x34, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x8001}]}, 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000d90c00000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc702000008000000182600", @ANYRES32, @ANYBLOB="0800000056080000000000008500000007000000090000000000000095000000000000001d00000000000000000000001eb339e2db6fbc67adefed7a2d160b85e45a389ff0f93fc3d1290cd8506858aea431a95e0f69effc1c58a665723066bec6ed55e88b2190a4842bfebd3a0099a6c20f4ef600000000000010a13c540e6cbecc4ec879e864f2382f6b87b1713c58ef1428d0fef0d5fa95717fac575080438c76a70755b7550bc940ca727d3d310a2f40ef7752b0ef9dc2163c14cc5b36c27b449dcddc8f76184b685f95f49e3ff74b9d81f26a6da534aa696d7f6ec3f151d0d39ddf1a747c799330b354e40e722a162cabe2c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.777271096s ago: executing program 4 (id=4170):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0)
recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000)

5.663520322s ago: executing program 4 (id=4171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

5.591378499s ago: executing program 9 (id=4172):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
setregid(0x0, 0xffffffffffffffff)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r3, r3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40080}, 0x4000855)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x5, 0x77f87502}})
socket$nl_generic(0x10, 0x3, 0x10)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none, 0x1}, 0xe)
r4 = syz_io_uring_setup(0x13c2, &(0x7f0000000440)={0x0, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000100)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}]}, 0x1, 0xfffc}, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)

4.755062127s ago: executing program 9 (id=4173):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0})

4.754805038s ago: executing program 4 (id=4174):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r4, 0x200004)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200629000000a94b9f7c6841d0764fec29"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb)

2.535086799s ago: executing program 9 (id=4175):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x40, 0x17, 0x4, "739e2a16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000)
r3 = socket(0x6, 0xa, 0x4)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200005a72cbd7000fedbdf250a000008ef0000010a0001"], 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x69}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5e}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x480c1)
readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1)

0s ago: executing program 6 (id=4176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
prlimit64(r0, 0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
pipe2(&(0x7f0000000200), 0x80800)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64], 0x48)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)

kernel console output (not intermixed with test programs):

 50:50:50:50:50:50
[  768.969237][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  769.515220][T12877] netlink: 'syz.4.2286': attribute type 27 has an invalid length.
[  769.515246][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'.
[  769.793071][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  769.793204][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  770.035812][T12137] 8021q: adding VLAN 0 to HW filter on device bond0
[  770.174447][T12137] 8021q: adding VLAN 0 to HW filter on device team0
[  770.220875][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.222749][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  770.266362][T12892] syz.4.2291 (12892) used greatest stack depth: 18224 bytes left
[  770.319233][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.319369][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  771.982289][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  776.060389][T12137] veth0_vlan: entered promiscuous mode
[  776.128864][T12137] veth1_vlan: entered promiscuous mode
[  776.407053][T12137] veth0_macvtap: entered promiscuous mode
[  776.432071][T12137] veth1_macvtap: entered promiscuous mode
[  776.527516][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.631673][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.692833][ T1496] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.699347][ T1496] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.729109][ T1496] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.730548][ T1496] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  777.783760][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.783785][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.636109][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.636133][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  784.250662][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  784.292989][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  784.301829][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  784.315292][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  784.317549][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  786.624352][ T5798] Bluetooth: hci5: command tx timeout
[  788.131444][  T673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  788.131474][  T673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.780001][ T5798] Bluetooth: hci5: command tx timeout
[  790.320217][  T673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  790.320254][  T673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.783357][ T5798] Bluetooth: hci5: command tx timeout
[  791.281156][  T673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  791.281197][  T673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.290815][  T673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  792.290854][  T673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.402408][T13216] syz_tun: left allmulticast mode
[  792.402440][T13216] syz_tun: left promiscuous mode
[  792.418088][T13216] bridge0: port 3(syz_tun) entered disabled state
[  792.558148][T13216] bridge_slave_0: left allmulticast mode
[  792.558181][T13216] bridge_slave_0: left promiscuous mode
[  792.560427][T13216] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.684276][T13216] bridge_slave_1: left allmulticast mode
[  792.685477][T13216] bridge_slave_1: left promiscuous mode
[  792.685734][T13216] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.863400][ T5798] Bluetooth: hci5: command tx timeout
[  792.870362][T13216] bond0: (slave bond_slave_0): Releasing backup interface
[  792.968419][T13216] bond0: (slave bond_slave_1): Releasing backup interface
[  793.066661][T13216] team0: Port device team_slave_0 removed
[  793.119850][T13216] team0: Port device team_slave_1 removed
[  793.129330][T13216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.129361][T13216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.159770][T13216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.159801][T13216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.210482][T13216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  793.301549][T13098] chnl_net:caif_netlink_parms(): no params data found
[  796.559860][T13257] input: syz0 as /devices/virtual/input/input5
[  798.269909][T13098] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.270054][T13098] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.270304][T13098] bridge_slave_0: entered allmulticast mode
[  798.339145][T13098] bridge_slave_0: entered promiscuous mode
[  798.376141][T13098] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.376275][T13098] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.376544][T13098] bridge_slave_1: entered allmulticast mode
[  798.457859][T13098] bridge_slave_1: entered promiscuous mode
[  799.185644][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.254997][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.167625][T13098] team0: Port device team_slave_0 added
[  801.367837][T13098] team0: Port device team_slave_1 added
[  801.509250][  T673] bridge_slave_1: left allmulticast mode
[  801.509377][  T673] bridge_slave_1: left promiscuous mode
[  801.509625][  T673] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.886177][  T673] bridge_slave_0: left allmulticast mode
[  801.886210][  T673] bridge_slave_0: left promiscuous mode
[  801.922336][  T673] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.708858][T13365] random: crng reseeded on system resumption
[  806.816649][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2469'.
[  806.845755][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2469'.
[  808.031078][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2469'.
[  810.554156][  T673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.620067][  T673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.635798][  T673] bond0 (unregistering): Released all slaves
[  810.665549][T13387] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2477'.
[  810.800047][T13098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  810.800068][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.800100][T13098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  811.065515][T13098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  811.065535][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  811.065565][T13098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  812.579491][T13412] 9p: Bad value for 'rfdno'
[  812.580609][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2486'.
[  813.725080][T13410] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2485'.
[  814.149614][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  814.149680][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  814.288582][T13098] hsr_slave_0: entered promiscuous mode
[  814.308113][T13098] hsr_slave_1: entered promiscuous mode
[  814.320094][T13098] debugfs: 'hsr0' already exists in 'hsr'
[  814.320233][T13098] Cannot create hsr debugfs directory
[  816.152620][T13449] 9p: Bad value for 'rfdno'
[  816.155295][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2498'.
[  816.405135][  T673] hsr_slave_0: left promiscuous mode
[  816.445714][  T673] hsr_slave_1: left promiscuous mode
[  816.446800][  T673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  816.446828][  T673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  816.485664][  T673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  816.485694][  T673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  816.781135][  T673] veth1_macvtap: left promiscuous mode
[  816.781249][  T673] veth0_macvtap: left promiscuous mode
[  816.811622][  T673] veth1_vlan: left promiscuous mode
[  816.811818][  T673] veth0_vlan: left promiscuous mode
[  822.934590][  T673] team0 (unregistering): Port device team_slave_1 removed
[  823.305183][  T673] team0 (unregistering): Port device team_slave_0 removed
[  824.546900][T13561] random: crng reseeded on system resumption
[  829.857671][   T67] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  829.857711][   T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  830.035964][ T3542] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  830.036004][ T3542] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  830.037336][ T3542] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  830.037370][ T3542] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  830.160759][ T3542] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  830.160801][ T3542] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.847630][ T6000] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  835.753732][ T6000] usb 6-1: Using ep0 maxpacket: 8
[  835.756541][ T6000] usb 6-1: config 0 has no interfaces?
[  835.756569][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  835.756587][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.817626][ T6000] usb 6-1: config 0 descriptor??
[  836.079042][   T10] usb 6-1: USB disconnect, device number 2
[  838.998467][T13098] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  839.240241][T13098] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  839.360204][T13098] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  839.596800][T13098] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  842.248488][T13805] Invalid source name
[  844.521199][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  844.538576][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  844.545154][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  844.573346][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  844.595344][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  846.704454][ T5798] Bluetooth: hci0: command tx timeout
[  847.127370][T13892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2643'.
[  848.783334][ T5798] Bluetooth: hci0: command tx timeout
[  850.262474][T13840] chnl_net:caif_netlink_parms(): no params data found
[  850.863475][ T5798] Bluetooth: hci0: command tx timeout
[  852.538012][T13840] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.539730][T13840] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.574645][T13840] bridge_slave_0: entered allmulticast mode
[  852.582516][T13840] bridge_slave_0: entered promiscuous mode
[  852.617474][T13840] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.617608][T13840] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.617794][T13840] bridge_slave_1: entered allmulticast mode
[  852.656766][T13840] bridge_slave_1: entered promiscuous mode
[  852.943761][ T5798] Bluetooth: hci0: command tx timeout
[  853.194376][T13840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  853.232255][T13840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.037014][T13840] team0: Port device team_slave_0 added
[  855.163918][T13840] team0: Port device team_slave_1 added
[  855.269961][T13840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.269980][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.270011][T13840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.325252][T13840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.325272][T13840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.325304][T13840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  858.509469][T13840] hsr_slave_0: entered promiscuous mode
[  858.560356][T13840] hsr_slave_1: entered promiscuous mode
[  861.492379][ T3477] bridge_slave_1: left allmulticast mode
[  861.492410][ T3477] bridge_slave_1: left promiscuous mode
[  861.492676][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.836684][ T3477] bridge_slave_0: left allmulticast mode
[  861.836718][ T3477] bridge_slave_0: left promiscuous mode
[  861.836989][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.818104][ T5798] Bluetooth: hci1: command 0x0406 tx timeout
[  867.290871][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.414176][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.511693][ T3477] bond0 (unregistering): Released all slaves
[  868.340215][ T9947] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  868.341436][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  868.463229][ T9947] usb 6-1: device descriptor read/64, error -32
[  868.716211][ T9947] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  868.990315][T14142] 9p: Bad value for 'rfdno'
[  868.999160][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2741'.
[  870.146943][ T3477] hsr_slave_0: left promiscuous mode
[  870.183663][ T3477] hsr_slave_1: left promiscuous mode
[  870.184438][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.269293][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  870.633795][T14155] 9p: Bad value for 'rfdno'
[  870.643396][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2743'.
[  875.805458][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  875.805631][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  875.821823][ T9947] usb 6-1: unable to read config index 0 descriptor/all
[  875.821979][ T9947] usb 6-1: can't read configurations, error -110
[  875.940980][ T9947] usb usb6-port1: attempt power cycle
[  877.236517][ T3477] team0 (unregistering): Port device team_slave_1 removed
[  877.333928][ T3477] team0 (unregistering): Port device team_slave_0 removed
[  877.373291][ T9947] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  877.395498][ T9947] usb 6-1: device descriptor read/8, error -32
[  877.643402][ T9947] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  877.668553][ T9947] usb 6-1: device descriptor read/8, error -32
[  877.775670][ T9947] usb usb6-port1: unable to enumerate USB device
[  887.462172][T13840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  887.947763][T13840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  888.025003][T13840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  888.205734][T13840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  889.767332][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2829'.
[  891.098191][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2829'.
[  891.225737][T13840] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.381621][T13840] 8021q: adding VLAN 0 to HW filter on device team0
[  891.486524][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.488258][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.605277][  T673] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.605413][  T673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.519537][T14457] binder: 14455:14457 ioctl 4018620d 0 returned -22
[  893.771570][T13840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.324223][T13840] veth0_vlan: entered promiscuous mode
[  894.348191][T13840] veth1_vlan: entered promiscuous mode
[  895.873562][T13840] veth0_macvtap: entered promiscuous mode
[  895.902734][T13840] veth1_macvtap: entered promiscuous mode
[  895.948510][T13840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  895.965240][T13840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.068604][   T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.068865][   T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.069368][   T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.069885][   T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  898.035134][T14493] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.036580][T14493] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.592533][T14493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  898.597650][T14493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  900.596227][ T6814] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  900.622713][ T6814] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  900.642212][ T6814] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  900.679045][ T6814] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  902.286608][ T1377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.286630][ T1377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  902.904801][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.904825][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.599988][T14570] netlink: 'syz.7.2889': attribute type 10 has an invalid length.
[  903.600007][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2889'.
[  903.600134][T14570] batadv0: entered promiscuous mode
[  903.600149][T14570] batadv0: entered allmulticast mode
[  903.608927][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  903.612041][T14570] bridge0: port 3(batadv0) entered blocking state
[  903.612612][T14570] bridge0: port 3(batadv0) entered disabled state
[  903.704662][T14571] bridge0: port 3(batadv0) entered disabled state
[  903.709914][ T1377] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  903.709935][ T1377] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  903.910378][ T5798] Bluetooth: hci2: command 0x0406 tx timeout
[  903.942299][T14571] bridge_slave_0: left allmulticast mode
[  903.942322][T14571] bridge_slave_0: left promiscuous mode
[  903.952816][T14571] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.042428][T14571] bridge_slave_1: left allmulticast mode
[  904.042449][T14571] bridge_slave_1: left promiscuous mode
[  904.042624][T14571] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.238029][T14571] bond0: (slave bond_slave_0): Releasing backup interface
[  904.486895][T14571] bond0: (slave bond_slave_1): Releasing backup interface
[  904.571760][T14571] team0: Port device team_slave_0 removed
[  904.984402][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  905.563445][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  905.567356][T14571] team0: Port device team_slave_1 removed
[  905.567823][T14571] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.568248][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  905.570271][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  905.572867][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  905.719811][T14571] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.760807][T14571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  907.325938][T14603] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.338685][T14603] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.832530][ T5800] Bluetooth: hci5: command tx timeout
[  908.772907][T14603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  908.780914][T14603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  909.903223][ T5800] Bluetooth: hci5: command tx timeout
[  909.985221][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2915'.
[  910.082942][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2915'.
[  911.570920][T14669] bridge0: port 1(syz_tun) entered blocking state
[  911.571033][T14669] bridge0: port 1(syz_tun) entered disabled state
[  911.571241][T14669] syz_tun: entered allmulticast mode
[  911.575991][T14669] syz_tun: entered promiscuous mode
[  911.983247][ T5800] Bluetooth: hci5: command tx timeout
[  911.999241][T14673] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2928'.
[  912.257953][T14639] macvtap1: entered promiscuous mode
[  912.257977][T14639] erspan0: entered promiscuous mode
[  912.258156][T14639] macvtap1: entered allmulticast mode
[  912.258172][T14639] erspan0: entered allmulticast mode
[  912.412481][T14642] erspan0: left allmulticast mode
[  912.412510][T14642] erspan0: left promiscuous mode
[  912.450239][ T6077] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  912.497065][T14673] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2928'.
[  913.137430][ T6077] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.222849][ T6077] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  913.359550][ T6077] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  914.192511][ T5800] Bluetooth: hci5: command tx timeout
[  915.123425][ T3542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.252385][T14735] JFS: charset not found
[  916.895835][T14590] chnl_net:caif_netlink_parms(): no params data found
[  918.381390][ T3542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.421656][ T3542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.578654][ T3542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.686738][T14828] binder: 14827:14828 ioctl c0306201 2000000003c0 returned -14
[  922.773910][T14590] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.774127][T14590] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.774408][T14590] bridge_slave_0: entered allmulticast mode
[  922.796634][T14590] bridge_slave_0: entered promiscuous mode
[  922.902188][T14590] bridge0: port 2(bridge_slave_1) entered blocking state
[  922.902321][T14590] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.902539][T14590] bridge_slave_1: entered allmulticast mode
[  922.944684][T14590] bridge_slave_1: entered promiscuous mode
[  923.403274][T14590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.457071][T14590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.404743][T14590] team0: Port device team_slave_0 added
[  925.817718][T14590] team0: Port device team_slave_1 added
[  926.378778][T14590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.378793][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.378815][T14590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.404026][T14590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.404080][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.404203][T14590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.655786][ T3542] bridge_slave_1: left allmulticast mode
[  926.655809][ T3542] bridge_slave_1: left promiscuous mode
[  926.656065][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.890876][ T3542] bridge_slave_0: left allmulticast mode
[  926.890900][ T3542] bridge_slave_0: left promiscuous mode
[  927.036577][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.804127][T14926] binder: 14925:14926 ioctl 4018620d 0 returned -22
[  929.164071][T14933] netlink: 'syz.4.3024': attribute type 10 has an invalid length.
[  929.164088][T14933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3024'.
[  930.504107][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  930.597833][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  930.654331][ T3542] bond0 (unregistering): Released all slaves
[  930.815115][T14933] batadv0: entered promiscuous mode
[  930.815143][T14933] batadv0: entered allmulticast mode
[  930.993546][T14933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  930.996339][T14933] bridge0: port 2(batadv0) entered blocking state
[  930.997282][T14933] bridge0: port 2(batadv0) entered disabled state
[  931.039559][T14590] hsr_slave_0: entered promiscuous mode
[  931.080466][T14590] hsr_slave_1: entered promiscuous mode
[  931.081117][T14590] debugfs: 'hsr0' already exists in 'hsr'
[  931.081136][T14590] Cannot create hsr debugfs directory
[  931.216524][ T3592] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  931.216546][ T3592] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  932.727753][T14997] binder: 14995:14997 ioctl 4018620d 0 returned -22
[  933.587805][ T3542] hsr_slave_0: left promiscuous mode
[  933.623330][ T3542] hsr_slave_1: left promiscuous mode
[  933.626782][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  933.626812][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.697919][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  933.698787][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.036047][ T3542] veth1_macvtap: left promiscuous mode
[  934.036137][ T3542] veth0_macvtap: left promiscuous mode
[  934.038751][ T3542] veth1_vlan: left promiscuous mode
[  934.038881][ T3542] veth0_vlan: left promiscuous mode
[  937.029691][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  937.029765][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  937.805331][ T3542] team0 (unregistering): Port device team_slave_1 removed
[  937.989099][ T3542] team0 (unregistering): Port device team_slave_0 removed
[  941.625390][T15152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  947.677153][T13028] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  947.754570][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3132'.
[  947.833948][T13028] usb 5-1: Using ep0 maxpacket: 8
[  947.849860][T13028] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  947.869610][T13028] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  947.869647][T13028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.869670][T13028] usb 5-1: Product: syz
[  947.869687][T13028] usb 5-1: Manufacturer: syz
[  947.869710][T13028] usb 5-1: SerialNumber: syz
[  947.925034][T13028] usb 5-1: config 0 descriptor??
[  948.116084][T13028] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  948.116209][T13028] usb 5-1: setting power ON
[  948.170673][T13028] dvb-usb: bulk message failed: -22 (2/0)
[  948.880190][T13028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  948.900928][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3132'.
[  948.971564][T13028] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  948.971677][T13028] usb 5-1: media controller created
[  949.642567][T13028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  951.229020][T13028] usb 5-1: selecting invalid altsetting 6
[  951.229054][T13028] usb 5-1: digital interface selection failed (-22)
[  951.229073][T13028] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  951.232231][T13028] usb 5-1: setting power OFF
[  951.232468][T13028] dvb-usb: bulk message failed: -22 (2/0)
[  951.232489][T13028] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  951.232504][T13028] (NULL device *): no alternate interface
[  952.658420][T15286] JFS: charset not found
[  952.916659][T13028] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  954.853457][T13028] usb 5-1: USB disconnect, device number 10
[  956.486261][T14590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  956.651578][T14590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  956.759769][T14590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  956.853146][T14590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  957.559014][T14590] 8021q: adding VLAN 0 to HW filter on device bond0
[  957.754467][T14590] 8021q: adding VLAN 0 to HW filter on device team0
[  958.027665][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.031255][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[  959.002730][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.012402][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[  959.104081][T15351] binder: 15350:15351 ioctl c0306201 2000000003c0 returned -14
[  960.565562][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  960.957313][T15374] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3169'.
[  961.759163][ T5873] usb 8-1: Using ep0 maxpacket: 8
[  961.778248][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.778275][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  961.778312][ T5873] usb 8-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  961.778330][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.869303][ T5873] usb 8-1: config 0 descriptor??
[  965.349294][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'.
[  966.893238][ T6000] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  967.099991][ T6000] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  967.100013][ T6000] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  967.100029][ T6000] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  967.100063][ T6000] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  967.109076][ T6000] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  967.194202][ T6000] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  967.194237][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  967.194261][ T6000] usb 5-1: Product: syz
[  967.194278][ T6000] usb 5-1: Manufacturer: syz
[  967.374534][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  967.406599][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  967.486762][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  967.501813][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  967.525948][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  967.612737][ T6000] cdc_wdm 5-1:1.0: skipping garbage
[  967.612759][ T6000] cdc_wdm 5-1:1.0: skipping garbage
[  968.084067][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  968.155430][ T6000] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  968.155515][ T6000] cdc_wdm 5-1:1.0: Unknown control protocol
[  968.176465][ T5873] usbhid 8-1:0.0: can't add hid device: -32
[  968.176608][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -32
[  968.248845][ T5881] usb 6-1: Using ep0 maxpacket: 8
[  968.267161][ T5881] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  968.289337][ T5881] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  968.289375][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.289390][ T5881] usb 6-1: Product: syz
[  968.289401][ T5881] usb 6-1: Manufacturer: syz
[  968.289412][ T5881] usb 6-1: SerialNumber: syz
[  968.411677][ T5881] usb 6-1: config 0 descriptor??
[  968.506065][ T5881] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  968.506116][ T5881] usb 6-1: setting power ON
[  968.506130][ T5881] dvb-usb: bulk message failed: -22 (2/0)
[  969.104771][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  969.105918][ T5881] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  969.105978][ T5881] usb 6-1: media controller created
[  969.163890][ T5788] usb 5-1: USB disconnect, device number 11
[  969.257666][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  969.362753][ T5881] usb 6-1: selecting invalid altsetting 6
[  969.362783][ T5881] usb 6-1: digital interface selection failed (-22)
[  969.362801][ T5881] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  969.387989][ T5881] usb 6-1: setting power OFF
[  969.388015][ T5881] dvb-usb: bulk message failed: -22 (2/0)
[  969.388034][ T5881] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  969.388048][ T5881] (NULL device *): no alternate interface
[  969.582892][ T5881] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  969.638579][ T5881] usb 6-1: USB disconnect, device number 7
[  969.903308][ T5798] Bluetooth: hci0: command tx timeout
[  970.072762][ T5873] usb 8-1: USB disconnect, device number 2
[  970.367761][T15469] binder: 15467:15469 ioctl 4018620d 0 returned -22
[  971.983299][ T5798] Bluetooth: hci0: command tx timeout
[  974.063332][ T5798] Bluetooth: hci0: command tx timeout
[  974.492350][T15528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  975.205373][T15543] io-wq is not configured for unbound workers
[  975.348280][T15427] chnl_net:caif_netlink_parms(): no params data found
[  976.143783][ T5798] Bluetooth: hci0: command tx timeout
[  976.790195][T15427] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.790284][T15427] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.790481][T15427] bridge_slave_0: entered allmulticast mode
[  976.814053][T15427] bridge_slave_0: entered promiscuous mode
[  978.469260][T15427] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.469391][T15427] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.469608][T15427] bridge_slave_1: entered allmulticast mode
[  978.535062][T15427] bridge_slave_1: entered promiscuous mode
[  978.964916][T15427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  979.445667][T15427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  979.553277][ T3477] bridge_slave_1: left allmulticast mode
[  979.553309][ T3477] bridge_slave_1: left promiscuous mode
[  979.553563][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.593189][ T5881] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  979.655014][ T3477] bridge_slave_0: left allmulticast mode
[  979.655038][ T3477] bridge_slave_0: left promiscuous mode
[  979.677276][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.812185][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.020533][T15610] fuse: Bad value for 'fd'
[  980.279592][ T5881] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  980.279625][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.279641][ T5881] usb 6-1: Product: syz
[  980.279652][ T5881] usb 6-1: Manufacturer: syz
[  980.279663][ T5881] usb 6-1: SerialNumber: syz
[  980.342090][ T5881] usb 6-1: config 0 descriptor??
[  980.391769][ T5881] usb 6-1: bad CDC descriptors
[  980.407297][ T5881] usb 6-1: unsupported MDLM descriptors
[  981.153325][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  982.725058][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  983.586362][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.058310][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.131380][ T3477] bond0 (unregistering): Released all slaves
[  984.964951][T15427] team0: Port device team_slave_0 added
[  985.040571][T15427] team0: Port device team_slave_1 added
[  985.413683][T15427] batman_adv: batadv0: Adding interface: batadv_slave_0
[  985.413698][T15427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  985.413721][T15427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  986.401760][T15427] batman_adv: batadv0: Adding interface: batadv_slave_1
[  986.401781][T15427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.401814][T15427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  986.845406][T15427] hsr_slave_0: entered promiscuous mode
[  986.846320][T15427] hsr_slave_1: entered promiscuous mode
[  987.194613][ T3477] hsr_slave_0: left promiscuous mode
[  987.263224][ T3477] hsr_slave_1: left promiscuous mode
[  987.264349][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  987.313860][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.887058][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3293'.
[  988.897104][ T3477] team0 (unregistering): Port device team_slave_1 removed
[  989.010954][ T3477] team0 (unregistering): Port device team_slave_0 removed
[  989.101301][T15754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.239835][ T5881] usb 6-1: USB disconnect, device number 8
[  990.513211][T10701] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  990.513495][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  990.660876][T10701] usb 5-1: device descriptor read/64, error -32
[  990.903889][T10701] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  991.063248][T10701] usb 5-1: Using ep0 maxpacket: 8
[  991.071735][T10701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.071761][T10701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  991.071793][T10701] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  991.071811][T10701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.854427][T10701] usb 5-1: config 0 descriptor??
[  994.605767][ T5873] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  994.606007][    C1] raw-gadget.2 gadget.7: ignoring, device is not running
[  994.756427][ T5873] usb 8-1: device descriptor read/64, error -32
[  995.034906][ T5873] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  995.035139][    C1] raw-gadget.2 gadget.7: ignoring, device is not running
[  995.186008][ T5873] usb 8-1: device descriptor read/64, error -32
[  995.303670][ T5873] usb usb8-port1: attempt power cycle
[  995.736417][ T5873] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  995.765748][    C1] raw-gadget.2 gadget.7: ignoring, device is not running
[  995.766060][ T5873] usb 8-1: device descriptor read/8, error -32
[  995.842990][T10701] cypress 0003:04B4:DE61.0001: invalid report_size 60495
[  995.848550][T10701] cypress 0003:04B4:DE61.0001: item 0 2 1 7 parsing failed
[  995.882410][ T5873] raw-gadget.2 gadget.7: failed to queue suspend event
[  995.885042][ T5873] raw-gadget.2 gadget.7: failed to queue reset event
[  995.963730][ T5873] raw-gadget.2 gadget.7: failed to queue resume event
[  995.968535][T10701] cypress 0003:04B4:DE61.0001: parse failed
[  995.968610][T10701] cypress 0003:04B4:DE61.0001: probe with driver cypress failed with error -22
[  996.033781][ T5873] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  996.063592][    C1] raw-gadget.2 gadget.7: ignoring, device is not running
[  996.063724][ T5873] usb 8-1: device descriptor read/8, error -32
[  996.174013][ T5873] raw-gadget.2 gadget.7: failed to queue suspend event
[  996.195408][ T5873] usb usb8-port1: unable to enumerate USB device
[  996.987956][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  997.076950][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  997.079955][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  997.179828][T10701] usb 5-1: USB disconnect, device number 13
[  997.207249][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  997.229108][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  998.480727][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  998.480780][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  999.343495][ T5800] Bluetooth: hci5: command tx timeout
[ 1000.225499][ T5873] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1000.399152][ T5873] usb 5-1: Using ep0 maxpacket: 8
[ 1000.425400][ T5873] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 1000.491378][ T5873] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1000.491402][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.491417][ T5873] usb 5-1: Product: syz
[ 1000.491428][ T5873] usb 5-1: Manufacturer: syz
[ 1000.491439][ T5873] usb 5-1: SerialNumber: syz
[ 1000.541990][ T5873] usb 5-1: config 0 descriptor??
[ 1000.572665][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1000.572709][ T5873] usb 5-1: setting power ON
[ 1000.572725][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[ 1000.662942][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1000.677002][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1000.677068][ T5873] usb 5-1: media controller created
[ 1000.800781][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1000.976068][ T5873] usb 5-1: selecting invalid altsetting 6
[ 1000.976095][ T5873] usb 5-1: digital interface selection failed (-22)
[ 1000.976112][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1000.981857][ T5873] usb 5-1: setting power OFF
[ 1000.981884][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[ 1000.981939][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1000.981955][ T5873] (NULL device *): no alternate interface
[ 1001.098808][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'.
[ 1001.148839][T15950] dvb-usb: bulk message failed: -22 (3/0)
[ 1001.148861][T15950] dvb-usb: bulk message failed: -22 (4/0)
[ 1001.148872][T15950] cxusb: i2c read failed
[ 1001.428351][ T5800] Bluetooth: hci5: command tx timeout
[ 1003.094152][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1003.203090][ T5873] usb 5-1: USB disconnect, device number 14
[ 1003.278762][T15833] chnl_net:caif_netlink_parms(): no params data found
[ 1003.503609][ T5800] Bluetooth: hci5: command tx timeout
[ 1003.699952][T15427] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1003.728944][T15814] raw-gadget.2 gadget.7: failed to queue disconnect event
[ 1003.823278][T15427] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1004.917569][T15427] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1005.155084][T15427] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1005.583582][ T5800] Bluetooth: hci5: command tx timeout
[ 1005.919604][T15833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.919805][T15833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.920018][T15833] bridge_slave_0: entered allmulticast mode
[ 1005.960189][T15833] bridge_slave_0: entered promiscuous mode
[ 1005.988838][T15833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.988969][T15833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.989598][T15833] bridge_slave_1: entered allmulticast mode
[ 1006.021303][T15833] bridge_slave_1: entered promiscuous mode
[ 1006.393145][ T5873] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1006.393420][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1006.395949][T15833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1006.507492][T15833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1006.534014][ T5873] usb 5-1: device descriptor read/64, error -32
[ 1006.668334][ T1209] bridge_slave_1: left allmulticast mode
[ 1006.668365][ T1209] bridge_slave_1: left promiscuous mode
[ 1006.672100][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.767031][ T1209] bridge_slave_0: left allmulticast mode
[ 1006.767061][ T1209] bridge_slave_0: left promiscuous mode
[ 1006.767344][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.783453][ T5873] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1006.958713][ T5873] usb 5-1: Using ep0 maxpacket: 8
[ 1006.973241][ T5873] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 1006.982365][ T5873] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1006.982499][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.982523][ T5873] usb 5-1: Product: syz
[ 1006.982534][ T5873] usb 5-1: Manufacturer: syz
[ 1006.982545][ T5873] usb 5-1: SerialNumber: syz
[ 1007.084229][ T5873] usb 5-1: config 0 descriptor??
[ 1007.110864][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1007.110921][ T5873] usb 5-1: setting power ON
[ 1007.110942][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[ 1007.178894][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1007.180255][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1007.180299][ T5873] usb 5-1: media controller created
[ 1007.346434][T16076] dvb-usb: bulk message failed: -22 (3/0)
[ 1007.346455][T16076] dvb-usb: bulk message failed: -22 (73/0)
[ 1007.396113][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1007.646666][ T5873] usb 5-1: selecting invalid altsetting 6
[ 1007.646694][ T5873] usb 5-1: digital interface selection failed (-22)
[ 1007.646712][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1007.647990][ T5873] usb 5-1: setting power OFF
[ 1007.648013][ T5873] dvb-usb: bulk message failed: -22 (2/0)
[ 1007.648030][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1007.648044][ T5873] (NULL device *): no alternate interface
[ 1007.891727][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1007.917396][ T5873] usb 5-1: USB disconnect, device number 16
[ 1009.561965][ T1209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1009.603782][ T1209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1009.633932][ T1209] bond0 (unregistering): Released all slaves
[ 1009.799739][T15833] team0: Port device team_slave_0 added
[ 1009.834576][T15833] team0: Port device team_slave_1 added
[ 1009.894639][T16119] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3429'.
[ 1009.988614][T16120] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3429'.
[ 1010.460509][T15833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1010.460529][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.460560][T15833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1010.462893][T15833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1010.462907][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1010.462932][T15833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1011.089086][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'.
[ 1011.261672][T15833] hsr_slave_0: entered promiscuous mode
[ 1011.264720][T15833] hsr_slave_1: entered promiscuous mode
[ 1011.276472][T15833] debugfs: 'hsr0' already exists in 'hsr'
[ 1011.276502][T15833] Cannot create hsr debugfs directory
[ 1011.280171][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'.
[ 1011.423197][T13028] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1011.575936][T13028] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1011.575970][T13028] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1011.575993][T13028] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1011.576046][T13028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1011.576076][T13028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1011.580568][T13028] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1011.580602][T13028] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1011.580625][T13028] usb 8-1: Product: syz
[ 1011.580642][T13028] usb 8-1: Manufacturer: syz
[ 1011.705941][T13028] cdc_wdm 8-1:1.0: skipping garbage
[ 1011.705964][T13028] cdc_wdm 8-1:1.0: skipping garbage
[ 1011.755744][T13028] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1011.755768][T13028] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1011.780043][ T1209] hsr_slave_0: left promiscuous mode
[ 1011.817929][ T1209] hsr_slave_1: left promiscuous mode
[ 1011.838570][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.881771][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1012.092350][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1012.250501][ T5873] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1012.250526][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.250541][ T5873] usb 5-1: Product: syz
[ 1012.250552][ T5873] usb 5-1: Manufacturer: syz
[ 1012.250562][ T5873] usb 5-1: SerialNumber: syz
[ 1012.360954][ T5873] usb 5-1: config 0 descriptor??
[ 1012.385232][ T5873] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 017
[ 1012.751482][T13028] usb 8-1: USB disconnect, device number 7
[ 1013.060912][T16161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.076978][T16161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.114462][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'.
[ 1014.716710][ T1209] team0 (unregistering): Port device team_slave_1 removed
[ 1014.894049][ T1209] team0 (unregistering): Port device team_slave_0 removed
[ 1015.046683][ T5873] i2c i2c-1: failure reading functionality
[ 1015.245397][ T5873] i2c i2c-1: connected i2c-tiny-usb device
[ 1016.853532][ T5873] usb 5-1: USB disconnect, device number 17
[ 1017.556429][T15427] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1017.668034][T15427] 8021q: adding VLAN 0 to HW filter on device team0
[ 1017.710083][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.710241][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.011367][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.011461][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.953272][ T5873] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1020.103141][ T5873] usb 8-1: Using ep0 maxpacket: 16
[ 1020.108137][ T5873] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1020.109401][ T5873] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.109458][ T5873] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping
[ 1020.111589][ T5873] usb 8-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40
[ 1020.111610][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.111626][ T5873] usb 8-1: Product: syz
[ 1020.111636][ T5873] usb 8-1: Manufacturer: syz
[ 1020.111675][ T5873] usb 8-1: SerialNumber: syz
[ 1021.184479][T15833] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1021.286023][T15833] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1021.678180][T15833] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1021.886493][T15833] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1023.641229][T15833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1023.858687][T15833] 8021q: adding VLAN 0 to HW filter on device team0
[ 1023.963164][T15427] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1024.017593][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.018027][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1024.224798][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.225900][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1025.139426][T16336] binder: 16335:16336 ioctl 4018620d 0 returned -22
[ 1025.714168][ T5873] usb 8-1: unit 2 not found!
[ 1026.616296][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1026.672759][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1026.695456][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1026.714560][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1026.746778][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1027.392449][ T5873] snd-usb-hiface 8-1:1.1: probe with driver snd-usb-hiface failed with error -22
[ 1027.482188][ T5873] usb 8-1: can't set first interface for hiFace device.
[ 1027.482220][ T5873] snd-usb-hiface 8-1:1.2: probe with driver snd-usb-hiface failed with error -5
[ 1027.670330][ T5873] usb 8-1: USB disconnect, device number 8
[ 1028.871973][ T5800] Bluetooth: hci1: command tx timeout
[ 1029.785212][T15833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1030.943253][ T5800] Bluetooth: hci1: command tx timeout
[ 1031.531640][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3515'.
[ 1031.618337][T16399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3515'.
[ 1033.011175][T16356] chnl_net:caif_netlink_parms(): no params data found
[ 1033.027121][ T5800] Bluetooth: hci1: command tx timeout
[ 1033.749392][T16356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1033.749605][T16356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.749821][T16356] bridge_slave_0: entered allmulticast mode
[ 1033.752621][T16356] bridge_slave_0: entered promiscuous mode
[ 1033.808690][T16356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1033.808832][T16356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.809039][T16356] bridge_slave_1: entered allmulticast mode
[ 1033.932925][T16356] bridge_slave_1: entered promiscuous mode
[ 1035.211890][ T5800] Bluetooth: hci1: command tx timeout
[ 1035.274379][T16356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1035.337301][T16356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1035.373319][ T9705] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 1035.432473][T16356] team0: Port device team_slave_0 added
[ 1035.447873][T16356] team0: Port device team_slave_1 added
[ 1035.505430][ T9705] usb 5-1: device descriptor read/64, error -71
[ 1035.763321][ T9705] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[ 1035.770915][T16356] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1035.770931][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1035.770957][T16356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1035.963331][ T9705] usb 5-1: device descriptor read/64, error -71
[ 1036.042440][T16356] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.042459][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1036.042491][T16356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1036.091843][ T9705] usb usb5-port1: attempt power cycle
[ 1036.214295][T15833] veth0_vlan: entered promiscuous mode
[ 1036.397821][   T44] bridge_slave_1: left allmulticast mode
[ 1036.397851][   T44] bridge_slave_1: left promiscuous mode
[ 1036.398116][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.443185][ T9705] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[ 1036.463812][ T9705] usb 5-1: device descriptor read/8, error -71
[ 1036.481991][   T44] bridge_slave_0: left allmulticast mode
[ 1036.482021][   T44] bridge_slave_0: left promiscuous mode
[ 1036.482284][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.713516][ T9705] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[ 1036.734083][ T9705] usb 5-1: device descriptor read/8, error -71
[ 1036.864553][ T9705] usb usb5-port1: unable to enumerate USB device
[ 1037.914100][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1037.994151][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1038.040750][   T44] bond0 (unregistering): Released all slaves
[ 1038.130299][T16356] hsr_slave_0: entered promiscuous mode
[ 1038.134454][T16356] hsr_slave_1: entered promiscuous mode
[ 1038.151819][T16356] debugfs: 'hsr0' already exists in 'hsr'
[ 1038.151855][T16356] Cannot create hsr debugfs directory
[ 1038.274215][T15833] veth1_vlan: entered promiscuous mode
[ 1038.667068][   T44] hsr_slave_0: left promiscuous mode
[ 1038.684679][   T44] hsr_slave_1: left promiscuous mode
[ 1038.685855][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1038.712096][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1039.755172][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1039.840470][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1040.586371][T15833] veth0_macvtap: entered promiscuous mode
[ 1040.736268][T15833] veth1_macvtap: entered promiscuous mode
[ 1042.562038][T15833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1042.642676][T15833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1042.746385][   T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.746972][   T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.747223][   T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.747261][   T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.484295][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1047.552320][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1047.575921][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1047.591027][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1047.599629][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1048.385616][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1048.385636][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1049.517205][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1049.517228][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1050.063577][ T5798] Bluetooth: hci0: command tx timeout
[ 1050.305092][T16356] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1050.445195][T16356] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1050.577596][T16356] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1050.676633][T16356] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1052.143156][ T5798] Bluetooth: hci0: command tx timeout
[ 1052.378815][T16618] chnl_net:caif_netlink_parms(): no params data found
[ 1053.008911][T16618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.009005][T16618] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.009196][T16618] bridge_slave_0: entered allmulticast mode
[ 1053.030578][T16618] bridge_slave_0: entered promiscuous mode
[ 1053.060432][T16618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.060556][T16618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.060738][T16618] bridge_slave_1: entered allmulticast mode
[ 1053.088375][T16618] bridge_slave_1: entered promiscuous mode
[ 1053.173529][T16356] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1053.301715][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.331407][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.550236][T16618] team0: Port device team_slave_0 added
[ 1053.573205][   T36] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 1054.233253][ T5798] Bluetooth: hci0: command tx timeout
[ 1054.261240][   T36] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.265765][   T36] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1054.265855][   T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.265918][   T36] usb 9-1: Product: syz
[ 1054.265973][   T36] usb 9-1: Manufacturer: syz
[ 1054.266016][   T36] usb 9-1: SerialNumber: syz
[ 1054.345056][   T36] usb 9-1: config 0 descriptor??
[ 1054.351574][T16618] team0: Port device team_slave_1 added
[ 1054.375714][   T36] usb 9-1: bad CDC descriptors
[ 1054.382513][   T36] usb 9-1: unsupported MDLM descriptors
[ 1054.544781][T16356] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.704839][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1054.704858][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1054.704888][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1054.707521][T16836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.708190][T16836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.890652][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1054.890666][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1054.890688][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1055.012343][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.012657][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1055.247282][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.250423][ T6814] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1055.516829][T16618] hsr_slave_0: entered promiscuous mode
[ 1055.555973][T16618] hsr_slave_1: entered promiscuous mode
[ 1056.303340][ T5798] Bluetooth: hci0: command tx timeout
[ 1058.345465][ T5873] usb 9-1: USB disconnect, device number 2
[ 1059.571463][T16356] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1059.912363][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.912436][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.945659][T16618] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1060.059817][T16618] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1060.244089][T16618] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1060.357724][T16618] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1060.764598][T16356] veth0_vlan: entered promiscuous mode
[ 1060.875989][T16356] veth1_vlan: entered promiscuous mode
[ 1061.211930][T16356] veth0_macvtap: entered promiscuous mode
[ 1061.278495][T16356] veth1_macvtap: entered promiscuous mode
[ 1061.319884][T16618] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1061.452258][T16356] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1061.526299][T16618] 8021q: adding VLAN 0 to HW filter on device team0
[ 1061.565485][T16356] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1061.604514][ T3477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.607029][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.607240][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1061.744296][ T3477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.935353][   T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.966882][   T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.983267][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.984901][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1063.963231][ T5873] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[ 1064.124840][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1064.124871][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1064.124925][ T5873] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1064.124954][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.176330][ T5873] usb 5-1: config 0 descriptor??
[ 1064.230208][ T5873] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1064.230419][ T5873] dvb-usb: bulk message failed: -22 (3/0)
[ 1064.251542][ T5873] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1064.252498][ T5873] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1064.252563][ T5873] usb 5-1: media controller created
[ 1064.276090][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1064.297078][ T5873] dvb-usb: bulk message failed: -22 (6/0)
[ 1064.297213][ T5873] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1064.330674][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6
[ 1064.408423][ T5873] dvb-usb: schedule remote query interval to 150 msecs.
[ 1064.408452][ T5873] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1064.472907][ T5788] usb 5-1: USB disconnect, device number 22
[ 1066.340711][ T5788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1066.635137][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1066.635162][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1067.097021][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.097043][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1067.471485][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.780787][T17094] fuse: Bad value for 'fd'
[ 1068.980655][T16618] veth0_vlan: entered promiscuous mode
[ 1069.095094][T16618] veth1_vlan: entered promiscuous mode
[ 1069.224813][T16618] veth0_macvtap: entered promiscuous mode
[ 1069.276978][T16618] veth1_macvtap: entered promiscuous mode
[ 1069.366258][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1069.395687][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1069.433981][   T44] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.434275][   T44] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.434320][   T44] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.434361][   T44] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.280888][T17124] fuse: Bad value for 'fd'
[ 1073.074982][T16591] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[ 1073.359928][T16591] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1073.359950][T16591] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1073.360075][T16591] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1073.360094][T16591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.461505][T16591] usb 5-1: config 0 descriptor??
[ 1073.511115][T16591] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1073.529918][T16591] dvb-usb: bulk message failed: -22 (3/0)
[ 1073.606017][T16591] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1073.627114][T16591] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1073.627159][T16591] usb 5-1: media controller created
[ 1073.631928][T16591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1073.697501][T16591] dvb-usb: bulk message failed: -22 (6/0)
[ 1073.697595][T16591] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1073.773192][T16591] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[ 1073.780726][T16591] dvb-usb: schedule remote query interval to 150 msecs.
[ 1073.780750][T16591] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1073.837197][T16591] usb 5-1: USB disconnect, device number 23
[ 1073.862346][T17161] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3780'.
[ 1074.280099][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3780'.
[ 1074.426781][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3780'.
[ 1074.907073][T16591] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1074.949138][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1074.949162][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1075.691853][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1075.691892][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.059751][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3787'.
[ 1077.478992][T17206] binder: 17205:17206 ioctl 4018620d 0 returned -22
[ 1078.582568][T17221] fuse: Bad value for 'fd'
[ 1080.779803][T17269] fuse: Bad value for 'fd'
[ 1081.035646][T17276] binder_alloc: 17275: binder_alloc_buf, no vma
[ 1081.392211][T17287] fuse: Bad value for 'fd'
[ 1082.658811][T17309] fuse: Bad value for 'fd'
[ 1084.422879][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1084.486915][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1084.518146][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1084.528945][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1084.530708][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1086.722146][ T5800] Bluetooth: hci6: command tx timeout
[ 1086.759946][T17323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.760724][T17323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.640356][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1087.646810][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1087.934397][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3850'.
[ 1087.996391][T17345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3850'.
[ 1088.048897][T17352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3850'.
[ 1088.783092][ T5800] Bluetooth: hci6: command tx timeout
[ 1088.886206][T17362] mmap: syz.9.3855 (17362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1089.185232][T17368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1089.341303][T17313] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.399920][T17313] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.863125][ T5800] Bluetooth: hci6: command tx timeout
[ 1091.028692][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3857'.
[ 1091.404439][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1091.423803][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1092.528705][ T8013] bridge0: port 1(syz_tun) entered disabled state
[ 1093.167065][ T5800] Bluetooth: hci6: command tx timeout
[ 1093.639250][ T8013] syz_tun (unregistering): left allmulticast mode
[ 1093.639282][ T8013] syz_tun (unregistering): left promiscuous mode
[ 1093.639376][ T8013] bridge0: port 1(syz_tun) entered disabled state
[ 1093.773450][  T673] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.786512][T17373] veth0_vlan: entered allmulticast mode
[ 1096.123730][T17399] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3863'.
[ 1096.238336][  T673] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.307049][ T6814] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.310016][ T6814] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.311030][ T6814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.311069][ T6814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.311099][ T6814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.311127][ T6814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.823148][T10701] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1097.089197][T10701] usb 2-1: Using ep0 maxpacket: 8
[ 1097.090965][T10701] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[ 1097.111090][T10701] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1097.111114][T10701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.111129][T10701] usb 2-1: Product: syz
[ 1097.111140][T10701] usb 2-1: Manufacturer: syz
[ 1097.111151][T10701] usb 2-1: SerialNumber: syz
[ 1097.217902][T10701] usb 2-1: config 0 descriptor??
[ 1097.234875][T10701] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1097.234914][T10701] usb 2-1: setting power ON
[ 1097.234929][T10701] dvb-usb: bulk message failed: -22 (2/0)
[ 1097.279133][T10701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1097.280350][T10701] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1097.280407][T10701] usb 2-1: media controller created
[ 1097.319986][T10701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1097.355133][T10701] usb 2-1: selecting invalid altsetting 6
[ 1097.355158][T10701] usb 2-1: digital interface selection failed (-22)
[ 1097.355175][T10701] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1097.362043][T10701] usb 2-1: setting power OFF
[ 1097.362061][T10701] dvb-usb: bulk message failed: -22 (2/0)
[ 1097.362074][T10701] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1097.362084][T10701] (NULL device *): no alternate interface
[ 1097.490860][T10701] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1097.681946][T17411] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1097.681961][T17411] use the actual size instead.
[ 1097.887514][T17415] fuse: Bad value for 'rootmode'
[ 1099.616319][T17326] chnl_net:caif_netlink_parms(): no params data found
[ 1099.636491][ T5788] usb 2-1: USB disconnect, device number 2
[ 1100.003956][T10701] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1100.084389][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3878'.
[ 1100.209474][T10701] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1100.209506][T10701] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1100.209529][T10701] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1100.209582][T10701] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1100.209612][T10701] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1100.575084][T10701] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1100.575230][T10701] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1100.575253][T10701] usb 9-1: Product: syz
[ 1100.575268][T10701] usb 9-1: Manufacturer: syz
[ 1101.346367][T10701] cdc_wdm 9-1:1.0: skipping garbage
[ 1101.346391][T10701] cdc_wdm 9-1:1.0: skipping garbage
[ 1101.463999][T10701] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1101.464023][T10701] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1102.607180][ T6000] usb 9-1: USB disconnect, device number 3
[ 1103.126620][T17326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1103.126727][T17326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.126942][T17326] bridge_slave_0: entered allmulticast mode
[ 1103.129038][T17326] bridge_slave_0: entered promiscuous mode
[ 1103.131919][T17326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1103.132099][T17326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.132230][T17326] bridge_slave_1: entered allmulticast mode
[ 1103.193418][T17326] bridge_slave_1: entered promiscuous mode
[ 1103.928898][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'.
[ 1103.928917][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3896'.
[ 1103.929041][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'.
[ 1103.929053][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3896'.
[ 1104.009426][T17326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1104.047295][T17326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1104.429571][T17326] team0: Port device team_slave_0 added
[ 1104.439786][T17326] team0: Port device team_slave_1 added
[ 1104.602476][T17326] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1104.602490][T17326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.602511][T17326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1104.664593][T17326] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1104.664616][T17326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.664648][T17326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1107.933787][T17326] hsr_slave_0: entered promiscuous mode
[ 1107.938196][T17326] hsr_slave_1: entered promiscuous mode
[ 1107.939345][T17326] debugfs: 'hsr0' already exists in 'hsr'
[ 1107.939374][T17326] Cannot create hsr debugfs directory
[ 1110.213097][T10701] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1110.383874][T10701] usb 2-1: Using ep0 maxpacket: 8
[ 1110.386808][T10701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1110.386853][T10701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1110.386901][T10701] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1110.386927][T10701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.428732][T10701] usb 2-1: config 0 descriptor??
[ 1113.304869][ T1377] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.854222][T10701] usbhid 2-1:0.0: can't add hid device: -32
[ 1115.854362][T10701] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 1117.968525][ T1377] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.045194][T17168] usb 2-1: USB disconnect, device number 3
[ 1119.474053][T17168] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1119.474290][    C0] raw-gadget.0 gadget.8: ignoring, device is not running
[ 1119.604731][T17168] usb 9-1: device descriptor read/64, error -32
[ 1119.843153][T17168] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1120.757227][T17168] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1120.757251][T17168] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.757267][T17168] usb 9-1: Product: syz
[ 1120.757277][T17168] usb 9-1: Manufacturer: syz
[ 1120.757288][T17168] usb 9-1: SerialNumber: syz
[ 1120.777410][ T1377] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1121.062287][T17168] usb 9-1: config 0 descriptor??
[ 1121.678155][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.678229][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.891949][T17168] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 005
[ 1123.439390][ T5800] Bluetooth: hci5: command 0x0406 tx timeout
[ 1123.606766][T17168]  (null): failure reading functionality
[ 1123.625171][T17168] i2c i2c-1: failure reading functionality
[ 1123.878027][T17168] i2c i2c-1: connected i2c-tiny-usb device
[ 1123.890513][T17168] usb 9-1: USB disconnect, device number 5
[ 1124.322804][ T1377] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.631002][T17664] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3936'.
[ 1125.740741][T17666] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3936'.
[ 1129.334649][T17695] fuse: Bad value for 'rootmode'
[ 1131.301686][T17721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3947'.
[ 1131.316422][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3944'.
[ 1131.382372][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3947'.
[ 1132.458737][ T1377] bond0 (unregistering): Released all slaves
[ 1134.341884][ T1377] bond0 (unregistering): Released all slaves
[ 1136.203195][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1136.359067][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1136.361505][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1136.361534][    T9] usb 5-1: config 0 has no interface number 0
[ 1136.361584][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1136.396058][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1136.396091][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.396114][    T9] usb 5-1: Product: syz
[ 1136.396129][    T9] usb 5-1: Manufacturer: syz
[ 1136.396145][    T9] usb 5-1: SerialNumber: syz
[ 1136.488704][    T9] usb 5-1: config 0 descriptor??
[ 1137.485173][ T5788] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1137.657712][ T5788] usb 9-1: Using ep0 maxpacket: 32
[ 1137.766761][ T5788] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[ 1137.766795][ T5788] usb 9-1: config 0 has no interface number 0
[ 1137.767069][ T5788] usb 9-1: config 0 interface 12 has no altsetting 0
[ 1137.797158][ T5788] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1137.797402][ T5788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1137.797422][ T5788] usb 9-1: Product: syz
[ 1137.797435][ T5788] usb 9-1: Manufacturer: syz
[ 1137.797447][ T5788] usb 9-1: SerialNumber: syz
[ 1137.920671][    T9] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[ 1137.920716][    T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1137.920729][    T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1137.920857][    T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1137.983357][    T9] usb 5-1: USB disconnect, device number 24
[ 1137.991185][ T5788] usb 9-1: config 0 descriptor??
[ 1138.250835][T17784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3964'.
[ 1138.305091][T17787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3964'.
[ 1139.741801][ T5788] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[ 1139.741863][ T5788] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[ 1139.741890][ T5788] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1139.741986][ T5788] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[ 1140.396482][ T5788] usb 9-1: USB disconnect, device number 6
[ 1141.902772][T17830] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3976'.
[ 1142.750648][ T5788] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1142.789037][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3981'.
[ 1142.789061][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3981'.
[ 1142.831410][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1142.872396][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1142.878183][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1142.898436][ T5788] usb 2-1: Using ep0 maxpacket: 32
[ 1142.906115][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1142.910288][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1142.939154][ T5788] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1142.939186][ T5788] usb 2-1: config 0 has no interface number 0
[ 1142.939237][ T5788] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1143.029389][ T5788] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1143.029422][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.029446][ T5788] usb 2-1: Product: syz
[ 1143.029462][ T5788] usb 2-1: Manufacturer: syz
[ 1143.029477][ T5788] usb 2-1: SerialNumber: syz
[ 1143.037243][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3981'.
[ 1143.037266][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3981'.
[ 1143.074208][ T6814] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1143.094149][ T6814] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1143.094257][ T6814] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1143.094332][ T6814] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1143.151326][ T5788] usb 2-1: config 0 descriptor??
[ 1143.403274][ T1377] hsr_slave_0: left promiscuous mode
[ 1143.443421][ T1377] hsr_slave_1: left promiscuous mode
[ 1143.539740][T17855] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3984'.
[ 1143.914245][ T1377] hsr_slave_0: left promiscuous mode
[ 1144.030010][ T5788] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[ 1144.030074][ T5788] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1144.030094][ T5788] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1144.030189][ T5788] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1144.066637][ T1377] hsr_slave_1: left promiscuous mode
[ 1145.091922][ T5788] usb 2-1: USB disconnect, device number 4
[ 1145.154761][ T5798] Bluetooth: hci2: command tx timeout
[ 1146.128319][ T1377] veth1_macvtap: left promiscuous mode
[ 1146.245426][ T1377] veth0_macvtap: left promiscuous mode
[ 1147.193195][ T5800] Bluetooth: hci2: command tx timeout
[ 1147.245750][T17892] binder: 17891:17892 ioctl 4018620d 0 returned -22
[ 1147.332190][T17886] 9p: Bad value for 'rfdno'
[ 1147.341945][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3993'.
[ 1147.492899][ T5788] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1147.643107][ T5788] usb 5-1: Using ep0 maxpacket: 32
[ 1147.649001][ T5788] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1147.649033][ T5788] usb 5-1: config 0 has no interface number 0
[ 1147.649085][ T5788] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1147.652306][ T5788] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1147.652337][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.652361][ T5788] usb 5-1: Product: syz
[ 1147.652377][ T5788] usb 5-1: Manufacturer: syz
[ 1147.652393][ T5788] usb 5-1: SerialNumber: syz
[ 1147.724480][ T5788] usb 5-1: config 0 descriptor??
[ 1148.566452][ T5788] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[ 1148.566513][ T5788] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1148.566533][ T5788] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1148.566628][ T5788] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1148.633073][ T9705] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1148.657233][ T5788] usb 5-1: USB disconnect, device number 25
[ 1148.792186][ T9705] usb 9-1: Using ep0 maxpacket: 32
[ 1148.802440][ T9705] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[ 1148.802474][ T9705] usb 9-1: config 0 has no interface number 0
[ 1148.802508][ T9705] usb 9-1: config 0 interface 12 has no altsetting 0
[ 1148.827850][ T9705] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1148.827881][ T9705] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.827897][ T9705] usb 9-1: Product: syz
[ 1148.827907][ T9705] usb 9-1: Manufacturer: syz
[ 1148.827918][ T9705] usb 9-1: SerialNumber: syz
[ 1148.909751][ T9705] usb 9-1: config 0 descriptor??
[ 1149.043524][T17913] 9p: Bad value for 'rfdno'
[ 1149.052363][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3999'.
[ 1149.269243][T17893] Bluetooth: hci2: command tx timeout
[ 1149.354023][T17893] Bluetooth: hci1: command 0x0406 tx timeout
[ 1150.555847][ T9705] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[ 1150.555890][ T9705] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[ 1150.555902][ T9705] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1150.555974][ T9705] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[ 1151.126297][ T9705] usb 9-1: USB disconnect, device number 7
[ 1151.383059][ T5800] Bluetooth: hci2: command tx timeout
[ 1151.715850][T17928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4003'.
[ 1153.049680][T17939] binder: 17938:17939 ioctl 4018620d 0 returned -22
[ 1153.191551][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4006'.
[ 1156.639575][ T5788] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1156.679320][T17958] binder: BINDER_SET_CONTEXT_MGR already set
[ 1156.679332][T17958] binder: 17957:17958 ioctl 4018620d 200000000040 returned -16
[ 1156.803108][ T5788] usb 10-1: Using ep0 maxpacket: 8
[ 1156.869991][ T5788] usb 10-1: config index 0 descriptor too short (expected 30, got 18)
[ 1156.890524][ T5788] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1156.890559][ T5788] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.890582][ T5788] usb 10-1: Product: syz
[ 1156.890598][ T5788] usb 10-1: Manufacturer: syz
[ 1156.890615][ T5788] usb 10-1: SerialNumber: syz
[ 1156.944631][ T5788] usb 10-1: config 0 descriptor??
[ 1156.993756][ T5788] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1156.993826][ T5788] usb 10-1: setting power ON
[ 1156.993849][ T5788] dvb-usb: bulk message failed: -22 (2/0)
[ 1157.140144][ T5788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1157.140721][ T5788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1157.140772][ T5788] usb 10-1: media controller created
[ 1157.514450][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1157.728061][ T5788] usb 10-1: selecting invalid altsetting 6
[ 1157.728156][ T5788] usb 10-1: digital interface selection failed (-22)
[ 1157.728169][ T5788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1157.730882][ T5788] usb 10-1: setting power OFF
[ 1157.730900][ T5788] dvb-usb: bulk message failed: -22 (2/0)
[ 1157.730913][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1157.730923][ T5788] (NULL device *): no alternate interface
[ 1158.381593][T13028] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1158.572038][T13028] usb 2-1: Using ep0 maxpacket: 32
[ 1158.581642][T13028] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1158.581765][T13028] usb 2-1: config 0 has no interface number 0
[ 1158.581975][T13028] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1158.618708][T13028] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1158.618742][T13028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1158.618764][T13028] usb 2-1: Product: syz
[ 1158.618781][T13028] usb 2-1: Manufacturer: syz
[ 1158.618797][T13028] usb 2-1: SerialNumber: syz
[ 1158.666262][T13028] usb 2-1: config 0 descriptor??
[ 1160.436800][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[ 1160.440028][T13028] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1160.440086][T13028] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1160.440105][T13028] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1160.440200][T13028] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1160.601003][T13028] usb 2-1: USB disconnect, device number 5
[ 1162.181750][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1162.234529][T18003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1162.289749][ T5788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1162.659391][ T5881] usb 10-1: USB disconnect, device number 2
[ 1162.690794][T18004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4020'.
[ 1162.820038][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4020'.
[ 1162.832513][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'.
[ 1162.832529][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'.
[ 1162.921574][T18004] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4020'.
[ 1163.089557][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'.
[ 1163.089580][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'.
[ 1163.692354][T18017] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4024'.
[ 1165.624239][T17842] chnl_net:caif_netlink_parms(): no params data found
[ 1166.273068][T10701] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1166.273364][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1166.430165][T10701] usb 5-1: device descriptor read/64, error -32
[ 1166.723078][T10701] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1166.913912][T10701] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1166.913945][T10701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.913969][T10701] usb 5-1: Product: syz
[ 1166.913985][T10701] usb 5-1: Manufacturer: syz
[ 1166.914001][T10701] usb 5-1: SerialNumber: syz
[ 1167.252096][T10701] usb 5-1: config 0 descriptor??
[ 1167.325305][T10701] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 027
[ 1168.996512][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4031'.
[ 1168.996550][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4031'.
[ 1169.024630][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.048505][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.903504][T10701] i2c i2c-1: failure reading functionality
[ 1169.939021][T17842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.939131][T17842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1169.939359][T17842] bridge_slave_0: entered allmulticast mode
[ 1170.003568][T17842] bridge_slave_0: entered promiscuous mode
[ 1170.038756][T17842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.038842][T17842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.039031][T17842] bridge_slave_1: entered allmulticast mode
[ 1170.092310][T17842] bridge_slave_1: entered promiscuous mode
[ 1170.124263][T10701] i2c i2c-1: connected i2c-tiny-usb device
[ 1171.759081][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4034'.
[ 1171.759108][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4034'.
[ 1171.880957][T18068] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4033'.
[ 1171.911030][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4034'.
[ 1171.911063][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4034'.
[ 1171.944594][T17842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1171.961074][T18070] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4033'.
[ 1172.051453][  T673] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.088804][T17842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1172.206758][  T673] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.420042][  T673] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1172.479118][  T673] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1173.808174][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'.
[ 1174.268514][T18091] fuse: Bad value for 'rootmode'
[ 1174.710375][T16591] usb 5-1: USB disconnect, device number 27
[ 1174.798456][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[ 1174.930252][T17842] team0: Port device team_slave_0 added
[ 1174.965087][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'.
[ 1174.971063][T17842] team0: Port device team_slave_1 added
[ 1175.351128][T17842] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1175.351149][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1175.351182][T17842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1175.473423][T17842] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1175.473444][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1175.473477][T17842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1175.729441][T17842] hsr_slave_0: entered promiscuous mode
[ 1175.730912][T17842] hsr_slave_1: entered promiscuous mode
[ 1175.732425][T17842] debugfs: 'hsr0' already exists in 'hsr'
[ 1175.732452][T17842] Cannot create hsr debugfs directory
[ 1175.792870][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4043'.
[ 1176.889489][T18118] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4046'.
[ 1176.954749][T18120] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4046'.
[ 1177.063185][T17168] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1177.213085][T17168] usb 5-1: Using ep0 maxpacket: 32
[ 1177.218499][T17168] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1177.218588][T17168] usb 5-1: config 0 has no interface number 0
[ 1177.218624][T17168] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1177.257995][T17168] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1177.258030][T17168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1177.258053][T17168] usb 5-1: Product: syz
[ 1177.258068][T17168] usb 5-1: Manufacturer: syz
[ 1177.258086][T17168] usb 5-1: SerialNumber: syz
[ 1177.301328][T17168] usb 5-1: config 0 descriptor??
[ 1177.753529][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4048'.
[ 1177.822412][T17168] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1177.822470][T17168] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1177.822490][T17168] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1177.822587][T17168] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1177.889018][T17168] usb 5-1: USB disconnect, device number 28
[ 1178.081851][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4048'.
[ 1178.089393][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4049'.
[ 1178.089461][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4049'.
[ 1178.464503][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4049'.
[ 1178.464529][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4049'.
[ 1179.733471][T18133] fuse: Bad value for 'rootmode'
[ 1180.176391][T18143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4052'.
[ 1180.799067][T18153] 9p: Bad value for 'rfdno'
[ 1180.807965][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4056'.
[ 1182.319925][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4058'.
[ 1182.807387][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.807441][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1184.344221][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'.
[ 1184.344240][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4064'.
[ 1184.510484][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'.
[ 1184.510510][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4064'.
[ 1184.532672][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4063'.
[ 1184.626771][ T3477] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1184.953764][ T3477] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1184.959177][ T3477] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1184.959231][ T3477] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1185.089710][ T1377] bridge_slave_1: left allmulticast mode
[ 1185.089735][ T1377] bridge_slave_1: left promiscuous mode
[ 1185.089955][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.225538][ T1377] bridge_slave_0: left allmulticast mode
[ 1185.225583][ T1377] bridge_slave_0: left promiscuous mode
[ 1185.238320][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.775967][T10701] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1185.776247][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1185.933139][T10701] usb 2-1: device descriptor read/64, error -32
[ 1186.183126][T10701] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1186.307737][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1186.426381][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1186.516045][ T1377] bond0 (unregistering): Released all slaves
[ 1186.606566][T10701] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1186.606589][T10701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.606605][T10701] usb 2-1: Product: syz
[ 1186.606616][T10701] usb 2-1: Manufacturer: syz
[ 1186.606676][T10701] usb 2-1: SerialNumber: syz
[ 1186.749649][T10701] usb 2-1: config 0 descriptor??
[ 1186.988241][T10701] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007
[ 1189.295941][ T1377] hsr_slave_0: left promiscuous mode
[ 1189.365690][ T1377] hsr_slave_1: left promiscuous mode
[ 1189.367159][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1189.424302][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1189.427163][T18196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.483323][T18196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.583394][T10701] i2c i2c-1: failure reading functionality
[ 1189.644466][T10701] i2c i2c-1: connected i2c-tiny-usb device
[ 1192.515398][ T1377] team0 (unregistering): Port device team_slave_1 removed
[ 1192.557203][ T1377] team0 (unregistering): Port device team_slave_0 removed
[ 1192.989687][T13028] usb 2-1: USB disconnect, device number 7
[ 1200.183654][T13028] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1200.345250][T13028] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1200.345289][T13028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.345306][T13028] usb 5-1: Product: syz
[ 1200.345317][T13028] usb 5-1: Manufacturer: syz
[ 1200.345328][T13028] usb 5-1: SerialNumber: syz
[ 1200.352215][T13028] usb 5-1: config 0 descriptor??
[ 1200.430115][T18316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4092'.
[ 1200.432759][T13028] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 029
[ 1200.457106][T18316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4092'.
[ 1200.494920][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4091'.
[ 1201.101060][T18307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1201.143989][T18307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1201.435318][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'.
[ 1202.868992][T13028] i2c i2c-1: failure reading functionality
[ 1202.915185][T13028] i2c i2c-1: connected i2c-tiny-usb device
[ 1204.188997][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1204.297544][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1204.300986][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1204.334840][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1204.354292][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1206.293927][T18340] chnl_net:caif_netlink_parms(): no params data found
[ 1206.614033][T18340] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1206.615845][T18340] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1206.616021][T18340] bridge_slave_0: entered allmulticast mode
[ 1206.621769][T18340] bridge_slave_0: entered promiscuous mode
[ 1206.623188][ T5800] Bluetooth: hci4: command tx timeout
[ 1206.659167][T18340] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1206.659350][T18340] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1206.659601][T18340] bridge_slave_1: entered allmulticast mode
[ 1206.689883][T18340] bridge_slave_1: entered promiscuous mode
[ 1206.703505][T17168] usb 5-1: USB disconnect, device number 29
[ 1207.003644][T18340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1207.098221][T18340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1207.224985][T18340] team0: Port device team_slave_0 added
[ 1207.239901][T18340] team0: Port device team_slave_1 added
[ 1207.350288][T18340] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1207.350303][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1207.350325][T18340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1207.430608][T18340] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1207.430622][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1207.430645][T18340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1207.670066][T18340] hsr_slave_0: entered promiscuous mode
[ 1207.679026][T18340] hsr_slave_1: entered promiscuous mode
[ 1207.681016][T18340] debugfs: 'hsr0' already exists in 'hsr'
[ 1207.681036][T18340] Cannot create hsr debugfs directory
[ 1208.145838][T18373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4103'.
[ 1208.198898][T18374] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4103'.
[ 1208.620750][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'.
[ 1208.703180][ T5800] Bluetooth: hci4: command tx timeout
[ 1208.837047][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'.
[ 1210.400189][T18398] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4110'.
[ 1211.110167][ T5800] Bluetooth: hci4: command tx timeout
[ 1211.376036][T18402] binder: 18401:18402 ioctl 4018620d 0 returned -22
[ 1212.021820][T18412] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4115'.
[ 1212.039631][T18412] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4115'.
[ 1212.676103][T18427] binder: 18423:18427 ioctl c0306201 0 returned -14
[ 1212.865352][T16591] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1212.983058][ T6000] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1213.013100][T16591] usb 9-1: Using ep0 maxpacket: 8
[ 1213.016438][T16591] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1213.016475][T16591] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1213.016509][T16591] usb 9-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1213.016526][T16591] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.100651][T16591] usb 9-1: config 0 descriptor??
[ 1213.143912][ T6000] usb 2-1: device descriptor read/64, error -71
[ 1213.186083][ T5800] Bluetooth: hci4: command tx timeout
[ 1213.403295][ T6000] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1213.543126][ T6000] usb 2-1: device descriptor read/64, error -71
[ 1213.642222][T16591] cypress 0003:04B4:DE61.0002: invalid report_size 60495
[ 1213.642243][T16591] cypress 0003:04B4:DE61.0002: item 0 2 1 7 parsing failed
[ 1213.659562][T16591] cypress 0003:04B4:DE61.0002: parse failed
[ 1213.659617][T16591] cypress 0003:04B4:DE61.0002: probe with driver cypress failed with error -22
[ 1213.705782][ T6000] usb usb2-port1: attempt power cycle
[ 1214.153917][ T6000] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1214.201004][ T6000] usb 2-1: device descriptor read/8, error -71
[ 1214.483731][ T6000] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1214.506193][ T6000] usb 2-1: device descriptor read/8, error -71
[ 1214.614452][ T6000] usb usb2-port1: unable to enumerate USB device
[ 1215.646648][ T5942] bridge_slave_1: left allmulticast mode
[ 1215.646672][ T5942] bridge_slave_1: left promiscuous mode
[ 1215.646920][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1215.777033][ T5942] bridge_slave_0: left allmulticast mode
[ 1215.777066][ T5942] bridge_slave_0: left promiscuous mode
[ 1215.777346][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.843628][T18447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4126'.
[ 1216.087396][T18451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4126'.
[ 1217.315553][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1217.404588][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1217.456370][ T5942] bond0 (unregistering): Released all slaves
[ 1217.971010][T13028] usb 9-1: USB disconnect, device number 8
[ 1218.546716][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4127'.
[ 1218.546735][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'.
[ 1218.547455][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4127'.
[ 1218.547469][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4127'.
[ 1218.674558][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4131'.
[ 1218.749894][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4132'.
[ 1218.749923][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4132'.
[ 1218.750136][ T5942] hsr_slave_0: left promiscuous mode
[ 1218.783281][ T5942] hsr_slave_1: left promiscuous mode
[ 1218.784464][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1218.808572][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1220.384163][ T5942] team0 (unregistering): Port device team_slave_1 removed
[ 1220.418097][ T5942] team0 (unregistering): Port device team_slave_0 removed
[ 1220.820143][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4131'.
[ 1222.055736][T18487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'.
[ 1222.055775][T18487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'.
[ 1222.283381][T18487] gretap0: entered promiscuous mode
[ 1222.349639][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'.
[ 1222.363504][T18487] gretap0: left promiscuous mode
[ 1223.838263][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'.
[ 1225.503568][ T6000] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1225.663085][ T6000] usb 10-1: Using ep0 maxpacket: 32
[ 1225.668126][ T6000] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[ 1225.668158][ T6000] usb 10-1: config 0 has no interface number 0
[ 1225.668192][ T6000] usb 10-1: config 0 interface 12 has no altsetting 0
[ 1225.670670][ T6000] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1225.670693][ T6000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.670715][ T6000] usb 10-1: Product: syz
[ 1225.670726][ T6000] usb 10-1: Manufacturer: syz
[ 1225.670758][ T6000] usb 10-1: SerialNumber: syz
[ 1225.785170][ T6000] usb 10-1: config 0 descriptor??
[ 1226.641943][ T6000] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[ 1226.641985][ T6000] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[ 1226.641998][ T6000] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1226.642061][ T6000] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[ 1226.735198][ T6000] usb 10-1: USB disconnect, device number 3
[ 1227.645548][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4146'.
[ 1227.813574][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4146'.
[ 1228.459282][T18340] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1228.998597][T18340] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1229.051833][T18340] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1229.189165][T18340] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1229.644132][T18567] fuse: Bad value for 'rootmode'
[ 1229.803108][ T6000] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 1229.803418][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1229.953052][ T6000] usb 2-1: device descriptor read/64, error -32
[ 1230.017154][T18340] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1230.203900][ T6000] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1230.204191][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1230.363593][ T6000] usb 2-1: device descriptor read/64, error -32
[ 1230.442024][T18340] 8021q: adding VLAN 0 to HW filter on device team0
[ 1230.483336][ T6000] usb usb2-port1: attempt power cycle
[ 1230.539692][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1230.539837][ T6814] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1230.649343][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1230.657179][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1230.905154][T16591] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1230.923062][ T6000] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[ 1230.945110][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1230.945198][ T6000] usb 2-1: device descriptor read/8, error -32
[ 1231.055653][ T6000] raw-gadget.0 gadget.1: failed to queue suspend event
[ 1231.056822][ T6000] raw-gadget.0 gadget.1: failed to queue reset event
[ 1231.073089][T16591] usb 5-1: Using ep0 maxpacket: 32
[ 1231.079488][T16591] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1231.079510][T16591] usb 5-1: config 0 has no interface number 0
[ 1231.079542][T16591] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1231.106468][T16591] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1231.106501][T16591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.106523][T16591] usb 5-1: Product: syz
[ 1231.106539][T16591] usb 5-1: Manufacturer: syz
[ 1231.106554][T16591] usb 5-1: SerialNumber: syz
[ 1231.123171][ T6000] raw-gadget.0 gadget.1: failed to queue resume event
[ 1231.193260][ T6000] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[ 1231.227874][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1231.232709][ T6000] usb 2-1: device descriptor read/8, error -32
[ 1231.333585][ T6000] raw-gadget.0 gadget.1: failed to queue suspend event
[ 1231.333881][ T6000] usb usb2-port1: unable to enumerate USB device
[ 1232.160152][T16591] usb 5-1: config 0 descriptor??
[ 1232.271626][T18340] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1232.787054][T16591] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[ 1232.787116][T16591] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1232.787138][T16591] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1232.787237][T16591] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1232.884349][T16591] usb 5-1: USB disconnect, device number 30
[ 1233.407251][T18554] raw-gadget.0 gadget.1: failed to queue disconnect event
[ 1234.915006][T18608] fuse: Bad value for 'rootmode'
[ 1235.156605][T18340] veth0_vlan: entered promiscuous mode
[ 1235.203542][T18340] veth1_vlan: entered promiscuous mode
[ 1235.451300][T18340] veth0_macvtap: entered promiscuous mode
[ 1235.482650][T18340] veth1_macvtap: entered promiscuous mode
[ 1235.635400][T18340] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1235.643266][ T6000] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[ 1235.794661][T18340] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1235.798050][ T6000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.831441][ T6000] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1235.831477][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.831499][ T6000] usb 5-1: Product: syz
[ 1235.831516][ T6000] usb 5-1: Manufacturer: syz
[ 1235.831532][ T6000] usb 5-1: SerialNumber: syz
[ 1235.900427][ T3477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.900691][ T3477] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.900735][ T3477] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.900774][ T3477] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1235.967572][ T6000] usb 5-1: config 0 descriptor??
[ 1235.999540][ T6000] usb 5-1: bad CDC descriptors
[ 1236.044651][ T6000] usb 5-1: unsupported MDLM descriptors
[ 1236.803424][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1236.806342][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1237.958257][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1237.958280][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.105808][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1238.105832][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.573483][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4164'.
[ 1239.675941][T17168] usb 5-1: USB disconnect, device number 31
[ 1242.293070][T16591] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1243.433094][T17168] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1243.584067][T17168] usb 10-1: Using ep0 maxpacket: 32
[ 1243.600736][T17168] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[ 1243.600767][T17168] usb 10-1: config 0 has no interface number 0
[ 1243.600818][T17168] usb 10-1: config 0 interface 12 has no altsetting 0
[ 1243.644162][T17168] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1243.647418][T17168] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.647445][T17168] usb 10-1: Product: syz
[ 1243.647461][T17168] usb 10-1: Manufacturer: syz
[ 1243.647481][T17168] usb 10-1: SerialNumber: syz
[ 1243.685807][T13028] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1243.762812][T17168] usb 10-1: config 0 descriptor??
[ 1243.853338][T13028] usb 5-1: Using ep0 maxpacket: 8
[ 1243.941423][T13028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1243.942321][T13028] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1243.967215][T13028] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1243.967249][T13028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.131493][T13028] usb 5-1: config 0 descriptor??
[ 1244.233793][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.233952][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.501037][T17168] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71
[ 1244.501551][T17168] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[ 1244.502189][T17168] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1244.547339][T17168] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[ 1244.767002][T17168] usb 10-1: USB disconnect, device number 4
[ 1245.230185][T13028] cypress 0003:04B4:DE61.0003: invalid report_size 60495
[ 1245.230207][T13028] cypress 0003:04B4:DE61.0003: item 0 2 1 7 parsing failed
[ 1245.389064][T13028] cypress 0003:04B4:DE61.0003: parse failed
[ 1245.389161][T13028] cypress 0003:04B4:DE61.0003: probe with driver cypress failed with error -22
[ 1247.770360][T16591] usb 7-1: device descriptor read/all, error -71
[ 1248.038269][T18678] 9p: Bad value for 'rfdno'
[ 1248.047344][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4176'.
[ 1249.249720][T16591] ==================================================================
[ 1249.249738][T16591] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[ 1249.249857][T16591] Read of size 8 at addr ffffc90004a39008 by task kworker/1:0/16591
[ 1249.249876][T16591] 
[ 1249.249907][T16591] CPU: 1 UID: 0 PID: 16591 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1249.249934][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1249.249951][T16591] Workqueue: usb_hub_wq hub_event
[ 1249.250003][T16591] Call Trace:
[ 1249.250020][T16591]  <TASK>
[ 1249.250030][T16591]  dump_stack_lvl+0xe8/0x150
[ 1249.250066][T16591]  print_report+0xba/0x230
[ 1249.250096][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.250128][T16591]  kasan_report+0x117/0x150
[ 1249.250192][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.250231][T16591]  __list_add_valid_or_report+0x4e/0x130
[ 1249.250267][T16591]  kcov_remote_stop+0x457/0x680
[ 1249.250301][T16591]  hub_event+0x49d8/0x4f60
[ 1249.250360][T16591]  ? __pfx_hub_event+0x10/0x10
[ 1249.250392][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.250428][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.250457][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.250496][T16591]  process_scheduled_works+0xb5d/0x1860
[ 1249.250544][T16591]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1249.250580][T16591]  ? assign_work+0x3d5/0x5e0
[ 1249.250612][T16591]  worker_thread+0xa53/0xfc0
[ 1249.250659][T16591]  kthread+0x388/0x470
[ 1249.250682][T16591]  ? __pfx_worker_thread+0x10/0x10
[ 1249.250713][T16591]  ? __pfx_kthread+0x10/0x10
[ 1249.250738][T16591]  ret_from_fork+0x514/0xb70
[ 1249.250771][T16591]  ? __pfx_ret_from_fork+0x10/0x10
[ 1249.250803][T16591]  ? __switch_to+0xc79/0x1410
[ 1249.250833][T16591]  ? __pfx_kthread+0x10/0x10
[ 1249.250856][T16591]  ret_from_fork_asm+0x1a/0x30
[ 1249.250886][T16591]  </TASK>
[ 1249.250895][T16591] 
[ 1249.250901][T16591] The buggy address belongs to a vmalloc virtual mapping
[ 1249.250920][T16591] Memory state around the buggy address:
[ 1249.250933][T16591]  ffffc90004a38f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1249.250949][T16591]  ffffc90004a38f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1249.250964][T16591] >ffffc90004a39000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1249.250976][T16591]                       ^
[ 1249.250988][T16591]  ffffc90004a39080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1249.251003][T16591]  ffffc90004a39100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1249.251015][T16591] ==================================================================
[ 1249.251050][T16591] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1249.251071][T16591] CPU: 1 UID: 0 PID: 16591 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1249.251097][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1249.251112][T16591] Workqueue: usb_hub_wq hub_event
[ 1249.251144][T16591] Call Trace:
[ 1249.251152][T16591]  <TASK>
[ 1249.251161][T16591]  vpanic+0x56c/0xa60
[ 1249.251196][T16591]  ? __pfx_vpanic+0x10/0x10
[ 1249.251230][T16591]  ? irqentry_exit+0x61a/0x700
[ 1249.251267][T16591]  panic+0xc5/0xd0
[ 1249.251299][T16591]  ? __pfx_panic+0x10/0x10
[ 1249.251332][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.251371][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.251405][T16591]  check_panic_on_warn+0x89/0xb0
[ 1249.251431][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.251463][T16591]  end_report+0x73/0x170
[ 1249.251486][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.251524][T16591]  kasan_report+0x128/0x150
[ 1249.251548][T16591]  ? __list_add_valid_or_report+0x4e/0x130
[ 1249.251586][T16591]  __list_add_valid_or_report+0x4e/0x130
[ 1249.251622][T16591]  kcov_remote_stop+0x457/0x680
[ 1249.251653][T16591]  hub_event+0x49d8/0x4f60
[ 1249.251713][T16591]  ? __pfx_hub_event+0x10/0x10
[ 1249.251745][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.251780][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.251810][T16591]  ? process_scheduled_works+0xa70/0x1860
[ 1249.251842][T16591]  process_scheduled_works+0xb5d/0x1860
[ 1249.251890][T16591]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1249.251926][T16591]  ? assign_work+0x3d5/0x5e0
[ 1249.251958][T16591]  worker_thread+0xa53/0xfc0
[ 1249.252004][T16591]  kthread+0x388/0x470
[ 1249.252026][T16591]  ? __pfx_worker_thread+0x10/0x10
[ 1249.252057][T16591]  ? __pfx_kthread+0x10/0x10
[ 1249.252080][T16591]  ret_from_fork+0x514/0xb70
[ 1249.252112][T16591]  ? __pfx_ret_from_fork+0x10/0x10
[ 1249.252145][T16591]  ? __switch_to+0xc79/0x1410
[ 1249.252172][T16591]  ? __pfx_kthread+0x10/0x10
[ 1249.252196][T16591]  ret_from_fork_asm+0x1a/0x30
[ 1249.252225][T16591]  </TASK>
[ 1249.252814][T16591] Kernel Offset: disabled