last executing test programs:

20m29.191369395s ago: executing program 32 (id=691):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xf, 0x5, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0x2}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x200012, 0x10015, 0x9, 0xc0cc, 0x2, 0x8c, 0xffffffffffffffff})
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioprio_get$uid(0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0x80000000, &(0x7f0000000000))
pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
ioctl$BLKROSET(0xffffffffffffffff, 0x401070cd, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_pgetevents(r6, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0)
syz_clone(0x2008480, 0x0, 0x0, 0x0, 0x0, 0x0)

11m50.82031242s ago: executing program 33 (id=2107):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

10m38.511113427s ago: executing program 34 (id=2239):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x3, "dd0935"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m3.352624049s ago: executing program 4 (id=2462):
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
pwritev(r0, 0x0, 0x0, 0x2, 0x7)
socket(0x2, 0xa, 0x300)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a9d4045f8010000004bd295857d6312d7a479f9025c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5e5176e584c970207f23b0073ca0000", 0xfffffffffffffffc, 0x48801, 0x0, 0x4a)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x100, 0x65, 0x9, 0x4, 0x33, 0x7, @broadcast, @remote}}}}}}, 0x0)

9m1.46784973s ago: executing program 4 (id=2468):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x20029})
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
openat$tun(0xffffffffffffff9c, 0x0, 0x185082, 0x0)
sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0)

8m59.790503487s ago: executing program 35 (id=2430):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
syz_usb_connect(0x4, 0x24, &(0x7f0000004000)=ANY=[@ANYRES32, @ANYBLOB="bbff30e1fd66c95b2bb4e5e18acf003d5b9f44145c62af54bcc0404da78174ff0b8235790a979f37b0c8539cfecfa65a19acbf8c55ed362150839d94b137b1e3de143d5948f99a5c69d61070c5f4e6178d054ec363cf1454e3e425ce4457d8e04af54acc4e4d9e6650b2adce943b9d4a752e2385fa36720109a96da46f3d1cc9f3706bb09d85ed3dc15bde29a5ea67700985c15fc7b31dfcecd7130aa0349d96a3cd61828eededd7204c742870e7457147b91502ef108801692bb8b2cce4d38eb3b2a915e155bfc0c6e23eee963487966464050a6aad95ce59769e7437623bd0ccdc0ec7328bfaf65b49f35aecbb7b5a47cc0fe9423e81e0b9da066a775e705a61159261284a33327c995270108da5a3baee2c5e691da15797399be36a25927fb4c3d021dba3c1a664040ae27af9b5a1e11a7eb5bb0daeba8bb899c733c19508939c0b41fea9a93a12e0c10981942f9947a852bf1d690ec9bb42135735ce2be2423538b26e3f1ae87c9ad31b9cba76cd6f4e0b977dac180ad0ea106bb407a7d0926d8781e7a3e35af187e83ca6793f840bf9d33ae268e237b60a53fdce4493ec7a1e23fee482167c82415089a5febebc5dbb6d6af570392b8fc025c20f7a3e94760f1943cf733b8b918d2c14c9bcd072b7decd25480195d86f88a5d6e90721c07e5e7f2999fdb907ca6e587ec9e2765c518777cdf083ff8785c0069063e0e6a277d910fdcfa171ae9f6545dd8ac9ce838f14f869c108b3556c27ea96284341acd8a544b7508a88530fa42fa3183ff30df5b07db12e7e65be9bbee382b4d1e4b4506d0b0146f845dbb63825b02306ff123935d3503cdaa42cc27535f9a2c51eea9878895025e7c53a7ea1239d27360c8682864994141d93d6a9bde87a9c10ba814fa5c8162e1ce4c9d324860f3a5b62c17c52fadc6f1ec534de8f1b9a74585d1e9949521b347cc44c0ec67b19f2b45b21f2c9e287cdf9d6fa61a71094e07dde09b1a888bcb894d78add3c8eb9fdacc5b4c39994147a41754434ff319b52e585c3e2228f6aab363e56334db14bc151772a463fbe47ddb6faa5dfde79f9b266781a2ab30a05badd5a20d3f9e97677a9512d5c8cdcff0e57a3dada581811c15d5881353929dabe80c87938ab1681cbb0d9a511deb0af65e558e1c9ad1866065310bfe90377b03d2875c1088f19cf3e2f2c2c8060574d40c7d8feb5bda39c0e94606127cb97fb9b700c21c514e545874768d9d9c4d6f36dc73e5c731a858ec2bab6c14a53a82438d6c3f8dbb49f627352b29b9bcd5a8323ddd76f826cebb9d1d063f55e8893f9861858d7159f989d2ea3f1a4c6eb0870854346808f211eb1e71e979e562b7b50c6e7e2529434c2ac4f574b4e58bd3f0569d09fa874eea743c0a57c58224a1b7bb75d9c66cc1c3cd715926a90bcb55d71d38e6df561874b7f8f543ef249693da3c9f4337ce730681ff77022d6d5981d0076f409e9e0f8bbf8f1b63ec73d76d0ab7349e23567066ce1cd91cf0f60025f72db54583701dd810088ed715704900849ad1eed2350222ce1487db0624761d168333db0fa820e1f7db024d2a305905d27efb1767864fa9a2d66dc17f075203458034ec57949b0ab0e88c8f4417f1d7b267df61a4d01a3bd9dcdb5c8ab71c705d7a39e955eb7be37533458060209a7cfa17b68b88da7a71d0fbfd1e29c2b31d8d0d42b441a4d4a993a624d8e891d503b2e584a7dc421b2be46e8f4a51a259fbf906d5abe8b0f7cae5fbd09d89af320d36e224d9a72ccfafee29f2367f9aa1c278a997c927af5e8b7b02f72b003d90fd191ee98db7bbbdda03e34eb7531bb2bf10a9ca0ee9424f8c5499dd579d47e5e55d6944e7fe7266fb2b9a5b66b0161d18a4aede88e173598a1bec75354b232ef6d0ba81aaa8b85b32842520018b797c2d8e600a7c4cd02ca1bde48c197db1551668c468e5d83f36b85972702522e30e1906b7f938b50d07c0c5b8bbe5e4d2a9ffbf3d8cbc8fd24603177bf626e05202fcce00cd6d8e4fb1909c4f1de75b1aee87743ff185f9eedd18e75836084866261f50f6954676e4a4b432ca320320a68c22c7440e14c0a2f33902082cb26674ef343a9f597a7f1dea74081009eb5ef6dcdc4f76731539940afdf22b170a574684ea3f74bf9bc1cdeb8b3cfb20218c5813e16ada2f254a7198e85e554201677efe28056d434196a9cd98e885ccb8acc5c367cb7f27ff382c8e6a515a0e823d191be63bea733f7f3d6cdb2735f220f8d4c7c4d41a8894f5a347170b65131e411678f61409a160f0c13d032b89790f26121d465a1da3423acfd6ae9124f6b976d743351dd804f783e7baf64764d65ca8fa4008d03b562c9f3563d5edaed5bcebe4f8912d6473103cadba660ba6430b97295287979fff9fa280727fb5242a240bc128050ab80af12e2ac0d4f3e9a56048a17c088e4c1dfcccb68e578aa08bb11a82b9c1b2fc2065a96bada4219e9760ca584ca1ac19f10e5a8949c440e37c84a26b773a56896fd8f0b587703147ab873ae1b37ef1f60048764c3fcc773a0959f44f75a0fead8e70da1f2b2c9e832e2aa33c72b10d8a152f83b1d5b20777d01e6af6c1cc7e912b10a03ff7746631f798216f2652c860b41a5c4eed4af5196c71bb9aa7307e7be3a044443eb22a0290135be2139214fd97591cbe9b30f67a30dc2ae8d12df0242c8c847a4c3b386e8c93f16cbc90ae62c00379ead2e68092db9672b612f4b7bec4379ff8cf8fb252d420d00aebd95bbf1f2bd887d04e9b3ba7ce850346d0e7920c4c7fcf222064313da7d560e790c9639de33064d31a47640ec84346ba72b08784d309c487540046967083b482690f4fb8b047ff6ec52017b577b2cd551aa279878f5e0c29e6135edac7af90f2fb6a581f69b7ddde6ed8674ff3fd60f10475973c772d2af07286b94d39f080723ce50cb25f13cd482d34cb35849f8270ad4066f4844d7e25edd201632f1547d31132e1a664a4ab2de99f7d4c4edeb65955d787fc85e847ca2a36154af8c9df8c020aada12e21dd3c9d076c13f7825a0a190f683f2df2ea4783c6b322ed91ee40acad281354b912e4ad8536f0c9bd1d42f88b11923f30d6b60a1c82c3c46b3a8af71f3053b9ead71fdaf4d57115375900ffe2fd100fed059afbc8144adde0a259a0fe9ae4470c467dc3556afab47f28a60578de6b11cafb5b1a8f2dc0a7c2934f9abe06b424087d9a64f2e5f382658c55afcd725fe55df2657a6b63235ca11554ecbaa2192a0fc08bef1a3d82d698d795fda365593d8488a2c2487dc7989569698f508394093dbb728b23127a57bcaa52353915626bcac17179bbdc3c0fecec242cc741754f1d973266c14e96059a8c72299a92baa72a3c2b5f214b04773082354b5bd7c062c2281441644f7f4f383f808aaf991e7b4d5d09cb103586c733f50b17931497c2dfc8ac4efb96d19de453aabf4dd838c384a0974adf7ccf1238d3701b594f2bfe8e2e11bb1388f48f6f026af962f2e0980e198939dd84e8dcf75aeb15ed7a462cbe8846816608e065b6c1d059d51b1768b15881a631e20eec113bb9446848d1d4fc9dd1ebbd5ab4336de5880759724e541cc80d5cc7d706c38d4165a15edcae387d2e4100a61331b86ff7f64c8ec6ee88f931f0e02057d5684770785f61415889a257a2ea2657461aef5fec2a16e5669dddb50f82c1c9830e1c3f135174e1c5aa6b299691817153fedd31f6d6964ec0c35b378d45c5ac1645968d87dc81a9fc7284f89af3c6714ef1d83196aad2985eed8db2aa9b0aa1897fcfba7c658761f83238957a4e8655ba2649b4a24b7e9798e530f5a67e505ec5f6d5b764eda0f44cdd7ea29a36c81bcbadd88239479355c51446484857c06e71ce5efb147597042112753aa690a5f18c7b270163fa7e2c984917060c1d4498f67244076e8d71f87fc08ba5f606ed22abcc09643434560a7812bbb297fe6e712f1f7de8dca737ad3c292b2c92f22248ec4e2c9e31489e6eec9b3e182a1914e0e1126ac9a8f4d7630dfadf6705565b1b0c5480fd75e12ddc631374fd622217f70f18be3efaaa20cb096f1b781a0268c54be88a61eed0d3d4d713acc0a3f204b4ddf504322eb188af78d093d72697734882af2d3c8b2b41dae780fb27bae3719e19e46b41c0f73e66918ca9003dcdad7509362a21efa58ae9cdb303aa0f361ac255a7027dd1799ce3d6a68c735c77ccf664508347e10f806b9b67099a01bb71cc92fc300dcd951f53b8873c5a99aca74fbdba0def75b41eb58f6e6f7ef5c6c63cb8c0602219070f15ff6811b354f7a42636dad5fec6ac65aacbf47112e0d583bc44d4af797f8d7381f8f630cd6dbb7752f09e21e8e24f9a28453a42b46670871b15e39907b42eb2e49bab1384a99021f556a7d43b137e1ffedbcf43511d37385a072d803a31de29ffb15fb146d92f8ccc3a6cfe4636442c6f1f163718c4e1d96f88d939e0033dbd720d5441fdc15a05367d3dfd0a8ead787728721284c746ef48a0ca1f958bfc7c9a5489d89e11e13ab7b8f934476bd7dc95046f31a8830f87308315753d735497509428ec9a4b90b76eb132e9095467b85db721ee09b92223d34bfaee0b2462a98cde105fa48dd83cc0ce7b2dc6b8a02d6e414649d6e5a45e20bf8d647a54fd1606e7b7f3e9bd8c1c8062f275127d979ea7fb305dc831b5567a2d0c923aec6790a2883aa70b49b8f14f5a1d56e8b102e348964f4e79253e29e9215f89365e7953bb3aba64f9551c6203864cf4fcf2325b4b2db2a12f91fe391877aaaf32c885768fbf67654967fa59d4261081c47e97d8a2026d1249354790bbeba855daed6df158984a42da1af72ac5adb5676b38a1acaa1d3b7c6c06d64af658d7f795ff66108661f7e917db1261fb9d31c79586b9c8dfadc9874ac029d849d067283ee18ca2d6041fd75bbaebc4c3190d87641e47297e6440f9809c40458563c56507badd17313e4b0904a13c7aa68269377936663d810dc9481a87ff6646a529bceebde716befaea4687a493195766d9af542fdfe6e3c9eb61f31fd85e723765705", @ANYRES8=r3, @ANYRES64=r1, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX], 0x0)
ioctl$EVIOCRMFF(r3, 0xc0085508, &(0x7f0000000080))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000097c0)=[{{&(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{0x0}], 0x1, &(0x7f0000007340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000}}, {{&(0x7f00000083c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009700)=[{&(0x7f0000008440)="0ad11f88fecd0a94461cea1bd7a91deba4c446fecd67131ea6796e14ae31ba5f2dcd8594c956e1d9911ad4ad8901ec8d6ba2296a7180a0fe96181a7b01adeb5c2583d86339e8343bd814969fc9da9145bd1b51c3722dabcb572036cac4cc30d29cc417cb6c85ba67073924678196a5966642a7f714809722dc1a8e4ac6a4f4de34c7d93a2605ddafcdb264bfcd5c17cccd95432451c4f0fdf0e7bc5e214e77da1927b7f4dd11aac3a8b9dc94e75e1bc2847f2243217a82767da8ca34338b1cf3e1998e1e9e11dd70c9e0ce9db399e6ab87881ecaefbecf2d762011ebba09275f43bf98285cdae3b4c3d152635b", 0xed}, {&(0x7f0000008540)="e1d1091b4422b8e2e4da725e4554b21c84d4d5", 0x13}, {&(0x7f0000008580)="7361d1375913dba09369dbc1b2fe73e58f80c1f9ba3666e38250483136b67711905d5ca9f5919110e7015397e2d4a374b3ae86158dbe218cebfbcb59ccca64955ef81f6edcbd3507898dc870732e96be2ad6a072c920971f737b92ac4c4bdec44a1694c7682f0d6e8143fcd83fcc1ea339a977b5c2cf7e8217694812227aa54410ff2f081f473139e261102243fb35266be90eabfd69e9f48910f7e28d9cc00b94716bbc6ac5e1f251a3b01f1e1d7440b96974d1023afdcb1bf8ffe3dac29294b20dfd", 0xc3}, {&(0x7f0000008680)="e1077de66a0940fefa081ed049d8f368c72ee78245873f6eade0d8a8a5bccdc5e8835c53a523eb4e100248126a0bab76149d6d817d75a19c8649f2aad5a7f18a5044e2934ce5e46a3590b400e988e14a76aee383dca720ced1e5cf25e9d82e2b947c435c8189e5afd2cfaf62c59fdd7bc309baa1a84d048c65c6702809f495b595891e756ea249614278c48b87ad34d2aa40d9a916c63d7dc2dcda14f2781be70c3be3b9796013606a853eb82b43f8228f3b3b06d8c62f20a5afbe0e5601b6ae5de92541d3ba93c2783c5d2b7b30b60ba356bdbbc54a0b77370e3a0189d7868eaea710dbd4690f3867172bca3b30899b977eb7696e1ca5d9857c79ddd1f567a8d1640dc2f0146471e46eaf4158c3c0e96916cf5621900f1dadc7ba838f17350b3594c42ba7974b2f6c9dc79406c60b449f02ab134883359511b8bb25a6526ac739991c90c59ff0241303f2bddf09320e7d32dd71b2eaf7c2dafe70829d9c21c8f6fd37014ecb65effc4705e010a4e2568ad73bdb85dd64c96496a102c52029f790a5dbc4bded6fbd6e4aa0e3864f4948d2195df41a50eb4a24b6da96c3e0c10f723da9b46ac8c4b063515d9c0dacae81cb8e8b2bebaf168b71fae29a6120d48a33763c8e9eba9bd294585d4423e3bfd83a49e5f19a9f84f858d6347c9957edeb122de4852b3878a23561e4db7452f81dad2222a38720b5eefdb22dc092a460970918c1b341ade8c37dbf25f19293c5e52ae9cd56d4128e0ab6f56ede49770af1234b77e079648c454419b1c92e8c801e00bea5bb0d34330b3b010f3351718cec37f1a55b3366a0aad5ca222ff6a98d689254921c749f6182b8c511efd8d4931415fb18487bf2e8f1cbf9cfba5a9104e9f6de807d898d3a12cfd5f0aa9dde69cadae62ae0fe702b74ccada90b0e71973e95fe2759395f8af60761f5768b78d9998cb4aca9d9ffbb21dad8b6c31ea42a37be55c1855b8a979596337746753cd743fe0eeb0cb5d15fe85b215ca83a3f9b9894ee18e5dba246009905816739b999556159bf5493e400c7711c62bb2acd29982becd7fa4c69b63b7f1076d6538f3a045991dc9b039b801f733b6a58038bc6efd2441f997a70ce8e723bcd7cf3494223cf502aa11068d507471321e90eff82ae48e0073c2a85dcc3537f1a3aa1b51b2fc6119a79251d6d9b2267cc4b64db0c236aef5a1377d83f26264fa8f3255d525fcca0168231d91146f1670669b398befd2ae45239d98a1096b9867c5fd28f9d397ebb092814d4bda6b0976af671a82209cc85fa736434053d2d87d2505e7838d0d7b28fedf829839df9f91ed47fbd8657cc6a265f93d1c296204b5a54603f6d2135f6571051c17a94dd9b1388eb5793621a39e970ea199ac37ffc2321c864372c3d70b2d5d24b60b54a3ae808b682016c6ebe4dd9a57e2e257d4bb2269becdd9bd6d5a042c310191a8ddcac838302110593e5bcc84b1927f21956d6cc78d816f9650fd2bd54154362e7d080f160b3217c6cb541c54195612dde7b8fba41fceb95dc2c663375a2271225385a8e8d99d3c951e8b4229ada0b6a4d50275fefc472153c2ca39cc1609cbde54b403b87eb437c489af6eb94bfe4c83b5f4650e1bd8ae248a2c4cb9e65cf54af6a4fabeb52ae9ef82377175d47e0f8a7c0cbbb68fd955afa71e12dd904deda0850b7c8f9ebe0ca2469cf038d5aac3c620ae8f7a913d29b52e4b2a1527cc38d8fef05b5e5652863ffb573e09d8bd44a69cd46b16654216d48451ae8e0158e66712808319260a2cc2a65c9eb355d4267163fb07380901c8e201b6827d9609f09fd330fd1cbc6239cf0975bfccd5aa6b04d042321c05a450f137ff27299aa02821375fe110c1470abe77df4ae609b15dc676837b9aafa0883d62b09d4aa415cd24a4137ba886a941781b327b29c2cdea6229b0fae1ec79e2c5a2d84b8be1bf97fa6b8a92beab6b444595bc61d0d8fee0ff8b2c73484c90e13cd733c075369c62bdb5d495450636cd3c250dfef517a2923d3caa5f061078175af939d9c34cae30360740b2f967421ff4955855906192a0429b044dd264b4bad6b3beb00dc9ea09da369749c906810fc80a41e8b2b62137c130c4ed745839ea61f08dd87b55b3184e2d3c4b75a895dedf343b87e1ce553bbee437866a9cb307a7fba52c215b8fa3b613514303106e8e8f8477afbf89bf6bf5458876f1038e8599247a7acbe47ef834b618d0f7854bd6048fdefdc8c346e817e3797c7754340ae1b9a53c7fac05160165070ee3cac6676412305ae53d967d91dfc67d2a666066aed22f5eac3b6476b83cf1f92b12fcc321117f5cfd2e50d12d57c85210301b01a532c191a3250f2d6df78a328e7a6467ac80e397d9db496a5a66b178a503cf9480029835592788c4e5b2e59328a34d0d35e64b537774035315487d3fbf4098a5d2cecf147b9a3d70f506aebcbc869c89348622680bfc066dcfce9b9555a1a4a599f4570bdf1fbb7c3e763b83a2af42197ca96203acf9554d944ad8f2cb5efe3585fd4719283fbc05b0ca60c72528a9555e44ebddf1cc1f45d464a2cbd4303a23acdabe8cc78bc2986af5a0e6dd4399ce70e05284538929158519213f3639ac105a563e6d0f21a9adfaa86682a2718106b14e58589243c28679fc7c4f07f593a8691aa4bde0ff3e2640d2cce3299ca02f601481fc24569669470a7f0dfedf63fe0b103898f7ad4682188d48d923674ac989748db79b6472d5a3e17324e22ef291ca6d2e3e4bff987e0e6dd25a0f4e4547afc27db1f82701fafe96bdc77f928602b00e21c735271c0dbeafdb2bdb1a84de4b8f209fed7a8b2cfc2189f7094d67d950784697ae986eb4239463e0ab8c6ed0daa7f34c2371b1f8a8d8d541941ac69d12a67335505b299b44d50dd26a1d6ef2cade52d78acadffea0b508332be9d380191d04e9a7ebc5e98c6bae6bc25540022dfec37142f8b383d93fd3153f173e0bbf0ec8ddda06917732c154a6d7cc188b5495ee102b645d6892322ed12f55892902566a79b421f78899db4f7f6f7674233ce0ca6447a06b337bd959cde6a8123953ea9f5dd0a34edb2f6fdb66933aa5688dea1df15c3e856e7591f9b02d67623c832eb0fd63a07a844abaf066ffb88666b40ab8137bd26d3a5dd4eb0cc06fb4f419df1119fd6c9dba37e09fd8ea7c65a7242f6b2ee59608396576f1fb6bf62c2a111d20d3b4fc97e924866408616da5145a44101062f802b92ad51d08f46b20fee362dd4c63ac46a7bb9e7bfde4d127fc735e09fab953ae3ed3b204cd12f2b341b189e2ce61b83bd5055f71b4c9c86318063b7500e5be5995b82800f40d770aea06850a92910e64f20a14b385c48130aab5210265c73f5435c21bb42ff5c5f19e889baf064fe76a0e22f2f943f9d8bae76dee346c35c377cbed3c9723afa99a20fdeb6d81e00a48d6391cc0370180768319b66ef2d6f9b8d3e4409f11a04f5b0fcebc471d2305ec8006dc149c31be6e137aeb8753313636f470b70a085c8360ff8158b89912aa08be1d1ab804a9609f1508abcb456083c5e4c4a6ee8ea84e7a70c75cc862dc3c1820c6ae502552a6bfa5aeaec4bc3837d24bdaa7ab562763ff7f7188725c000b6611270d3f1c5749a2d0b15124d57375a7354e6965fb907ae3d80aa5253f21c5516cdeaeedefe7a7d10ed0d229d038fce538068f467b022191c3805cc313a954727d2a1c18ac806c57d581f9c12e0442f71ddadf5657908b1e4351286652c0f0ca990acfee1e3d64b8cc7cdb6329d12fe61ac32b36252dcd58c3f462d7dc580bbcf4378b986988ffbbc82fc16ca08aa38e12061c220f4e3f8c2591d28449097860fb9548e766edc8caaf95bcdc7281706e7ec225bd43e1cad76069e5553b7538bec0cfc026697ed0a6add04bbcf0497ded748766e8aebcbb99e30fa7f99be8bf6ef544901d81c95db6f86ad55e2491619a8db2b06e8d8cb4e342c46f9c386ca2bc1cf6db0e9b1ebdcaa37a29abee3e7d35b3e60209ff7c0c3dbcafc26b1232012fef15de3240680622080775d41ac52a0eb6d3d09a49d603c1f21bf1b5eedcd0e609be7a97a7d8a745fc17a07d360bac1d9d5237251d17a15b3b385f4634da5aeaa2ac46dd3b38c87791a15b231fb66f2fae5b1f8d0110f0a66a565f99d4d20d04eb6a34efffed90d56eff7973cd9aa191652c387fa5d083d9b24d3a53fdbeef959836c991f6808eea314694485b785dae23075968ed3cef57433b44b32c59eb8e9171bb79b71cacb2455eae519b0eecf49c0d66e3d6130901a4893dddacfa82541691579dea2f234ea3996eaad095a1835335e3b1bdd1245d85b4b1f2712a8de19169d75ca03bead86e2e4bb2dd6ea3973cc400d36b2e7fad4bfc22c2be98472b42deae16a3601b2146686b17dba607e5f486046cea9ee286e964cfd8a046ed5ac56533f5ecf095a97090e0bdee26af1cc0b169c0cf1bc816b77489fc7d4171bd34aa91537c56ba721c8c6d34b9aa8180290c02326db61ca07246d69a44d507dc0e4d390f74a8e1ff774c703fd2c1c7351b7aa0afe2217f6465cbc28d1d120d2ebb8144e4f00228596bbc0e586830a5fd60778d113271aec23b69acf7094c42e6b8f2f577a641e5abc42eae6e944c400641cca7d0a7747560a6a8267aa996bbe12c17a5c06cd5ced12165f5ee585088a45a22c356ec29bb58e0862da7a458f6ad289c2d4a9f76abd3f332812473f198fca3c7172b4e6b035b3243737728061d6456fcfa6a524bc51d7d97b9231c3c85cbb2b9b75cd36ef9fe20fe6207009b04fd3a94a396364845dae1beb2f46a01d16b0d85c3b182a1d3e87dd03d191a80e2bc139bc004df7cd66b90e120783afa8725a346b490df88947711eef77f76cada6096074e42aa73d824a7e81ae15f7ed3ceafeee782e5787ad41b68f26f0ca3b7c0e38612588899677b7c06390898b92faa80f2b6520ca16d6391bb023332b32b4899b744c849fae93073969cccad787be131d88ff68896f85ff223c8734091512b6086ac97be4859e460201bf4055b28211d64974b90e0af711e5bc9e39d37e620db13c4b9d76b03fcaf74de7920020729b472050a777eddff1f37f5ad8e6f802a7e6f40ce37eb1d58a9d0951e76150ab971cde0c07d6b4d69a6bb75562d9e809c5d0a57917c06bdad979f99329cb21e68331e4661675a95db8f93a1341ee7e372c4e4d263ed6d7a4206b9930a77be281f80147f3b235f2a2267c3b3df007215d9f4416d67f0eaa9eadf8cf6d3257ea0cef69a6438d18cfab18977b0bb283cc99923e3e4d4738b21eb74fc16e085abc078825d56d16440b02ef00602b64a0a666445224622b8b71379effeffbbedc44354549bf9b27e669b6b774a20d191b5447a3e7ad7f4af7a967fac72539b4507d66ca611369ec93dbccfa032ad39061289e3b25259875dc94a0b3d1cb43214433556986824f72b763d3f665c7bd7c572f8b01ca9e9ab5c6d2aa21dbd9689f9ce65d1f7163fe842bd5bc400d05b4ea531f636c1278e4d964c3c6edf9ca9cda6a642dacf105143bb375f9e33b5474d9b935f36f45068d5e8032e990e10c81535b7e49749ec0020def0c8bc858a30cb1095228f1c7a8ec176f86c97ca10e6c00b864dc883bb9e40c6fae8dad93194076e3a7beb539a209a712767dc703c6c2abd09a7d71ef795677657639fcba20531716857e4044252265e4abc4100107e4da0c13019baf9b315bb4d3e3558e77e6686b824d95ba2ee9436568b3343822b70506583f46925fdbd6d1a5eb1d89", 0x1000}, {&(0x7f0000009680)="efcd", 0x2}, {&(0x7f00000096c0)}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x50, 0x20004000}}], 0x2, 0x4000000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xa8, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f", 0x4}, 0x50)
syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}})
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0)
poll(0x0, 0x0, 0x8)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)

8m58.740176148s ago: executing program 4 (id=2471):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00030000000000000034090000004400000008"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r6 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r6, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r6, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1)
unshare(0x22020600)

8m56.397759415s ago: executing program 4 (id=2477):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000800, 0x4}, {0x0, 0x4, 0x0, 0x4}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)

8m54.467040302s ago: executing program 4 (id=2479):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)

8m52.576735888s ago: executing program 4 (id=2486):
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
r3 = getpgrp(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r3})
fcntl$notify(r2, 0x402, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r4, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0)
fsopen(0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4010000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18)

8m35.520735993s ago: executing program 36 (id=2486):
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
r3 = getpgrp(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r3})
fcntl$notify(r2, 0x402, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r4, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0)
fsopen(0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4010000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18)

7m2.891044596s ago: executing program 8 (id=2685):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x8, 0xb, 0xfffff024}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0xfe, 0x0, 0x2000000}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840)

7m2.533757852s ago: executing program 8 (id=2687):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file2\x00', 0x808080, &(0x7f0000000d40), 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==")
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00')
write$cgroup_pid(r0, &(0x7f0000000180)=0xffffffffffffffff, 0x12)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b442, 0xa)
r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x1, r2})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}})
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x0, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
readahead(0xffffffffffffffff, 0x7, 0x0)

7m1.041893896s ago: executing program 8 (id=2693):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x23000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)

6m55.536739253s ago: executing program 8 (id=2700):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

6m54.379346261s ago: executing program 8 (id=2703):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
fanotify_init(0x200, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

6m48.584672896s ago: executing program 8 (id=2713):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

6m32.049513737s ago: executing program 37 (id=2713):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

6m8.801112392s ago: executing program 7 (id=2771):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r3=>0x0)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}])
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvbGLHm0rpJk2agpCwygHUiMQvkQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFu/4VyMGcOnFCQcuDMv+CqRwR334xmdvYlseuu87ab9PORZp/n2eeZZ37z0+yjmbWsDfCNtfp+Zh40k9VL726X7d2d5c7uzvLtfj3JqSSNZC5JUb799yRfJvfS2/KtfsdIeUDx2er19fufXuy15uqtGl8ctd94BrG0erFW5dOab+nx5iservaa80nO1SVM3H7fF4d2P+HnEgCYZkVy4rD3W8np+ma9fA7o3RX37rFfaPcmHQAAAAA8B6/uZS/bOTPpOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFUv/+f1FvjX59PkX/9/9n6/dS119oDyYdAAAAAAAAAAAc9MVxd/juXvaynTP99n5R/c3/zapxvnp9JR9lK+1s5nK2s5ZuutnMYpLWyESz22vd7ubiGHsuHbrn0mOfMwAAAAAAAAC8xE6MO/BPWR3+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKZBkZzoFdV2vl9vpXEyyVyS2XLcveR+v/4iezDpAAAAAOA5eHUve9nOmX57v6ie+V+vnvvn8lHupJuNdNNJOzeq7wJ6T/2N3Z3lzu7O8u1yOzjvz/93rDCqGdP77uHwIy9UIy4M9ljNr/LbXMp83stmNvK7rKWbdubzTlVbS5FW/e1Fqx/n4fH+7KHWe18X6xtVJM3czEYV2+Vcz4fp5EYa1TlUY44+4h/L7BQ/rY2Zoxt1WZ7Rr+tyOrSqjMwMMrJQ577MxtmjM3HM6+TRIy2mMfgO6vwzyPnpuixz/c5U53xp5Op7/ehMJAtL/7273rlza/3m1qXpOaXH9GgmlkcycfHYmdjf3//DwWOcfPan8RTM1tnoraLHWy3frPY9k438Jh/mRtq5loVcy0quZjkr+XFWRvJ6YYzPWuN4n7Xv/aCuzCT5ZV1OhzKvZ0fyOrrStaq+0XeGWTr39Fekk9+uK+XF+vbUrUhnH1mb+5l47ehM/GW/fN3q3Lm1ub52d8zjfb8uywz8YqoyUV4v5warxsNXR9n32qF9i1Xf+UFf40DfhUHf131SZ+t7uIMzLVV9Fw/tW6763hj0vZLmIKnDuxwApt7pt07PNv/T/Hfz8+afm+vNd+fePnXt1HdmM/Ovk/848bfGXxs/Kd7K5/n98PkfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4fFsff3JrrdNpb6qoTL4yl2Tcwf2fKJp0zC9pZcILE/DMXenevntl6+NPfrhxe+2D9gftO1cXV5auXl1Y+dG1Kzc3Ou2F3uukwwQAnqLhTf+kIwEAAAAAAAAAAAAAAL7K8/h34kmfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HJbfT8zD1JkceHyQtne3VnulFu/Phw5l6QoK/9M8mVyL70trZHpiq86TvHZ6vX1+59eHM411x9fHLXfeB6KpfFITE8639ITzzc8w/kk5+oSJu7/AQAA//9jygD6")

6m7.195805678s ago: executing program 7 (id=2773):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4008000)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004)

6m4.795975901s ago: executing program 7 (id=2780):
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd64df33832dd637a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

6m3.334162637s ago: executing program 7 (id=2784):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0)

6m1.380732018s ago: executing program 7 (id=2788):
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5m54.060684196s ago: executing program 7 (id=2796):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYRESHEX], 0x1000f)

5m53.01811668s ago: executing program 38 (id=2796):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYRESHEX], 0x1000f)

2m0.121586678s ago: executing program 2 (id=3500):
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

1m59.869677077s ago: executing program 2 (id=3502):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

1m58.700547291s ago: executing program 2 (id=3507):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7"], 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, 0x0)
r6 = syz_open_dev$vim2m(0x0, 0xe3c, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000280)=@multiplanar_userptr={0x6, 0x1, 0x4, 0x100, 0x40, {0x77359400}, {0x1, 0x1, 0xc, 0x9, 0xf2, 0x2a, "780a9bc6"}, 0x80000000, 0x2, {&(0x7f0000000200)=[{0x7, 0x2, {&(0x7f00000000c0)}, 0x1}, {0x3, 0x1, {0x0}, 0x1}]}, 0x2, 0x0, r5})
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r5, 0x1)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8)
gettid()

1m56.667051268s ago: executing program 2 (id=3509):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x10200a2, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x18f881, 0x0)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020)

1m52.472519857s ago: executing program 2 (id=3518):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000040)={0x0, 0x1, 0x6, "24cbb01a1dc0"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m52.20312098s ago: executing program 2 (id=3520):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$unix(0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
fremovexattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="c7cdf3b47d1d2c8b"])
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xf1, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x7, 0x1, 0x7, 0x7, 0x4, 0x7, 0x9, 0x4b, 0x2, 0x90, 0x5, 0x81, 0x800, 0x8]})

1m51.749510321s ago: executing program 39 (id=3520):
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$unix(0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4004)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
fremovexattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="c7cdf3b47d1d2c8b"])
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xf1, 0x858d, 0x100, 0x8, 0x3000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x7, 0x1, 0x7, 0x7, 0x4, 0x7, 0x9, 0x4b, 0x2, 0x90, 0x5, 0x81, 0x800, 0x8]})

33.492953673s ago: executing program 6 (id=3781):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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")
syz_emit_ethernet(0x46, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
setresgid(0xee00, 0x0, 0x0)
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=""/25}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)

31.977311738s ago: executing program 6 (id=3787):
r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x18, 0xa, "a02306fd0f3bb79388e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

29.158953464s ago: executing program 6 (id=3794):
syz_open_dev$usbmon(&(0x7f0000000000), 0x5f45, 0x800)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2$9p(&(0x7f0000000080), 0x800)
socket$inet6(0xa, 0x1, 0x8010800000000084)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

28.869653084s ago: executing program 6 (id=3799):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

27.457676102s ago: executing program 6 (id=3803):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYBLOB="0c00030000000000000034090000004400000008"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r5 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r5, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r5, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000)
readv(r0, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1)
unshare(0x22020600)

23.529273768s ago: executing program 6 (id=3813):
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

11.224711564s ago: executing program 0 (id=3853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x7, 0x80, 0x6}, @ipv6=@dccp_packet={0x2, 0x6, "80d099", 0x4c, 0x21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x7, "8ef23e", 0x4, "a4a99f"}, "9753274c984dbb961034d64a6f7ed7c1e5639bc329a29c8b20603793e1094e831c722d44cbcfc5aa15aa6a54750b32b88c2321b0623b009d39c74d7e"}}}}, 0x82)

9.649894188s ago: executing program 9 (id=3858):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0)

9.58916367s ago: executing program 0 (id=3859):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

8.799234375s ago: executing program 0 (id=3864):
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b0201010320080904000000010120000924010080090900090904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

8.532585803s ago: executing program 3 (id=3865):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc686f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd8e1c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c0a000000ecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000))
r3 = syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r5=>0x0)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
io_submit(r5, 0x0, &(0x7f0000000100))
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$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")

8.367099143s ago: executing program 9 (id=3866):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

7.027403667s ago: executing program 1 (id=3870):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
recvmmsg(0xffffffffffffffff, &(0x7f00000200c0)=[{{&(0x7f0000019080)=@nl, 0x80, &(0x7f00000194c0)=[{&(0x7f0000019100)=""/246, 0xf6}, {&(0x7f0000019200)=""/52, 0x34}, {&(0x7f0000019240)=""/104, 0x68}, {&(0x7f00000192c0)=""/92, 0x5c}, {&(0x7f0000019340)=""/101, 0x65}, {&(0x7f00000193c0)=""/85, 0x55}, {&(0x7f0000019440)=""/69, 0x45}], 0x7, &(0x7f0000019540)=""/4096, 0x1000}, 0x600}, {{&(0x7f000001bd80)=@xdp, 0x80, &(0x7f000001d340)=[{&(0x7f000001be00)=""/28, 0x1c}, {&(0x7f000001be40)=""/182, 0xb6}, {&(0x7f000001bf00)=""/4096, 0x1000}, {&(0x7f000001cf00)=""/165, 0xa5}, {&(0x7f000001cfc0)=""/239, 0xef}, {&(0x7f000001d0c0)=""/17, 0x11}, {&(0x7f000001d100)=""/42, 0x2a}, {&(0x7f000001d140)=""/142, 0x8e}, {&(0x7f000001d200)=""/96, 0x60}, {&(0x7f000001d280)=""/148, 0x94}], 0xa, &(0x7f000001d400)=""/4096, 0x1000}, 0x8}, {{&(0x7f000001e400)=@alg, 0x80, &(0x7f000001ea00)=[{&(0x7f000001e480)=""/188, 0xbc}, {&(0x7f000001e540)=""/114, 0x72}, {0x0}, {&(0x7f000001e640)=""/146, 0x92}, {&(0x7f000001e700)=""/191, 0xbf}, {&(0x7f000001e7c0)=""/146, 0x92}, {&(0x7f000001e880)=""/196, 0xc4}, {&(0x7f000001e980)=""/115, 0x73}], 0x8}, 0x1000}, {{0x0, 0x0, &(0x7f0000020000)=[{&(0x7f000001eb80)=""/4096, 0x1000}, {&(0x7f000001fb80)=""/197, 0xc5}, {&(0x7f000001fc80)=""/85, 0x55}, {&(0x7f000001fd00)=""/21, 0x15}, {&(0x7f000001fd40)=""/148, 0x94}, {&(0x7f000001fe00)=""/95, 0x5f}, {&(0x7f000001fe80)=""/206, 0xce}, {&(0x7f000001ff80)=""/117, 0x75}], 0x8, &(0x7f0000020080)=""/27, 0x1b}, 0x10}], 0x4, 0x12102, &(0x7f0000020200))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004000)=ANY=[], 0x3a}}, 0x810)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r3)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
r4 = dup2(r0, r0)
read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020)
write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)

6.935968956s ago: executing program 5 (id=3871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x41}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

6.877998697s ago: executing program 3 (id=3872):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

5.576762252s ago: executing program 3 (id=3873):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3)
read$hiddev(0xffffffffffffffff, &(0x7f0000001140)=""/126, 0x7e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)

5.576474942s ago: executing program 5 (id=3874):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="40260492"], 0x7)

5.563585375s ago: executing program 0 (id=3875):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x18, 0xa, "a02306fd0f3bb79388e9"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

5.384634422s ago: executing program 1 (id=3876):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

4.873199821s ago: executing program 9 (id=3877):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0x14, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9406fb43135b8870709584ae7df4af14e1df82d000000000400", [0x7d, 0xd]})

4.732173576s ago: executing program 9 (id=3878):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0)

4.564519656s ago: executing program 1 (id=3879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@random={0xdd, 0x8, 'Abcdefgh'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0xff}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x60}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008025400000000000000000000000000640001000006020202020202010882"], 0x36)

4.283935176s ago: executing program 5 (id=3880):
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

3.860269914s ago: executing program 1 (id=3881):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x215}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="75545db2014d91c8b2f79c5b72c5cbcf23bb4fcfd416603d8f3ec02f3be8ac4f4401d89e641cbd7a79c36afe7ea5a4cb649a33157051", 0x36}, {&(0x7f0000000180)="4ab8f24ad21822ca60e68cd0006f17798753e83e119dbf2e23b762e6ac7eb7cdaf6d2daf6e48511cb6c8bece4c480133c34667b1e0e97cfdd8f1a227f22c8588d866f2cc9d", 0x45}, {&(0x7f00000002c0)="3ae25e0911e5a54538faf2348478e824afd69d92eac7e44505f7450b04a9e79f07410ea34cdd534294c055c07c22c4fcbe85a304d1163481622a04a330d6e5dd2958d3c39ce0c6a86a9a0940a42692af970f5bec20e2d23c40c73f64b88acd8f459c2e02536acbf0d8105e40177da3c04b7135458be5385be2d5af23eb8d4bbdee7dab6e70863f818e501c3cac46c7f2c376b0e59224173ca6e91393598b1e0519da974b916b1451a812972bd09c5f1907655734d138efccff20674b7bbb1325bfcf3e25810901f07e6a24", 0xcb}, {&(0x7f00000003c0)="429f7ec6764f1192ce4eb6787d3142cf3dc0f92314b4baa8b4ffa6782d78", 0x1e}], 0x4}}, {{&(0x7f0000000640)={0x2, 0x4e23, @remote}, 0x10, 0xfffffffffffffffc}}], 0x2, 0x80)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.770912824s ago: executing program 5 (id=3882):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2507000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x40080)

3.641199328s ago: executing program 9 (id=3883):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x200000d0)

3.614221294s ago: executing program 1 (id=3884):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
semget(0x1, 0x2, 0x210)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000004200)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32], 0x0, 0x0, &(0x7f0000000000))
r3 = syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r5=>0x0)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
io_submit(r5, 0x0, &(0x7f0000000100))
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@part={'part', 0x3d, 0x9}}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'cp855'}}, {@gid={'gid', 0x3d, 0xee00}}, {@nobarrier}, {@uid}, {}]}, 0xfe, 0x5ee, &(0x7f0000000680)="$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")

3.511222049s ago: executing program 5 (id=3885):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="201420"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x28, "e61a6db37d87b1bc5d171fa81722ca68e095974032f86525358552f57b7351cfee66b0f3aad87f89"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x40, 0x3f, 0x4, "98b1540f"}, 0x0, 0x0, 0x0, 0x0})

3.390468042s ago: executing program 9 (id=3886):
socket(0x10, 0x803, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000100)="03be00fbb46ecedbe0090a43", 0xc}], 0x3)

2.049507208s ago: executing program 1 (id=3887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r10, 0x13}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}, 0x4)

1.973311518s ago: executing program 0 (id=3888):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
recvmmsg(0xffffffffffffffff, &(0x7f00000200c0)=[{{&(0x7f0000019080)=@nl, 0x80, &(0x7f00000194c0)=[{&(0x7f0000019100)=""/246, 0xf6}, {&(0x7f0000019200)=""/52, 0x34}, {&(0x7f0000019240)=""/104, 0x68}, {&(0x7f00000192c0)=""/92, 0x5c}, {&(0x7f0000019340)=""/101, 0x65}, {&(0x7f00000193c0)=""/85, 0x55}, {&(0x7f0000019440)=""/69, 0x45}], 0x7, &(0x7f0000019540)=""/4096, 0x1000}, 0x600}, {{&(0x7f000001bd80)=@xdp, 0x80, &(0x7f000001d340)=[{&(0x7f000001be00)=""/28, 0x1c}, {&(0x7f000001be40)=""/182, 0xb6}, {&(0x7f000001bf00)=""/4096, 0x1000}, {&(0x7f000001cf00)=""/165, 0xa5}, {&(0x7f000001cfc0)=""/239, 0xef}, {&(0x7f000001d0c0)=""/17, 0x11}, {&(0x7f000001d100)=""/42, 0x2a}, {&(0x7f000001d140)=""/142, 0x8e}, {&(0x7f000001d200)=""/96, 0x60}, {&(0x7f000001d280)=""/148, 0x94}], 0xa, &(0x7f000001d400)=""/4096, 0x1000}, 0x8}, {{&(0x7f000001e400)=@alg, 0x80, &(0x7f000001ea00)=[{&(0x7f000001e480)=""/188, 0xbc}, {&(0x7f000001e540)=""/114, 0x72}, {0x0}, {&(0x7f000001e640)=""/146, 0x92}, {&(0x7f000001e700)=""/191, 0xbf}, {&(0x7f000001e7c0)=""/146, 0x92}, {&(0x7f000001e880)=""/196, 0xc4}, {&(0x7f000001e980)=""/115, 0x73}], 0x8}, 0x1000}, {{0x0, 0x0, &(0x7f0000020000)=[{&(0x7f000001eb80)=""/4096, 0x1000}, {&(0x7f000001fb80)=""/197, 0xc5}, {&(0x7f000001fc80)=""/85, 0x55}, {&(0x7f000001fd00)=""/21, 0x15}, {&(0x7f000001fd40)=""/148, 0x94}, {&(0x7f000001fe00)=""/95, 0x5f}, {&(0x7f000001fe80)=""/206, 0xce}, {&(0x7f000001ff80)=""/117, 0x75}], 0x8, &(0x7f0000020080)=""/27, 0x1b}, 0x10}], 0x4, 0x12102, &(0x7f0000020200))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004000)=ANY=[], 0x3a}}, 0x810)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r3)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
r4 = dup2(r0, r0)
read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020)
write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)

1.93243202s ago: executing program 3 (id=3889):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

788.230282ms ago: executing program 3 (id=3890):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0x14, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9406fb43135b8870709584ae7df4af14e1df82d000000000400", [0x7d, 0xd]})

272.004442ms ago: executing program 0 (id=3891):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4113, 0x1011}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/76, 0x4c}], 0x4}, 0x8}], 0x3, 0x2002, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

182.614308ms ago: executing program 3 (id=3892):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 5 (id=3893):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20)

kernel console output (not intermixed with test programs):

g 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1446.233651][T19513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.303284][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1446.319178][T14799] pwc: recv_control_msg error -71 req 02 val 2800
[ 1446.322213][ T5788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1446.341299][ T5788] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1446.341460][T14799] pwc: recv_control_msg error -71 req 04 val 1100
[ 1446.374590][    T9] rc_core: IR keymap rc-hauppauge not found
[ 1446.404937][    T9] Registered IR keymap rc-empty
[ 1446.416323][ T5788] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1446.422964][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.431238][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1446.445661][T14799] pwc: recv_control_msg error -71 req 04 val 1200
[ 1446.494590][ T5788] usb 7-1: config 0 descriptor??
[ 1446.509579][T14799] pwc: Registered as video103.
[ 1446.520205][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.541347][T14799] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61
[ 1446.557867][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1446.610730][T14799] usb 6-1: USB disconnect, device number 39
[ 1446.625497][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input60
[ 1446.685266][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.738702][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.794578][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.835448][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.910905][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.944701][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1446.978779][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1447.014469][T17652] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels)
[ 1447.028746][ T5788] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1447.034984][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1447.053748][T17652] peak_usb 10-1:0.0 can0: sending command failure: -8
[ 1447.091050][T17652] peak_usb 10-1:0.0 can0: sending command failure: -8
[ 1447.099015][T19640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1447.132888][T17652] peak_usb 10-1:0.0 can0: sending command failure: -8
[ 1447.148440][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1447.191977][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1447.281176][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1447.306105][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1447.330772][T19513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1447.339138][T19654] loop5: detected capacity change from 0 to 512
[ 1447.365044][    T9] usb 3-1: USB disconnect, device number 85
[ 1447.373247][T19654] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1447.383912][T19513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1447.394687][ T5848] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1447.423528][T19654] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[ 1447.468096][T19654] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[ 1447.490948][T19654] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1447.500948][T19654] System zones: 0-2, 18-18, 34-35
[ 1447.509077][T19649] tipc: Resetting bearer <eth:syzkaller0>
[ 1447.543883][T19654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1447.556942][T19642] syzkaller0: entered promiscuous mode
[ 1447.571540][T19642] syzkaller0: entered allmulticast mode
[ 1447.590685][T19636] tipc: Resetting bearer <eth:syzkaller0>
[ 1447.607453][T17652] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -8
[ 1447.645100][T17652] usb 10-1: USB disconnect, device number 22
[ 1447.674152][T19636] tipc: Disabling bearer <eth:syzkaller0>
[ 1447.764064][T19513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1447.775342][T19513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.312993][T19667] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1448.326146][T19513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1448.354607][T19513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.611425][T19657] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[ 1448.686608][   T30] audit: type=1326 audit(1779913699.972:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.9.3496" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc2639ce59 code=0x0
[ 1448.909802][T19513] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1448.946635][ T5848] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1448.975995][T19513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1448.999214][T19513] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1449.021611][T19513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1449.029531][    T9] usb 7-1: reset high-speed USB device number 111 using dummy_hcd
[ 1449.048003][T19513] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1449.083565][T19513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1449.105704][T19513] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1449.131500][ T5848] usb 4-1: Using ep0 maxpacket: 8
[ 1449.144474][ T5848] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1449.151419][T19513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1449.160057][ T5848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1449.191922][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1449.232417][ T5848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1449.260579][ T5848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1449.297114][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1449.347087][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.520264][T19513] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1449.592335][T19513] 8021q: adding VLAN 0 to HW filter on device team0
[ 1449.592330][T19688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'.
[ 1449.618729][ T5848] usb 4-1: usb_control_msg returned -32
[ 1449.628924][ T5848] usbtmc 4-1:16.0: can't read capabilities
[ 1449.671299][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1449.678577][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1449.751015][T14994] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1449.758250][T14994] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1449.890502][ T9884] usb 4-1: USB disconnect, device number 112
[ 1450.031081][T15467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1450.048937][T19513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1450.076565][T19513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1450.429007][T19698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1450.439262][T19698] syzkaller0: entered promiscuous mode
[ 1450.446789][T19698] syzkaller0: entered allmulticast mode
[ 1450.465567][T19698] tipc: Resetting bearer <eth:syzkaller0>
[ 1450.486296][T19696] tipc: Resetting bearer <eth:syzkaller0>
[ 1450.524216][T14797] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1450.572851][T19696] tipc: Disabling bearer <eth:syzkaller0>
[ 1450.625594][ T5848] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1450.705423][T14797] usb 10-1: Using ep0 maxpacket: 8
[ 1450.724861][T14797] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1450.741571][T14797] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1450.792204][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1450.828313][ T5848] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1450.857944][ T5848] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1450.876274][T14797] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1450.911439][ T5848] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[ 1450.931453][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1450.956981][ T5848] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1450.977965][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1451.004994][ T5848] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1451.019206][T14797] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1451.037327][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1451.058117][ T5848] usb 6-1: Product: syz
[ 1451.068510][T14797] usb 10-1: config 168 interface 0 has no altsetting 0
[ 1451.076834][ T5848] usb 6-1: Manufacturer: syz
[ 1452.916054][ T5848] usb 6-1: SerialNumber: syz
[ 1452.922812][T14797] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1452.934268][T14797] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1452.983854][    T9] usb 7-1: device descriptor read/64, error -71
[ 1452.997645][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1453.012967][T19709] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1453.015232][T14797] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1453.034774][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1453.046835][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1453.058883][T14797] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1453.073185][T14797] usb 10-1: config 168 interface 0 has no altsetting 0
[ 1453.105272][T14797] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1453.140787][T14797] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1453.190068][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1453.239900][T14797] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1453.257604][    T9] usb 7-1: reset high-speed USB device number 111 using dummy_hcd
[ 1453.274376][    T9] usb 7-1: device reset changed ep0 maxpacket size!
[ 1453.309579][T14799] usb 7-1: USB disconnect, device number 111
[ 1453.318558][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1453.372528][T14797] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1453.431818][T14797] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1453.550157][T14799] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[ 1453.577538][T14797] usb 10-1: config 168 interface 0 has no altsetting 0
[ 1453.802201][T14799] usb 7-1: Using ep0 maxpacket: 16
[ 1454.021697][T14799] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1454.277243][T14799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.457473][T14799] usb 7-1: Product: syz
[ 1454.466661][T14797] usb 10-1: string descriptor 0 read error: -71
[ 1454.506000][T14799] usb 7-1: Manufacturer: syz
[ 1454.525780][T14797] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1454.542587][ T5848] usb 6-1: USB disconnect, device number 40
[ 1454.555054][T14799] usb 7-1: SerialNumber: syz
[ 1454.581243][T14797] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.637353][T14799] usb 7-1: config 0 descriptor??
[ 1454.659529][T14797] usb 10-1: can't set config #168, error -71
[ 1454.684377][T14799] usb 7-1: can't set config #0, error -71
[ 1454.731883][T14797] usb 10-1: USB disconnect, device number 23
[ 1454.747029][T14799] usb 7-1: USB disconnect, device number 112
[ 1454.847563][T19732] loop6: detected capacity change from 0 to 512
[ 1454.868344][T19513] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1454.943461][T19732] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1454.978976][T19732] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1455.000011][T15873] udevd[15873]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1455.020401][T19513] veth0_vlan: entered promiscuous mode
[ 1455.033652][T19732] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[ 1455.060132][T19513] veth1_vlan: entered promiscuous mode
[ 1455.074601][T19732] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1455.090290][T19732] System zones: 0-2, 18-18, 34-35
[ 1455.108638][T19732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1455.245841][T19513] veth0_macvtap: entered promiscuous mode
[ 1455.263004][ T5848] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1455.378702][T19513] veth1_macvtap: entered promiscuous mode
[ 1455.509426][T19513] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1455.553964][ T5848] usb 6-1: Using ep0 maxpacket: 32
[ 1455.570785][ T5848] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1455.610869][T19513] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1455.629922][ T5848] usb 6-1: config 0 has no interface number 0
[ 1455.643774][ T5848] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1455.666391][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1455.675865][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1455.694400][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1455.705542][ T5848] usb 6-1: Product: syz
[ 1455.720329][ T5848] usb 6-1: Manufacturer: syz
[ 1455.726462][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1455.740006][ T5848] usb 6-1: SerialNumber: syz
[ 1455.761745][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1455.777506][ T5848] usb 6-1: config 0 descriptor??
[ 1455.814232][T17652] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[ 1456.034183][T17652] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1456.062658][T17652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1456.085113][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1456.093352][T17652] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1456.113074][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1456.124504][T17652] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1456.159395][T17652] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.187285][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1456.188370][T17652] usb 4-1: config 0 descriptor??
[ 1456.202865][T19743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1456.231384][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1456.268927][   T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1456.283280][ T5848] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1456.315737][ T5848] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1456.490957][   T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1456.524886][   T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1456.559133][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1456.580897][   T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1456.603228][   T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1456.620644][   T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1456.638223][   T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1456.646452][   T24] usb 10-1: Product: syz
[ 1456.651742][   T24] usb 10-1: Manufacturer: syz
[ 1456.686699][   T24] cdc_wdm 10-1:1.0: skipping garbage
[ 1456.694566][T17652] betop 0003:11C2:2208.0036: ignoring exceeding usage max
[ 1456.702677][   T24] cdc_wdm 10-1:1.0: skipping garbage
[ 1456.721151][T17652] betop 0003:11C2:2208.0036: unknown main item tag 0x4
[ 1456.729235][   T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1456.743879][   T24] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1456.754932][T17652] betop 0003:11C2:2208.0036: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.3-1/input0
[ 1456.781914][ T5848] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1456.793720][T17652] betop 0003:11C2:2208.0036: no inputs found
[ 1456.822700][ T5848] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1456.875646][ T5848] usb 6-1: USB disconnect, device number 41
[ 1456.925502][T17652] usb 4-1: USB disconnect, device number 113
[ 1457.015183][T19748] fido_id[19748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1457.228582][ T8321] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1457.689397][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.014163][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.032102][T13585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1458.050010][T13585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1458.067207][T13585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1458.082767][T13585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1458.090757][T13585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1458.230222][T19768] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3522'.
[ 1458.274925][T19768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3522'.
[ 1458.464598][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1459.358942][T19764] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1459.406455][T19764] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1459.437939][   T24] usb 10-1: USB disconnect, device number 24
[ 1459.499308][T19781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1459.528171][T19764] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1459.540705][T19764] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1459.568195][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1459.681494][T14797] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[ 1459.728281][T19786] loop5: detected capacity change from 0 to 512
[ 1459.794775][T19786] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1459.814302][T19786] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[ 1459.831624][T19786] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[ 1459.859018][T19786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1459.870513][T19786] System zones: 0-2, 18-18, 34-35
[ 1459.906266][T19786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1459.915043][T14797] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1459.956543][T14797] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1460.008153][T14797] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1460.040542][T14797] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1460.054733][ T9884] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1460.129882][T14797] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1460.160487][T14797] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1460.190851][T14797] usb 7-1: Product: syz
[ 1460.200317][T14797] usb 7-1: Manufacturer: syz
[ 1460.236858][T14797] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1460.277969][ T9884] usb 4-1: Using ep0 maxpacket: 16
[ 1460.304877][ T9884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1460.367270][ T9884] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1460.426691][ T9884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.448050][T19791] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[ 1460.488789][ T9884] usb 4-1: Product: syz
[ 1460.518511][ T9884] usb 4-1: Manufacturer: syz
[ 1460.520345][T17652] usb 7-1: USB disconnect, device number 113
[ 1460.536397][ T9884] usb 4-1: SerialNumber: syz
[ 1460.641416][ T9884] usb 4-1: config 0 descriptor??
[ 1460.835299][   T12] bridge_slave_1: left allmulticast mode
[ 1460.851647][   T12] bridge_slave_1: left promiscuous mode
[ 1460.869836][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1460.909540][   T12] bridge_slave_0: left allmulticast mode
[ 1460.930943][   T12] bridge_slave_0: left promiscuous mode
[ 1460.949222][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1461.056558][ T5848] usb 10-1: new full-speed USB device number 25 using dummy_hcd
[ 1461.232697][ T5848] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1461.289809][ T5848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1461.331475][ T5848] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1461.384324][ T5848] usb 10-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1461.425123][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.463143][ T5848] usb 10-1: config 0 descriptor??
[ 1461.490723][T19808] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1461.993741][ T5848] betop 0003:11C2:2208.0037: ignoring exceeding usage max
[ 1462.689674][ T5848] betop 0003:11C2:2208.0037: unknown main item tag 0x4
[ 1462.713381][ T5848] betop 0003:11C2:2208.0037: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.9-1/input0
[ 1462.807478][ T5848] betop 0003:11C2:2208.0037: no inputs found
[ 1462.893691][ T5848] usb 10-1: USB disconnect, device number 25
[ 1463.088769][T19837] fido_id[19837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1463.130614][ T5848] usb 4-1: USB disconnect, device number 114
[ 1463.604468][T19842] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3543'.
[ 1463.618275][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3543'.
[ 1463.688756][ T5848] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1463.870303][ T5848] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1463.887305][ T5848] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1463.912189][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1463.935548][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1463.980486][ T5848] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1464.008302][ T5848] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1464.030062][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1464.061866][ T5848] usb 4-1: Product: syz
[ 1464.071602][ T5848] usb 4-1: Manufacturer: syz
[ 1464.097860][ T5848] cdc_wdm 4-1:1.0: skipping garbage
[ 1464.103667][ T5848] cdc_wdm 4-1:1.0: skipping garbage
[ 1464.115082][ T5848] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1464.121088][ T5848] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1464.213454][T15467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1464.606978][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1464.669684][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1464.792800][   T12] bond0 (unregistering): Released all slaves
[ 1465.129776][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1465.181021][T19836] Set syz1 is full, maxelem 65536 reached
[ 1465.361719][   T12] tipc: Left network mode
[ 1465.473853][ T9884] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[ 1465.685524][ T9884] usb 10-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1465.722389][ T9884] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1465.765083][ T9884] usb 10-1: Product: syz
[ 1465.774990][ T9884] usb 10-1: Manufacturer: syz
[ 1465.780454][ T9884] usb 10-1: SerialNumber: syz
[ 1465.810739][ T9884] usb 10-1: config 0 descriptor??
[ 1465.909277][T17652] usb 7-1: new full-speed USB device number 114 using dummy_hcd
[ 1466.112141][ T9884] peak_usb 10-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels)
[ 1466.234828][T14797] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1466.330871][ T9884] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[ 1466.350878][ T9884] peak_usb 10-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[ 1466.361376][T19875] loop5: detected capacity change from 0 to 32768
[ 1466.369920][T19875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3553 (19875)
[ 1466.391901][T19875] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1466.402173][T19875] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1466.417052][T17652] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1466.418412][T14797] usb 2-1: Using ep0 maxpacket: 32
[ 1466.434936][T17652] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.444232][T17652] usb 7-1: Product: syz
[ 1466.448478][T17652] usb 7-1: Manufacturer: syz
[ 1466.464687][T14797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1466.475902][T17652] usb 7-1: SerialNumber: syz
[ 1466.498269][T14797] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1466.530792][T17652] usb 7-1: config 0 descriptor??
[ 1466.546588][T14797] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1466.602805][T14797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.623580][T19875] BTRFS info (device loop5): setting nodatasum
[ 1466.629873][T19875] BTRFS info (device loop5): enabling ssd optimizations
[ 1466.639110][T14797] usb 2-1: Product: syz
[ 1466.639177][T14797] usb 2-1: Manufacturer: syz
[ 1466.639207][T14797] usb 2-1: SerialNumber: syz
[ 1466.653047][T19875] BTRFS info (device loop5): turning on async discard
[ 1466.659932][T19875] BTRFS info (device loop5): enabling free space tree
[ 1466.670992][T14797] usb 2-1: config 0 descriptor??
[ 1466.709920][ T9884] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71
[ 1466.863758][T14797] usb 4-1: USB disconnect, device number 115
[ 1466.873051][ T9884] usb 10-1: USB disconnect, device number 26
[ 1466.983514][T17652] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1467.097392][   T30] audit: type=1800 audit(1779913716.941:101): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3553" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1467.572660][T17652] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1467.589365][T17652] usb 7-1: USB disconnect, device number 114
[ 1467.664029][ T9884] usb 10-1: new full-speed USB device number 27 using dummy_hcd
[ 1467.752873][T15467] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1467.820385][   T12] hsr_slave_0: left promiscuous mode
[ 1467.876518][   T12] hsr_slave_1: left promiscuous mode
[ 1467.888220][ T9884] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1467.894409][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1467.947446][ T9884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1467.951228][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1467.986058][ T9884] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1468.005118][ T9884] usb 10-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1468.031289][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1468.048414][ T9884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1468.067566][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1468.090908][ T9884] usb 10-1: config 0 descriptor??
[ 1468.159797][T19901] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1468.177528][   T12] veth1_macvtap: left promiscuous mode
[ 1468.197606][   T12] veth0_macvtap: left promiscuous mode
[ 1468.230537][   T12] veth1_vlan: left promiscuous mode
[ 1468.260037][   T12] veth0_vlan: left promiscuous mode
[ 1468.765204][ T9884] betop 0003:11C2:2208.0038: unknown main item tag 0x4
[ 1468.781134][ T9884] betop 0003:11C2:2208.0038: ignoring exceeding usage max
[ 1468.824494][ T9884] betop 0003:11C2:2208.0038: unknown main item tag 0x4
[ 1469.669322][ T9884] betop 0003:11C2:2208.0038: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.9-1/input0
[ 1469.680672][ T9884] betop 0003:11C2:2208.0038: no inputs found
[ 1469.690750][ T9884] usb 10-1: USB disconnect, device number 27
[ 1469.770946][T17652] usb 2-1: USB disconnect, device number 127
[ 1469.913488][T19942] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1470.096357][T19936] fido_id[19936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1470.247072][T19951] loop9: detected capacity change from 0 to 128
[ 1470.994484][T17652] usb 7-1: new high-speed USB device number 115 using dummy_hcd
[ 1471.288703][T17652] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1471.397038][T17652] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1471.450800][T17652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1471.701723][T17652] usb 7-1: config 0 descriptor??
[ 1471.881927][T17652] pwc: Askey VC010 type 2 USB webcam detected.
[ 1471.976177][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1472.048679][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1472.241619][T17652] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1472.260344][T17652] pwc: recv_control_msg error -32 req 02 val 2700
[ 1472.285325][T17652] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1472.298077][T17652] pwc: recv_control_msg error -32 req 04 val 1000
[ 1472.313439][T17652] pwc: recv_control_msg error -32 req 04 val 1300
[ 1472.336723][T17652] pwc: recv_control_msg error -32 req 04 val 1400
[ 1472.384026][T17652] pwc: recv_control_msg error -32 req 02 val 2000
[ 1472.393351][T17652] pwc: recv_control_msg error -32 req 02 val 2100
[ 1472.404373][T17652] pwc: recv_control_msg error -32 req 04 val 1500
[ 1472.419379][T17652] pwc: recv_control_msg error -32 req 02 val 2500
[ 1472.453091][T17652] pwc: recv_control_msg error -32 req 02 val 2400
[ 1472.620231][T17652] pwc: recv_control_msg error -32 req 02 val 2600
[ 1473.020679][T17652] pwc: recv_control_msg error -71 req 02 val 2800
[ 1473.066960][T17652] pwc: recv_control_msg error -71 req 04 val 1100
[ 1473.087067][T17652] pwc: recv_control_msg error -71 req 04 val 1200
[ 1473.105415][T17652] pwc: Registered as video103.
[ 1473.130688][T19919] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1473.154851][T17652] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input63
[ 1473.184802][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1473.285953][T17652] usb 7-1: USB disconnect, device number 115
[ 1473.784258][ T5848] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1473.957404][T14797] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1473.965171][ T5848] usb 4-1: Using ep0 maxpacket: 32
[ 1473.976962][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.002641][ T5848] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1474.027417][ T5848] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1474.048826][T19995] qrtr: Invalid version 0
[ 1474.058894][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.071620][ T5848] usb 4-1: Product: syz
[ 1474.085500][ T5848] usb 4-1: Manufacturer: syz
[ 1474.107068][ T5848] usb 4-1: SerialNumber: syz
[ 1474.150190][ T5848] usb 4-1: config 0 descriptor??
[ 1474.163959][T19765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1474.173950][T14797] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1474.206599][T19765] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1474.230247][T14797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1474.241257][T19765] bridge_slave_0: entered allmulticast mode
[ 1474.248721][T19765] bridge_slave_0: entered promiscuous mode
[ 1474.291939][T19765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1474.309698][T14797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1474.337314][T19765] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1474.359386][T19765] bridge_slave_1: entered allmulticast mode
[ 1474.384259][T14797] usb 6-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1474.399355][T19765] bridge_slave_1: entered promiscuous mode
[ 1474.403891][T14797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1474.461564][T14797] usb 6-1: config 0 descriptor??
[ 1474.488994][T19985] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1474.613702][T19765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1474.663326][T19765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1474.814319][   T24] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1474.849832][T19765] team0: Port device team_slave_0 added
[ 1474.874004][T19765] team0: Port device team_slave_1 added
[ 1474.978726][T19765] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1475.000389][T19765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1475.005500][T14797] betop 0003:11C2:2208.0039: unknown main item tag 0x4
[ 1475.050036][   T24] usb 10-1: Using ep0 maxpacket: 8
[ 1475.091787][   T24] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1475.105454][T14797] betop 0003:11C2:2208.0039: ignoring exceeding usage max
[ 1475.122958][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1475.134591][T19765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1475.139669][T14797] betop 0003:11C2:2208.0039: unknown main item tag 0x4
[ 1475.171860][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1475.198819][T19765] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1475.213416][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1475.230583][T19765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1475.247081][T14797] betop 0003:11C2:2208.0039: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.5-1/input0
[ 1475.270655][   T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1475.298322][   T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1475.337828][T14797] betop 0003:11C2:2208.0039: no inputs found
[ 1475.341344][T19765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1475.357799][T20024] loop1: detected capacity change from 0 to 128
[ 1475.367493][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.490268][T20025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1475.654914][T14797] usb 6-1: USB disconnect, device number 42
[ 1475.705474][   T24] usb 10-1: usb_control_msg returned -32
[ 1475.739480][   T24] usbtmc 10-1:16.0: can't read capabilities
[ 1476.139950][T20026] fido_id[20026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1476.190647][   T24] usb 10-1: USB disconnect, device number 28
[ 1476.301597][T20022] tipc: Resetting bearer <eth:syzkaller0>
[ 1476.378668][T20018] tipc: Disabling bearer <eth:syzkaller0>
[ 1476.409981][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1476.426327][T19765] hsr_slave_0: entered promiscuous mode
[ 1476.435092][T19765] hsr_slave_1: entered promiscuous mode
[ 1476.445911][T19765] debugfs: 'hsr0' already exists in 'hsr'
[ 1476.452130][T19765] Cannot create hsr debugfs directory
[ 1477.003576][T20041] loop6: detected capacity change from 0 to 32768
[ 1477.012626][T20041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3592 (20041)
[ 1477.015653][T14797] usb 4-1: USB disconnect, device number 116
[ 1477.044855][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1477.051235][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1477.167332][T20041] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1477.177530][T20041] BTRFS info (device loop6): using sha256 checksum algorithm
[ 1477.328380][T20041] BTRFS info (device loop6): setting nodatasum
[ 1477.331017][T20063] qrtr: Invalid version 0
[ 1477.334625][T20041] BTRFS info (device loop6): enabling ssd optimizations
[ 1477.346268][T20041] BTRFS info (device loop6): turning on async discard
[ 1477.353287][T20041] BTRFS info (device loop6): enabling free space tree
[ 1477.424497][T20070] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3596'.
[ 1477.740667][   T30] audit: type=1800 audit(1779913726.791:102): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3592" name="file1" dev="loop6" ino=260 res=0 errno=0
[ 1477.998722][T20081] loop3: detected capacity change from 0 to 128
[ 1478.705772][ T8321] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1478.747580][T19765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1478.782716][T19765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1478.795439][T14797] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1479.017373][T14797] usb 10-1: Using ep0 maxpacket: 16
[ 1479.038926][T14797] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.075077][T14797] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1479.144905][   T24] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 1479.185688][T14797] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1479.263893][T14797] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1479.306739][T14797] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1479.368745][   T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1479.387105][T14797] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1479.414080][T14797] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1479.437227][T14797] usb 10-1: Manufacturer: syz
[ 1479.444574][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1479.494420][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1479.501556][T14797] usb 10-1: config 0 descriptor??
[ 1479.549552][T19765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1479.554695][   T24] usb 6-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1479.560533][T19765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.629144][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.669109][   T24] usb 6-1: config 0 descriptor??
[ 1479.690492][T20089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1479.702060][T20106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1479.764264][   T29] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1479.942853][T19765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1479.970027][   T29] usb 4-1: Using ep0 maxpacket: 32
[ 1479.976969][T19765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.977868][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1480.018882][   T29] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1480.033967][T14797] rc_core: IR keymap rc-hauppauge not found
[ 1480.038344][   T29] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1480.054740][T14797] Registered IR keymap rc-empty
[ 1480.070716][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.084293][   T29] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1480.104441][T20103] tipc: Resetting bearer <eth:syzkaller0>
[ 1480.113061][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.118659][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.124015][T20107] syzkaller0: entered promiscuous mode
[ 1480.142908][T20107] syzkaller0: entered allmulticast mode
[ 1480.148742][   T29] usb 4-1: Product: syz
[ 1480.159055][   T29] usb 4-1: Manufacturer: syz
[ 1480.168813][T20097] tipc: Resetting bearer <eth:syzkaller0>
[ 1480.174906][   T29] usb 4-1: SerialNumber: syz
[ 1480.181641][T14797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1480.189764][   T24] betop 0003:11C2:2208.003A: unknown main item tag 0x4
[ 1480.205725][   T29] usb 4-1: config 0 descriptor??
[ 1480.232808][   T29] gs_usb 4-1:0.0: Required endpoints not found
[ 1480.241101][   T24] betop 0003:11C2:2208.003A: ignoring exceeding usage max
[ 1480.247757][T14797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input64
[ 1480.264501][   T24] betop 0003:11C2:2208.003A: unknown main item tag 0x4
[ 1480.299369][   T24] betop 0003:11C2:2208.003A: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.5-1/input0
[ 1480.314262][T20097] tipc: Disabling bearer <eth:syzkaller0>
[ 1480.323416][   T24] betop 0003:11C2:2208.003A: no inputs found
[ 1480.328416][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.393910][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.438591][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.443553][   T24] usb 6-1: USB disconnect, device number 43
[ 1480.503795][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.527172][T20114] fido_id[20114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1480.565552][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.583189][T19765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1480.609457][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.641895][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.659993][T19765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.674531][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.708212][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.746339][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1480.754911][T14797] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1480.799321][T14797] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1480.835020][T14797] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1480.881303][T14797] usb 10-1: USB disconnect, device number 29
[ 1481.197692][T20127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3612'.
[ 1481.350432][T20130] qrtr: Invalid version 0
[ 1482.396013][T19765] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1482.457310][T19765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1482.534192][T19765] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1482.607322][T19765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1482.629429][T20146] loop9: detected capacity change from 0 to 128
[ 1482.675175][T19765] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1482.729950][T19765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1482.759403][T19765] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1482.833046][T19765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1482.982814][ T5758] usb 4-1: USB disconnect, device number 117
[ 1483.078293][T14799] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 1483.277178][T14799] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1483.314187][T14799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1483.347973][T19765] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1483.363889][T14799] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1483.409215][T14799] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1483.547354][T14799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.559867][T19765] 8021q: adding VLAN 0 to HW filter on device team0
[ 1483.611825][T14799] usb 2-1: config 0 descriptor??
[ 1483.642526][T19932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.649743][T19932] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1483.674733][T20150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1483.840268][T20168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1483.862538][T19932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.869780][T19932] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1483.912994][T20168] syzkaller0: entered promiscuous mode
[ 1483.923429][T20168] syzkaller0: entered allmulticast mode
[ 1484.001687][T20168] tipc: Resetting bearer <eth:syzkaller0>
[ 1484.037556][T20167] tipc: Resetting bearer <eth:syzkaller0>
[ 1484.060061][T20167] tipc: Disabling bearer <eth:syzkaller0>
[ 1484.171989][    T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1484.212135][T14799] usbhid 2-1:0.0: can't add hid device: -71
[ 1484.232876][T14799] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1484.249503][   T29] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1484.260939][T14799] usb 2-1: USB disconnect, device number 2
[ 1484.270680][ T5758] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[ 1484.356204][    T9] usb 10-1: Using ep0 maxpacket: 32
[ 1484.372912][    T9] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1484.399593][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.413872][    T9] usb 10-1: Product: syz
[ 1484.418148][    T9] usb 10-1: Manufacturer: syz
[ 1484.424539][    T9] usb 10-1: SerialNumber: syz
[ 1484.433266][   T29] usb 4-1: Using ep0 maxpacket: 16
[ 1484.437149][    T9] usb 10-1: config 0 descriptor??
[ 1484.440987][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.469866][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1484.470032][ T5758] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.493571][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1484.504574][   T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1484.515219][ T5758] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1484.525647][   T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1484.539608][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1484.551413][   T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1484.563909][   T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1484.565477][ T9884] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1484.575564][ T5758] usb 7-1: config 0 descriptor??
[ 1484.603124][   T29] usb 4-1: Manufacturer: syz
[ 1484.632492][ T5758] pwc: Askey VC010 type 2 USB webcam detected.
[ 1484.653039][   T29] usb 4-1: config 0 descriptor??
[ 1484.710543][    T9] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 030
[ 1484.805451][ T9884] usb 6-1: Using ep0 maxpacket: 16
[ 1484.823967][ T9884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1484.843615][ T9884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1484.867667][ T9884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1484.896608][ T9884] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1484.930298][ T9884] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1484.983114][ T9884] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1485.085689][ T5758] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1485.106436][ T5758] pwc: recv_control_msg error -32 req 02 val 2700
[ 1485.120809][ T5758] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1485.138947][ T5758] pwc: recv_control_msg error -32 req 04 val 1000
[ 1485.153277][ T5758] pwc: recv_control_msg error -32 req 04 val 1300
[ 1485.169076][ T5758] pwc: recv_control_msg error -32 req 04 val 1400
[ 1485.196348][ T5758] pwc: recv_control_msg error -32 req 02 val 2000
[ 1485.222692][ T5758] pwc: recv_control_msg error -32 req 02 val 2100
[ 1485.250008][ T9884] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1485.261980][ T9884] usb 6-1: Manufacturer: syz
[ 1485.262067][ T5758] pwc: recv_control_msg error -32 req 04 val 1500
[ 1485.278985][ T9884] usb 6-1: config 0 descriptor??
[ 1485.290678][ T5758] pwc: recv_control_msg error -32 req 02 val 2500
[ 1485.298321][   T29] rc_core: IR keymap rc-hauppauge not found
[ 1485.304455][ T5758] pwc: recv_control_msg error -32 req 02 val 2400
[ 1485.305293][T19765] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1485.311825][   T29] Registered IR keymap rc-empty
[ 1485.337131][ T5758] pwc: recv_control_msg error -32 req 02 val 2600
[ 1485.363140][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1485.477303][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1485.594493][ T5758] pwc: recv_control_msg error -71 req 02 val 2800
[ 1485.854576][ T5758] pwc: recv_control_msg error -71 req 04 val 1100
[ 1485.931623][ T5758] pwc: recv_control_msg error -71 req 04 val 1200
[ 1485.940206][   T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1485.974088][ T5758] pwc: Registered as video103.
[ 1486.029861][ T5758] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66
[ 1486.040686][   T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65
[ 1486.172310][ T5758] usb 7-1: USB disconnect, device number 116
[ 1486.201230][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1486.210300][ T9884] rc_core: IR keymap rc-hauppauge not found
[ 1486.231244][ T9884] Registered IR keymap rc-empty
[ 1486.236978][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1486.275944][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1486.310552][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1486.321740][ T9884] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[ 1486.371498][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1486.408113][ T9884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input67
[ 1486.427172][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.040710][T20175] i2c i2c-1: failure writing data
[ 1488.084702][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.107859][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.118424][T19765] veth0_vlan: entered promiscuous mode
[ 1488.389278][T19765] veth1_vlan: entered promiscuous mode
[ 1488.395006][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.418104][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.489074][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.526288][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.580737][   T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1488.602729][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.609347][ T5788] usb 10-1: USB disconnect, device number 30
[ 1488.643578][T19765] veth0_macvtap: entered promiscuous mode
[ 1488.689346][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.712285][   T29] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1488.733986][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.744733][T19765] veth1_macvtap: entered promiscuous mode
[ 1488.770642][   T29] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1488.789931][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.843473][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.848605][   T29] usb 4-1: USB disconnect, device number 118
[ 1488.853941][T19765] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1488.927560][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1488.939769][T20213] netlink: 'syz.9.3635': attribute type 12 has an invalid length.
[ 1488.971931][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1489.014633][    T9] usb 7-1: new high-speed USB device number 117 using dummy_hcd
[ 1489.027756][T19765] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1489.057209][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1489.101999][ T9884] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1489.109567][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.147392][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.182201][ T9884] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1489.198397][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.219599][    T9] usb 7-1: Using ep0 maxpacket: 8
[ 1489.232836][ T9884] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1489.243995][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1489.258902][    T9] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1489.283662][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.310760][ T9884] usb 6-1: USB disconnect, device number 44
[ 1489.329165][    T9] usb 7-1: Product: syz
[ 1489.353576][    T9] usb 7-1: Manufacturer: syz
[ 1489.379197][    T9] usb 7-1: SerialNumber: syz
[ 1489.427298][    T9] usb 7-1: config 0 descriptor??
[ 1489.597347][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1491.790203][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1491.818384][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1491.870907][T20228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3640'.
[ 1491.896624][ T9884] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[ 1491.911950][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3640'.
[ 1492.056887][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1492.087663][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1492.166387][    T9] gspca_sq930x: reg_w 0305 fd00 failed -71
[ 1492.220043][ T9884] usb 6-1: device descriptor read/all, error -71
[ 1492.294444][T20230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3642'.
[ 1492.326965][T20230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3642'.
[ 1494.581360][    T9] gspca_sq930x: Unknown sensor
[ 1494.990385][T14185] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1495.074156][    T9] sq930x 7-1:0.0: probe with driver sq930x failed with error -22
[ 1495.105022][    T9] usb 7-1: USB disconnect, device number 117
[ 1495.329221][T14185] usb 4-1: Using ep0 maxpacket: 16
[ 1495.383078][T14185] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.427737][T14185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1495.471472][T14185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1495.515099][T14185] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1495.530621][T20254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3649'.
[ 1495.558468][T14185] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1495.609236][T14185] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1495.645700][T14185] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1495.685713][T14185] usb 4-1: Manufacturer: syz
[ 1495.721281][T14185] usb 4-1: config 0 descriptor??
[ 1496.235886][T20273] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3653'.
[ 1496.266535][T20273] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3653'.
[ 1496.303668][T14185] rc_core: IR keymap rc-hauppauge not found
[ 1496.325468][T14185] Registered IR keymap rc-empty
[ 1496.325616][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.358311][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.391390][T14185] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1496.435212][ T5788] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[ 1496.475149][T14185] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68
[ 1496.501826][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.534244][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.567340][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.598461][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.618212][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.624957][ T5788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1496.625005][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.625078][ T5788] usb 2-1: Product: syz
[ 1496.625107][ T5788] usb 2-1: Manufacturer: syz
[ 1496.625137][ T5788] usb 2-1: SerialNumber: syz
[ 1496.642771][ T5788] usb 2-1: config 0 descriptor??
[ 1496.650926][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.801937][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.847307][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.856033][T14797] usb 7-1: new full-speed USB device number 118 using dummy_hcd
[ 1496.887572][ T5788] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1496.896488][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.947772][T14185] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1496.990376][T14185] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1497.024103][T14185] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1497.081326][T14797] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1497.095848][T14185] usb 4-1: USB disconnect, device number 119
[ 1497.131071][T14797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.186442][T14797] usb 7-1: Product: syz
[ 1497.205244][T14797] usb 7-1: Manufacturer: syz
[ 1497.361511][ T5788] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1497.450592][ T5788] usb 2-1: USB disconnect, device number 3
[ 1497.791146][T14797] usb 7-1: SerialNumber: syz
[ 1497.820681][T14797] usb 7-1: config 0 descriptor??
[ 1499.894009][T14797] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110
[ 1500.417221][T14797] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1500.534915][T14797] usb 7-1: USB disconnect, device number 118
[ 1500.702455][ T5788] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[ 1501.531003][ T5788] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1501.560638][T20307] binder: 20306:20307 ioctl c0306201 200000000180 returned -14
[ 1501.782871][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[ 1501.794895][ T5788] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1501.809614][ T5788] usb 6-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[ 1501.818800][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.842832][ T5788] usb 6-1: config 0 descriptor??
[ 1501.872182][T20305] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1502.440309][T20329] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3667'.
[ 1502.460639][ T5788] betop 0003:11C2:2208.003B: ignoring exceeding usage max
[ 1502.494111][T20329] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3667'.
[ 1502.507642][ T5788] betop 0003:11C2:2208.003B: unknown main item tag 0x4
[ 1502.560350][ T5788] betop 0003:11C2:2208.003B: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.5-1/input0
[ 1502.621341][ T5788] betop 0003:11C2:2208.003B: no inputs found
[ 1502.675005][ T5788] usb 6-1: USB disconnect, device number 47
[ 1502.848319][T20336] fido_id[20336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1503.041831][T20346] overlayfs: failed to resolve './file1': -2
[ 1503.062993][T17652] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1503.282814][T17652] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1503.550893][T14797] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1503.851057][T14797] usb 10-1: Using ep0 maxpacket: 32
[ 1503.966888][T14797] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1504.136054][T14797] usb 10-1: config 0 has no interface number 0
[ 1504.197825][T17652] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1504.211034][T17652] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1504.220070][T17652] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1504.231707][T17652] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1504.266947][T17652] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1504.276203][T17652] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1504.284412][T17652] usb 1-1: Product: syz
[ 1504.288722][T17652] usb 1-1: Manufacturer: syz
[ 1504.295119][T14797] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1504.300636][T17652] cdc_wdm 1-1:1.0: skipping garbage
[ 1504.309741][T17652] cdc_wdm 1-1:1.0: skipping garbage
[ 1504.320267][T17652] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1504.326336][T17652] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1504.360390][T14797] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.415399][T14797] usb 10-1: Product: syz
[ 1504.442921][T14797] usb 10-1: Manufacturer: syz
[ 1504.459000][T14797] usb 10-1: SerialNumber: syz
[ 1504.926068][T14797] usb 10-1: config 0 descriptor??
[ 1505.793184][T14797] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1505.821823][T19715] usb 1-1: USB disconnect, device number 99
[ 1505.838927][T14797] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1505.859332][T20370] binder: 20368:20370 ioctl 4018620d 0 returned -22
[ 1506.856088][T20370] binder: 20368:20370 ioctl c0306201 200000000180 returned -14
[ 1507.216889][T14797] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1507.293241][T14797] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[ 1507.366692][T14797] usb 10-1: USB disconnect, device number 31
[ 1507.727111][T20399] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3683'.
[ 1507.748313][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3683'.
[ 1508.456941][ T5788] usb 7-1: new high-speed USB device number 119 using dummy_hcd
[ 1509.118618][T14797] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1509.246300][ T5788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.333234][ T5788] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1509.435262][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.573094][ T5788] usb 7-1: config 0 descriptor??
[ 1509.754210][ T5788] pwc: Askey VC010 type 2 USB webcam detected.
[ 1509.814366][T14797] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1510.089808][T14797] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.100434][T14797] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1510.109588][T14797] usb 10-1: config 1 has no interface number 0
[ 1510.119057][T14797] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[ 1510.128326][T14797] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.136933][T14797] usb 10-1: Product: syz
[ 1510.141524][T14797] usb 10-1: Manufacturer: syz
[ 1510.146246][T14797] usb 10-1: SerialNumber: syz
[ 1510.361677][ T5788] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1510.392455][ T5788] pwc: recv_control_msg error -32 req 02 val 2700
[ 1510.445306][ T5788] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1510.579057][ T5788] pwc: recv_control_msg error -32 req 04 val 1000
[ 1510.602239][    T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1510.627752][T20439] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3690'.
[ 1510.710502][T17652] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1510.817037][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1510.829905][ T5788] pwc: recv_control_msg error -71 req 04 val 1400
[ 1510.857155][ T5788] pwc: recv_control_msg error -71 req 02 val 2000
[ 1510.864266][    T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1510.864308][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1510.864405][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1510.864457][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1510.884188][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1510.923579][T17652] usb 1-1: config index 0 descriptor too short (expected 28271, got 96)
[ 1510.936828][T17652] usb 1-1: config 101 has too many interfaces: 116, using maximum allowed: 32
[ 1510.992480][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1510.993843][T17652] usb 1-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config
[ 1511.011214][    T9] usb 4-1: Product: syz
[ 1511.023347][    T9] usb 4-1: Manufacturer: syz
[ 1511.028574][T17652] usb 1-1: config 101 has 0 interfaces, different from the descriptor's value: 116
[ 1511.028752][ T5788] pwc: recv_control_msg error -71 req 02 val 2100
[ 1511.046677][ T5788] pwc: recv_control_msg error -71 req 04 val 1500
[ 1511.055648][T17652] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1511.066055][T17652] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1511.074936][ T5788] pwc: recv_control_msg error -71 req 02 val 2500
[ 1511.089405][T17652] usb 1-1: Product: syz
[ 1511.094015][T17652] usb 1-1: Manufacturer: syz
[ 1511.098788][ T5788] pwc: recv_control_msg error -71 req 02 val 2400
[ 1511.108699][ T5788] pwc: recv_control_msg error -71 req 02 val 2600
[ 1511.119526][ T5788] pwc: recv_control_msg error -71 req 02 val 2900
[ 1511.142475][ T5788] pwc: recv_control_msg error -71 req 02 val 2800
[ 1511.160627][T14797] usb 10-1: selecting invalid altsetting 1
[ 1511.168399][ T5788] pwc: recv_control_msg error -71 req 04 val 1100
[ 1511.186178][ T5788] pwc: recv_control_msg error -71 req 04 val 1200
[ 1511.200152][    T9] cdc_wdm 4-1:1.0: skipping garbage
[ 1511.210448][T14797] snd-usb-us122l 10-1:1.1: usb_set_interface error
[ 1511.226385][ T5788] pwc: Registered as video103.
[ 1511.234978][    T9] cdc_wdm 4-1:1.0: skipping garbage
[ 1511.237653][ T5788] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69
[ 1511.248238][T14797] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1511.280143][    T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1511.305059][    T9] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1511.314459][T14797] usb 10-1: USB disconnect, device number 32
[ 1511.393853][ T5788] usb 7-1: USB disconnect, device number 119
[ 1511.410019][T20431] netlink: 'syz.0.3694': attribute type 3 has an invalid length.
[ 1511.477882][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'.
[ 1511.643166][T14797] usb 4-1: USB disconnect, device number 120
[ 1511.778474][T20458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3700'.
[ 1511.807946][T20458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3700'.
[ 1512.128714][T20468] program syz.5.3703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1512.390012][ T5788] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1512.710566][ T5788] usb 2-1: Using ep0 maxpacket: 16
[ 1512.815210][ T5788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.016562][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1513.237014][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1513.391481][ T5788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1513.436345][T17652] usb 1-1: USB disconnect, device number 100
[ 1513.492406][ T5788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1513.794589][ T5788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1514.033544][ T5788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1514.230432][ T5788] usb 2-1: Manufacturer: syz
[ 1514.396270][ T5788] usb 2-1: config 0 descriptor??
[ 1514.967989][ T5788] rc_core: IR keymap rc-hauppauge not found
[ 1514.984606][ T5788] Registered IR keymap rc-empty
[ 1514.998494][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.045315][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.049534][T20504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3716'.
[ 1515.081906][T20504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'.
[ 1515.098140][ T5788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1515.133511][ T5788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70
[ 1515.163979][T19715] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1515.179271][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.237762][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.270370][T14358] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1515.281011][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.324549][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.347685][T19715] usb 6-1: Using ep0 maxpacket: 16
[ 1515.356846][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.367643][T19715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.385644][T19715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1515.397770][T19715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1515.409890][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.410283][T19715] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1515.430994][T19715] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1515.456055][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1515.469968][T19715] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1515.481519][T19715] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1515.491146][T19715] usb 6-1: Manufacturer: syz
[ 1515.501784][T14358] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1515.545099][T19715] usb 6-1: config 0 descriptor??
[ 1515.616850][T14185] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1516.288503][T19715] rc_core: IR keymap rc-hauppauge not found
[ 1516.351316][T14358] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.362613][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1516.369990][T14358] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1516.372355][T19715] Registered IR keymap rc-empty
[ 1516.379118][T14358] usb 10-1: config 1 has no interface number 0
[ 1516.382411][T14358] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[ 1516.402509][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1516.411889][T14358] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.421250][T14358] usb 10-1: Product: syz
[ 1516.425544][T14358] usb 10-1: Manufacturer: syz
[ 1516.430365][ T5788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1516.439652][T14358] usb 10-1: SerialNumber: syz
[ 1516.446616][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.464528][ T5788] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1516.476806][ T5788] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1516.486773][ T5758] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1516.505048][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.516289][T14185] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1516.531793][ T5788] usb 2-1: USB disconnect, device number 4
[ 1516.554360][T14185] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1516.565438][T19715] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[ 1516.583832][T19715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input71
[ 1516.587995][T14185] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1516.612999][T14185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1516.626859][T14185] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1516.663382][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.678496][ T5758] usb 4-1: Using ep0 maxpacket: 16
[ 1516.686373][ T5758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.691876][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.704439][T14185] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1516.716664][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1516.732812][T14185] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1516.744468][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1516.759980][T14185] usb 1-1: Product: syz
[ 1516.764635][T14185] usb 1-1: Manufacturer: syz
[ 1516.772173][ T5758] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1516.777607][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.792482][T20526] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3715'.
[ 1516.825787][T14185] cdc_wdm 1-1:1.0: skipping garbage
[ 1516.838255][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1516.845911][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.856421][T14185] cdc_wdm 1-1:1.0: skipping garbage
[ 1516.884250][T17652] usb 7-1: new full-speed USB device number 120 using dummy_hcd
[ 1516.893328][ T5758] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1516.907092][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.914443][ T5758] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1516.923359][T14185] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1516.930983][T14185] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1516.936987][ T5758] usb 4-1: Manufacturer: syz
[ 1516.950973][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.980824][ T5758] usb 4-1: config 0 descriptor??
[ 1516.990249][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1517.036928][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1517.068588][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1517.073935][T17652] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1517.089339][T14358] usb 10-1: selecting invalid altsetting 1
[ 1517.097388][T14358] snd-usb-us122l 10-1:1.1: usb_set_interface error
[ 1517.102735][T19715] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1517.104093][T17652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1517.125325][T14358] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1517.134682][ T5788] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1517.137358][T19715] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1517.147081][T14358] usb 10-1: USB disconnect, device number 33
[ 1517.161520][T17652] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1517.167285][T19715] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1517.182027][T17652] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1517.207355][T17652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.223723][T17652] usb 7-1: config 0 descriptor??
[ 1517.233993][T20521] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1517.257993][T19715] usb 6-1: USB disconnect, device number 48
[ 1517.279789][T14185] usb 1-1: USB disconnect, device number 101
[ 1517.309550][ T5788] usb 2-1: config index 0 descriptor too short (expected 28271, got 96)
[ 1517.334063][ T5788] usb 2-1: config 101 has too many interfaces: 116, using maximum allowed: 32
[ 1517.347191][ T5788] usb 2-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.358070][ T5788] usb 2-1: config 101 has 0 interfaces, different from the descriptor's value: 116
[ 1517.367715][ T5758] rc_core: IR keymap rc-hauppauge not found
[ 1517.374385][ T5758] Registered IR keymap rc-empty
[ 1517.380813][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.392823][ T5788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1517.403757][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1517.417810][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.426287][ T5788] usb 2-1: Product: syz
[ 1517.430602][ T5788] usb 2-1: Manufacturer: syz
[ 1517.449119][ T5758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1517.472197][ T5758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72
[ 1517.493883][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.524963][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.545178][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.590641][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.610624][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.653321][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.697009][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.705272][T20522] netlink: 'syz.1.3722': attribute type 3 has an invalid length.
[ 1517.728645][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 1517.760339][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 1517.771494][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'.
[ 1517.784960][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1517.858670][T17652] usbhid 7-1:0.0: can't add hid device: -71
[ 1518.035944][T17652] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1518.075234][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1518.337252][ T5758] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1518.701361][T17652] usb 7-1: USB disconnect, device number 120
[ 1518.969510][ T5758] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1519.154012][ T5758] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1519.284153][ T5758] usb 4-1: USB disconnect, device number 121
[ 1519.982198][ T5758] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1520.003101][T20552] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3731'.
[ 1520.051013][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3731'.
[ 1520.209482][ T5758] usb 4-1: Using ep0 maxpacket: 8
[ 1520.234464][ T5758] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1520.269783][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.314727][ T5758] usb 4-1: Product: syz
[ 1520.332854][ T5758] usb 4-1: Manufacturer: syz
[ 1520.346374][T20562] loop9: detected capacity change from 0 to 512
[ 1520.354727][ T5758] usb 4-1: SerialNumber: syz
[ 1520.376445][T20562] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1520.391089][T20562] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[ 1520.401116][ T5758] usb 4-1: config 0 descriptor??
[ 1520.427120][ T5758] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1520.438059][T20562] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[ 1520.450518][T17652] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1520.464127][T20562] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1520.473742][T20562] System zones: 0-2, 18-18, 34-35
[ 1520.485869][T20562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1520.635342][T17652] usb 1-1: Using ep0 maxpacket: 16
[ 1520.649994][ T5758] gspca_sq930x: reg_r 001f failed -32
[ 1520.660447][ T5758] sq930x 4-1:0.0: probe with driver sq930x failed with error -32
[ 1520.668763][T17652] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.692254][T17652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1520.713865][T14185] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1520.739813][T17652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1520.760002][T17652] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1520.771996][T17652] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1520.787310][T17652] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1520.796620][T17652] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1520.804658][T17652] usb 1-1: Manufacturer: syz
[ 1520.942544][T14185] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1521.230687][T14185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.245763][T17652] usb 1-1: config 0 descriptor??
[ 1521.309203][T14185] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1521.353993][T14185] usb 6-1: config 1 has no interface number 0
[ 1521.448571][T14185] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[ 1521.549908][T14185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.595397][ T5788] usb 2-1: USB disconnect, device number 5
[ 1521.607020][T14185] usb 6-1: Product: syz
[ 1521.612633][T15240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1521.642020][T14185] usb 6-1: Manufacturer: syz
[ 1521.654719][T14185] usb 6-1: SerialNumber: syz
[ 1521.893603][T17652] rc_core: IR keymap rc-hauppauge not found
[ 1521.966385][T17652] Registered IR keymap rc-empty
[ 1522.093100][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1522.246770][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1522.385613][T20581] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3737'.
[ 1522.719452][T17652] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1523.137922][T17652] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73
[ 1523.305742][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.366012][ T5788] usb 4-1: USB disconnect, device number 122
[ 1523.399679][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.461697][   T29] usb 10-1: new full-speed USB device number 34 using dummy_hcd
[ 1523.469517][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.535060][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.599943][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.645542][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.678448][   T29] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1523.694768][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.737097][T14185] usb 6-1: selecting invalid altsetting 1
[ 1523.745229][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1523.763565][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.772511][T14185] snd-usb-us122l 6-1:1.1: usb_set_interface error
[ 1523.786762][   T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1523.805379][T14185] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1523.827426][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.921141][T14185] usb 6-1: USB disconnect, device number 49
[ 1523.931707][T17652] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1523.939243][   T29] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1523.939290][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.005762][   T29] usb 10-1: config 0 descriptor??
[ 1524.006612][T20586] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22
[ 1524.057985][T17652] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1524.058060][T17652] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1524.097282][T17652] usb 1-1: USB disconnect, device number 102
[ 1524.473512][T20605] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3748'.
[ 1524.484225][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3748'.
[ 1524.544732][    C1] raw-gadget.3 gadget.9: ignoring, device is not running
[ 1524.552416][    C1] raw-gadget.3 gadget.9: ignoring, device is not running
[ 1524.560039][    C1] raw-gadget.3 gadget.9: ignoring, device is not running
[ 1524.567768][   T29] usbhid 10-1:0.0: can't add hid device: -32
[ 1524.573913][   T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -32
[ 1525.258509][T19715] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1525.703996][T19715] usb 2-1: Using ep0 maxpacket: 32
[ 1525.890332][T19715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1526.128555][T19715] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1526.315545][T19715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.722907][T19715] usb 2-1: config 0 descriptor??
[ 1526.724631][   T29] usb 10-1: USB disconnect, device number 34
[ 1529.092528][T19715] usbhid 2-1:0.0: can't add hid device: -71
[ 1529.117625][T19715] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1529.155638][T19715] usb 2-1: USB disconnect, device number 6
[ 1529.283105][T20626] overlayfs: overlapping lowerdir path
[ 1529.362588][T17652] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1529.449093][    T9] usb 7-1: new high-speed USB device number 121 using dummy_hcd
[ 1529.562867][T17652] usb 10-1: config index 0 descriptor too short (expected 28271, got 96)
[ 1529.582629][T17652] usb 10-1: config 101 has too many interfaces: 116, using maximum allowed: 32
[ 1529.589945][T19715] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1529.600903][T17652] usb 10-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.625339][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.635599][T17652] usb 10-1: config 101 has 0 interfaces, different from the descriptor's value: 116
[ 1529.652622][    T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1529.653582][T17652] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1529.673088][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.692080][    T9] usb 7-1: config 0 descriptor??
[ 1529.758444][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[ 1529.808703][T19715] usb 2-1: Using ep0 maxpacket: 8
[ 1529.858068][T19715] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1529.951120][T19715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.062315][T19715] usb 2-1: Product: syz
[ 1530.200925][T19715] usb 2-1: Manufacturer: syz
[ 1530.338214][T19715] usb 2-1: SerialNumber: syz
[ 1530.685116][T17652] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1530.693507][T17652] usb 10-1: Product: syz
[ 1530.697987][T17652] usb 10-1: Manufacturer: syz
[ 1530.701813][T19715] usb 2-1: config 0 descriptor??
[ 1530.762665][T19715] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1530.770816][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1530.800181][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[ 1530.819089][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1530.855742][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[ 1530.884307][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[ 1530.927026][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[ 1530.961406][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[ 1530.984450][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[ 1531.002599][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[ 1531.013621][T19715] gspca_sq930x: reg_r 001f failed -32
[ 1531.023606][T19715] sq930x 2-1:0.0: probe with driver sq930x failed with error -32
[ 1531.034847][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[ 1531.055148][T20619] netlink: 'syz.9.3752': attribute type 3 has an invalid length.
[ 1531.056810][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[ 1531.091193][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'.
[ 1531.111096][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[ 1531.141178][    T9] pwc: recv_control_msg error -32 req 02 val 2900
[ 1531.164071][    T9] pwc: recv_control_msg error -32 req 02 val 2800
[ 1531.186943][    T9] pwc: recv_control_msg error -32 req 04 val 1100
[ 1531.208424][    T9] pwc: Registered as video103.
[ 1531.239446][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input74
[ 1531.822776][ T5788] usb 7-1: USB disconnect, device number 121
[ 1531.989001][T17652] usb 10-1: USB disconnect, device number 35
[ 1532.203912][T20654] loop9: detected capacity change from 0 to 128
[ 1532.468396][ T5788] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[ 1532.983617][ T5788] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1533.192185][T14799] usb 2-1: USB disconnect, device number 7
[ 1533.203933][ T5788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1533.238175][ T5788] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1533.297791][ T5788] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1533.333665][ T5788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.433788][ T5788] usb 6-1: config 0 descriptor??
[ 1533.469888][T20655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1533.567767][T20667] overlayfs: overlapping lowerdir path
[ 1534.069735][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1534.181482][ T5788] usbhid 6-1:0.0: can't add hid device: -71
[ 1534.614806][ T5788] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1534.628324][ T5788] usb 6-1: USB disconnect, device number 50
[ 1535.014972][T20685] netlink: 'syz.3.3775': attribute type 16 has an invalid length.
[ 1535.062440][T20685] netlink: 'syz.3.3775': attribute type 17 has an invalid length.
[ 1535.656289][ T5788] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1536.070851][ T5788] usb 6-1: config index 0 descriptor too short (expected 28271, got 96)
[ 1536.104033][ T5788] usb 6-1: config 101 has too many interfaces: 116, using maximum allowed: 32
[ 1536.163192][ T5788] usb 6-1: config 101 has an invalid descriptor of length 0, skipping remainder of the config
[ 1536.201248][ T5788] usb 6-1: config 101 has 0 interfaces, different from the descriptor's value: 116
[ 1536.215767][T20703] loop6: detected capacity change from 0 to 128
[ 1536.240452][ T5788] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1536.277063][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1536.300780][ T5788] usb 6-1: Product: syz
[ 1536.462180][ T5788] usb 6-1: Manufacturer: syz
[ 1537.163298][T20696] netlink: 'syz.0.3780': attribute type 12 has an invalid length.
[ 1537.185502][T20691] netlink: 'syz.5.3777': attribute type 3 has an invalid length.
[ 1537.210882][T20696] netlink: 'syz.0.3780': attribute type 29 has an invalid length.
[ 1537.229195][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3777'.
[ 1537.251104][T20696] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3780'.
[ 1537.295682][T20696] netlink: 'syz.0.3780': attribute type 1 has an invalid length.
[ 1537.338626][T20696] netlink: 'syz.0.3780': attribute type 2 has an invalid length.
[ 1538.926169][T20724] overlayfs: overlapping lowerdir path
[ 1538.997288][ T5788] usb 6-1: USB disconnect, device number 51
[ 1539.481341][   T29] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[ 1539.900717][   T29] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1540.067352][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1540.252265][   T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1540.398407][   T29] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1540.481155][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.540390][   T29] usb 2-1: config 0 descriptor??
[ 1540.584002][T20734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1541.764067][T20757] loop9: detected capacity change from 0 to 1024
[ 1541.831762][T20757] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1542.292622][   T29] usbhid 2-1:0.0: can't add hid device: -71
[ 1542.317424][   T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1542.352135][   T29] usb 2-1: USB disconnect, device number 8
[ 1542.880671][T14797] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[ 1542.899470][T20771] loop9: detected capacity change from 0 to 32768
[ 1542.908702][T20771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3805 (20771)
[ 1542.933573][T20771] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1542.944096][T20771] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1543.046272][T14797] usb 1-1: device descriptor read/64, error -71
[ 1543.236103][T20771] BTRFS info (device loop9): setting nodatasum
[ 1543.243099][T20771] BTRFS info (device loop9): enabling ssd optimizations
[ 1543.251912][T20771] BTRFS info (device loop9): turning on async discard
[ 1543.258961][T20771] BTRFS info (device loop9): enabling free space tree
[ 1543.275288][T17652] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1543.487409][T14797] usb 1-1: new full-speed USB device number 104 using dummy_hcd
[ 1543.587976][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 1543.594796][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 1543.682418][T14797] usb 1-1: device descriptor read/64, error -71
[ 1544.691640][   T30] audit: type=1800 audit(1779913788.027:103): pid=20803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3805" name="file1" dev="loop9" ino=260 res=0 errno=0
[ 1544.712626][T14797] usb usb1-port1: attempt power cycle
[ 1545.288687][T14797] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[ 1545.444686][T14797] usb 1-1: device descriptor read/8, error -71
[ 1545.860161][T14797] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[ 1545.989446][T17652] usb 6-1: device descriptor read/64, error -71
[ 1546.124742][T14797] usb 1-1: device descriptor read/8, error -71
[ 1546.157343][T15240] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1546.249564][T17652] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1546.289682][T14797] usb usb1-port1: unable to enumerate USB device
[ 1546.323739][ T5931] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1546.449823][ T5931] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.102245][T13585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1548.119891][T13585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1548.138197][T13585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1548.160381][T13585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1548.169266][T13585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1548.373837][T20831] loop1: detected capacity change from 0 to 1024
[ 1548.436107][T20831] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1548.849830][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1548.863077][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1548.869780][ T5931] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1548.878970][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1548.889381][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1548.897801][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1548.921917][ T5931] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.934960][T17652] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1549.297421][T17652] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.330616][T17652] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1549.356790][T17652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.394246][T17652] usb 1-1: config 0 descriptor??
[ 1549.434621][ T5758] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[ 1549.446464][T17652] pwc: Askey VC010 type 2 USB webcam detected.
[ 1549.469295][ T5931] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1549.506319][ T5931] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.646505][ T5758] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1549.691397][ T5758] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1549.732212][ T5758] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1549.764257][ T5931] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1549.798142][ T5758] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1549.801829][ T5931] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.824406][   T29] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1549.846381][ T5758] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.894089][T17652] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1549.905213][ T5758] usb 10-1: config 0 descriptor??
[ 1549.915611][T20835] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1549.926578][T17652] pwc: recv_control_msg error -32 req 02 val 2700
[ 1549.943920][T17652] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1549.964090][T17652] pwc: recv_control_msg error -32 req 04 val 1000
[ 1549.986053][T17652] pwc: recv_control_msg error -32 req 04 val 1300
[ 1550.017972][T17652] pwc: recv_control_msg error -32 req 04 val 1400
[ 1550.044338][   T29] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1550.055730][T17652] pwc: recv_control_msg error -32 req 02 val 2000
[ 1550.067213][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.088271][T17652] pwc: recv_control_msg error -32 req 02 val 2100
[ 1550.103452][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1550.119664][T17652] pwc: recv_control_msg error -32 req 04 val 1500
[ 1550.136590][   T29] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1550.152866][T17652] pwc: recv_control_msg error -32 req 02 val 2500
[ 1550.174106][   T29] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1550.190601][T17652] pwc: recv_control_msg error -32 req 02 val 2400
[ 1550.199939][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.212468][T17652] pwc: recv_control_msg error -32 req 02 val 2600
[ 1550.220259][   T29] usb 6-1: Product: syz
[ 1550.224725][   T29] usb 6-1: Manufacturer: syz
[ 1550.229429][   T29] usb 6-1: SerialNumber: syz
[ 1550.234245][T17652] pwc: recv_control_msg error -32 req 02 val 2900
[ 1550.245910][T14185] usb 4-1: new full-speed USB device number 123 using dummy_hcd
[ 1550.265023][T17652] pwc: recv_control_msg error -32 req 02 val 2800
[ 1550.272589][T17652] pwc: recv_control_msg error -32 req 04 val 1100
[ 1550.285049][T17652] pwc: recv_control_msg error -71 req 04 val 1200
[ 1550.305614][T17652] pwc: Registered as video103.
[ 1550.338481][T17652] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input75
[ 1550.378727][T17652] usb 1-1: USB disconnect, device number 107
[ 1550.410216][T14185] usb 4-1: device descriptor read/64, error -71
[ 1550.419566][    C1] raw-gadget.1 gadget.9: ignoring, device is not running
[ 1550.440593][ T5758] usbhid 10-1:0.0: can't add hid device: -71
[ 1550.464386][ T5758] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1550.504819][ T5758] usb 10-1: USB disconnect, device number 36
[ 1550.716839][   T29] usb 6-1: USB disconnect, device number 54
[ 1550.727627][T14185] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[ 1550.795662][T17677] udevd[17677]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1550.885369][T14185] usb 4-1: device descriptor read/64, error -71
[ 1551.035833][T14185] usb usb4-port1: attempt power cycle
[ 1551.219142][ T5644] Bluetooth: hci3: command tx timeout
[ 1552.315211][T14185] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 1552.361160][T14185] usb 4-1: device descriptor read/8, error -71
[ 1552.815165][T14185] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1553.508338][ T5644] Bluetooth: hci3: command tx timeout
[ 1553.811160][T20885] loop1: detected capacity change from 0 to 128
[ 1554.587432][ T5931] tipc: Left network mode
[ 1554.602946][T14185] usb 4-1: device descriptor read/8, error -71
[ 1554.723319][T14185] usb usb4-port1: unable to enumerate USB device
[ 1555.329731][T20911] bridge0: port 3(syz_tun) entered blocking state
[ 1555.360784][T20911] bridge0: port 3(syz_tun) entered disabled state
[ 1555.372901][T20911] syz_tun: entered allmulticast mode
[ 1555.387242][T20911] syz_tun: entered promiscuous mode
[ 1555.395928][T20911] bridge0: port 3(syz_tun) entered blocking state
[ 1555.402538][T20911] bridge0: port 3(syz_tun) entered forwarding state
[ 1555.509428][ T5931] hsr_slave_0: left promiscuous mode
[ 1555.536042][ T5931] hsr_slave_1: left promiscuous mode
[ 1555.550185][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1555.582573][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1555.598106][T14185] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 1555.626885][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1555.651712][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1555.673900][ T5931] batman_adv: batadv0: Removing interface: vlan2
[ 1555.727233][ T5644] Bluetooth: hci3: command tx timeout
[ 1555.738942][ T5931] veth1_macvtap: left promiscuous mode
[ 1555.745021][ T5931] veth0_macvtap: left promiscuous mode
[ 1555.759239][ T5931] veth1_vlan: left promiscuous mode
[ 1555.779682][ T5931] veth0_vlan: left promiscuous mode
[ 1555.793843][T14185] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1555.833731][T14185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1555.870806][T14185] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1555.929265][T14185] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1555.962035][T14185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.971129][   T29] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1556.026439][T14185] usb 2-1: config 0 descriptor??
[ 1556.058733][T20916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1556.278854][   T29] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1556.366162][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.482635][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1556.606788][   T29] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1556.816662][T14185] usbhid 2-1:0.0: can't add hid device: -71
[ 1556.851506][   T29] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1556.921248][T14185] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1556.971067][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.027779][T14185] usb 2-1: USB disconnect, device number 9
[ 1557.036707][   T29] usb 6-1: Product: syz
[ 1557.052646][   T29] usb 6-1: Manufacturer: syz
[ 1557.077521][   T29] usb 6-1: SerialNumber: syz
[ 1557.727173][T14799] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 1557.969560][ T5644] Bluetooth: hci3: command tx timeout
[ 1558.154088][T14799] usb 4-1: device descriptor read/64, error -71
[ 1558.361809][   T29] usb 6-1: USB disconnect, device number 55
[ 1558.460642][T14799] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 1558.505555][T17677] udevd[17677]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1558.525892][ T5931] team0 (unregistering): Port device team_slave_1 removed
[ 1558.575738][ T5931] team0 (unregistering): Port device team_slave_0 removed
[ 1558.651848][T14799] usb 4-1: device descriptor read/64, error -71
[ 1558.772180][T14799] usb usb4-port1: attempt power cycle
[ 1559.094038][T15008] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1559.161773][T14799] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 1559.231302][T14799] usb 4-1: device descriptor read/8, error -71
[ 1559.530747][T14799] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 1559.621279][T14799] usb 4-1: device descriptor read/8, error -71
[ 1559.699762][ T5287] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1559.763930][T14799] usb usb4-port1: unable to enumerate USB device
[ 1559.916084][T15008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1559.980119][T15008] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1560.013202][T15008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.048723][T15008] usb 2-1: config 0 descriptor??
[ 1560.128111][T15008] pwc: Askey VC010 type 2 USB webcam detected.
[ 1560.266277][T20827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1560.281214][T20827] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1560.289889][T20827] bridge_slave_0: entered allmulticast mode
[ 1560.300861][T20827] bridge_slave_0: entered promiscuous mode
[ 1560.334602][T20827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1560.349660][T20827] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1560.363426][T20827] bridge_slave_1: entered allmulticast mode
[ 1560.369807][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3861'.
[ 1560.372881][T20827] bridge_slave_1: entered promiscuous mode
[ 1560.497796][ T5931] IPVS: stop unused estimator thread 0...
[ 1560.504411][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1560.533902][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1560.566435][T15008] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1560.590607][T15008] pwc: recv_control_msg error -32 req 02 val 2700
[ 1560.618738][T15008] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1560.657553][T15008] pwc: recv_control_msg error -32 req 04 val 1000
[ 1560.703460][T15008] pwc: recv_control_msg error -71 req 04 val 1300
[ 1560.737729][T15008] pwc: recv_control_msg error -71 req 04 val 1400
[ 1560.767783][T15008] pwc: recv_control_msg error -71 req 02 val 2000
[ 1560.800583][T15008] pwc: recv_control_msg error -71 req 02 val 2100
[ 1560.827179][T15008] pwc: recv_control_msg error -71 req 04 val 1500
[ 1560.847786][T15008] pwc: recv_control_msg error -71 req 02 val 2500
[ 1560.871835][T15008] pwc: recv_control_msg error -71 req 02 val 2400
[ 1560.889696][T15008] pwc: recv_control_msg error -71 req 02 val 2600
[ 1560.909699][T15008] pwc: recv_control_msg error -71 req 02 val 2900
[ 1560.928744][T15008] pwc: recv_control_msg error -71 req 02 val 2800
[ 1560.952550][T15008] pwc: recv_control_msg error -71 req 04 val 1100
[ 1560.971390][T15008] pwc: recv_control_msg error -71 req 04 val 1200
[ 1560.998480][T15008] pwc: Registered as video103.
[ 1561.025492][T15008] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76
[ 1561.050799][T20827] team0: Port device team_slave_0 added
[ 1561.091631][T15008] usb 2-1: USB disconnect, device number 10
[ 1561.098561][T20827] team0: Port device team_slave_1 added
[ 1561.157239][   T29] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1561.353624][   T29] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1561.401374][   T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.457077][   T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1561.485722][   T29] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1561.758335][T20997] loop3: detected capacity change from 0 to 1024
[ 1561.902636][   T29] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1562.192982][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.296752][T20997] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1562.347868][   T29] usb 1-1: Product: syz
[ 1562.365035][   T29] usb 1-1: Manufacturer: syz
[ 1562.380582][   T29] usb 1-1: SerialNumber: syz
[ 1562.432158][    T9] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[ 1562.455584][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1562.484536][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1562.568669][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1562.606502][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1562.613584][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1562.650925][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1562.722504][    T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1562.750634][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.780970][    T9] usb 10-1: Product: syz
[ 1562.807812][    T9] usb 10-1: Manufacturer: syz
[ 1562.837435][    T9] usb 10-1: SerialNumber: syz
[ 1562.879453][    T9] usb 10-1: config 0 descriptor??
[ 1562.932033][T21005] netlink: 'syz.5.3871': attribute type 2 has an invalid length.
[ 1562.969187][T21005] netlink: 'syz.5.3871': attribute type 2 has an invalid length.
[ 1563.115026][T21008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3872'.
[ 1563.125434][   T29] usb 1-1: USB disconnect, device number 108
[ 1563.301853][    T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1563.929496][T20827] hsr_slave_0: entered promiscuous mode
[ 1563.994213][T20827] hsr_slave_1: entered promiscuous mode
[ 1564.071846][T20827] debugfs: 'hsr0' already exists in 'hsr'
[ 1564.124109][T20827] Cannot create hsr debugfs directory
[ 1564.131694][    T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1564.183796][ T5287] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1564.223303][    T9] usb 10-1: USB disconnect, device number 37
[ 1564.252648][ T5937] nci: nci_rsp_packet: unknown rsp opcode 0x26
[ 1564.512083][   T29] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1564.522724][T14797] usb 1-1: new full-speed USB device number 109 using dummy_hcd
[ 1564.663609][T14797] usb 1-1: device descriptor read/64, error -71
[ 1564.709239][   T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1564.758458][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1564.792708][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1564.814747][   T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1564.833619][   T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1564.861156][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.895534][   T29] usb 4-1: config 0 descriptor??
[ 1564.934657][T14797] usb 1-1: new full-speed USB device number 110 using dummy_hcd
[ 1565.002763][T21015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1565.055970][T21032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1565.085974][T14797] usb 1-1: device descriptor read/64, error -71
[ 1565.227600][T14797] usb usb1-port1: attempt power cycle
[ 1565.403825][   T29] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1565.629665][T14797] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[ 1565.688020][T14797] usb 1-1: device descriptor read/8, error -71
[ 1565.964724][T14797] usb 1-1: new full-speed USB device number 112 using dummy_hcd
[ 1565.989045][T20827] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1566.018056][T14797] usb 1-1: device descriptor read/8, error -71
[ 1566.051383][T20827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1566.085181][T20827] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1566.380977][T14797] usb usb1-port1: unable to enumerate USB device
[ 1566.401987][T20827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1566.621644][T21067] loop1: detected capacity change from 0 to 1024
[ 1566.651155][T20827] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1566.702456][T17652] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1566.871555][T20827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1566.961366][T21063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1567.014389][T17652] usb 6-1: Using ep0 maxpacket: 32
[ 1567.137898][T17652] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.164362][T21067] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1567.205550][T17652] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1567.215517][T21066] syzkaller0: entered promiscuous mode
[ 1567.224925][T21066] syzkaller0: entered allmulticast mode
[ 1567.231667][T21066] tipc: Resetting bearer <eth:syzkaller0>
[ 1567.235742][T17652] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1567.251156][T20827] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1567.265273][T17652] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1567.282283][T17652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.293580][T20827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1567.307279][T17652] usb 6-1: Product: syz
[ 1567.312184][T17652] usb 6-1: Manufacturer: syz
[ 1567.320685][T21061] tipc: Resetting bearer <eth:syzkaller0>
[ 1567.326481][T17652] usb 6-1: SerialNumber: syz
[ 1567.336444][T17652] usb 6-1: config 0 descriptor??
[ 1567.344708][T17652] gs_usb 6-1:0.0: Required endpoints not found
[ 1567.629707][   T29] usb 4-1: USB disconnect, device number 5
[ 1569.568294][T17652] usb 6-1: USB disconnect, device number 56
[ 1569.765553][   T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1569.963463][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.974127][   T29] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1569.987628][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1570.003507][   T29] usb 4-1: config 0 descriptor??
[ 1570.023515][   T29] pwc: Askey VC010 type 2 USB webcam detected.
[ 1570.494753][   T29] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1570.515593][   T29] pwc: recv_control_msg error -32 req 02 val 2700
[ 1570.537641][   T29] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1570.552017][   T29] pwc: recv_control_msg error -32 req 04 val 1000
[ 1570.576628][   T29] pwc: recv_control_msg error -32 req 04 val 1300
[ 1570.596864][   T29] pwc: recv_control_msg error -32 req 04 val 1400
[ 1570.615740][   T29] pwc: recv_control_msg error -32 req 02 val 2000
[ 1570.636471][   T29] pwc: recv_control_msg error -32 req 02 val 2100
[ 1570.658255][   T29] pwc: recv_control_msg error -32 req 04 val 1500
[ 1570.665950][   T29] pwc: recv_control_msg error -32 req 02 val 2500
[ 1570.673330][   T29] pwc: recv_control_msg error -32 req 02 val 2400
[ 1570.680710][   T29] pwc: recv_control_msg error -32 req 02 val 2600
[ 1570.690177][   T29] pwc: recv_control_msg error -32 req 02 val 2900
[ 1570.697768][   T29] pwc: recv_control_msg error -32 req 02 val 2800
[ 1570.871000][   T12] ------------[ cut here ]------------
[ 1570.879504][   T12] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[ 1570.893301][   T12] WARNING: net/mac80211/tx.c:750 at ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20, CPU#0: kworker/u8:0/12
[ 1570.904103][   T12] Modules linked in:
[ 1570.908410][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1570.919333][   T12] Tainted: [L]=SOFTLOCKUP
[ 1570.923370][   T29] pwc: recv_control_msg error -71 req 04 val 1200
[ 1570.923661][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1570.940228][   T12] Workqueue: events_unbound cfg80211_wiphy_work
[ 1570.946560][   T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20
[ 1570.948997][   T29] pwc: Registered as video103.
[ 1570.953142][   T12] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 17 e2 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 01 60 02 f7 e8 3c
[ 1570.977594][   T12] RSP: 0018:ffffc900001175d8 EFLAGS: 00010286
[ 1570.983766][   T12] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005
[ 1570.991808][   T12] RDX: ffff888022709d84 RSI: ffff888025f91888 RDI: ffffffff90e837b0
[ 1570.993547][   T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78
[ 1570.999803][   T12] RBP: ffffc90000117850 R08: 0000000000000005 R09: 0000000000000000
[ 1570.999835][   T12] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022709d84
[ 1571.025295][   T12] R13: ffffc900001178c0 R14: 0000000000000000 R15: 0000000000000001
[ 1571.033345][   T12] FS:  0000000000000000(0000) GS:ffff888124386000(0000) knlGS:0000000000000000
[ 1571.042297][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1571.048971][   T12] CR2: 0000001b2d222ff8 CR3: 0000000087ee4000 CR4: 0000000000350ef0
[ 1571.057011][   T12] Call Trace:
[ 1571.060300][   T12]  <TASK>
[ 1571.063251][   T12]  ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1571.069412][   T12]  ? kmalloc_reserve+0x148/0x350
[ 1571.074397][   T12]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1571.080587][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.086277][   T12]  ? sta_info_hash_lookup+0x259/0x660
[ 1571.091734][   T12]  invoke_tx_handlers_late+0xfb4/0x2750
[ 1571.097335][   T12]  ? ieee80211_queue_skb+0x360/0x2220
[ 1571.102806][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.108508][   T12]  ? invoke_tx_handlers_early+0x65d/0x27d0
[ 1571.114408][   T12]  ieee80211_tx+0x304/0x460
[ 1571.118975][   T12]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1571.124128][   T12]  ? rcu_is_watching+0x12/0xc0
[ 1571.128940][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.134659][   T12]  ? ieee80211_skb_resize+0x119/0x670
[ 1571.140074][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.145793][   T12]  ? ieee80211_set_qos_hdr+0x2c1/0x3f0
[ 1571.151311][   T12]  ieee80211_xmit+0x30f/0x3e0
[ 1571.156124][   T12]  __ieee80211_tx_skb_tid_band+0x2c2/0x720
[ 1571.161985][   T12]  ieee80211_scan_state_send_probe+0x33d/0xac0
[ 1571.168237][   T12]  ieee80211_scan_work+0x750/0x1ff0
[ 1571.173497][   T12]  ? __lock_acquire+0x4a5/0x2630
[ 1571.178476][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.184175][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.189965][   T12]  ? do_raw_spin_lock+0x128/0x260
[ 1571.195047][   T12]  ? __pfx_ieee80211_scan_work+0x10/0x10
[ 1571.200748][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.206456][   T12]  ? rcu_is_watching+0x12/0xc0
[ 1571.211268][   T12]  cfg80211_wiphy_work+0x410/0x570
[ 1571.216428][   T12]  process_one_work+0xa0e/0x1980
[ 1571.221465][   T12]  ? __pfx_process_one_work+0x10/0x10
[ 1571.226868][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.232590][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.238277][   T12]  worker_thread+0x5ef/0xe50
[ 1571.242959][   T12]  ? kthread+0x13a/0x450
[ 1571.247233][   T12]  ? __pfx_worker_thread+0x10/0x10
[ 1571.252412][   T12]  kthread+0x370/0x450
[ 1571.256513][   T12]  ? __pfx_kthread+0x10/0x10
[ 1571.261177][   T12]  ret_from_fork+0x72b/0xd50
[ 1571.263133][   T29] usb 4-1: USB disconnect, device number 6
[ 1571.265805][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[ 1571.276748][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.282457][   T12]  ? __switch_to+0x800/0x1100
[ 1571.287210][   T12]  ? __switch_to_asm+0x39/0x70
[ 1571.292020][   T12]  ? __pfx_kthread+0x10/0x10
[ 1571.296683][   T12]  ret_from_fork_asm+0x1a/0x30
[ 1571.301510][   T12]  </TASK>
[ 1571.304575][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1571.311873][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1571.322752][   T12] Tainted: [L]=SOFTLOCKUP
[ 1571.327076][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1571.337135][   T12] Workqueue: events_unbound cfg80211_wiphy_work
[ 1571.343403][   T12] Call Trace:
[ 1571.346679][   T12]  <TASK>
[ 1571.349611][   T12]  dump_stack_lvl+0x100/0x190
[ 1571.354305][   T12]  vpanic+0x552/0x970
[ 1571.358296][   T12]  ? __pfx_vpanic+0x10/0x10
[ 1571.362823][   T12]  panic+0xd1/0xe0
[ 1571.366557][   T12]  ? __pfx_panic+0x10/0x10
[ 1571.371002][   T12]  ? check_panic_on_warn+0x1f/0x90
[ 1571.376148][   T12]  check_panic_on_warn.cold+0x19/0x34
[ 1571.381538][   T12]  ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20
[ 1571.387463][   T12]  __warn.cold+0x191/0x328
[ 1571.391898][   T12]  __report_bug+0x296/0x3d0
[ 1571.396425][   T12]  ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20
[ 1571.402349][   T12]  ? __pfx___report_bug+0x10/0x10
[ 1571.407395][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.413046][   T12]  ? kasan_save_stack+0x3f/0x50
[ 1571.417917][   T12]  ? kasan_save_stack+0x30/0x50
[ 1571.422800][   T12]  ? ieee80211_scan_work+0x750/0x1ff0
[ 1571.428191][   T12]  ? cfg80211_wiphy_work+0x410/0x570
[ 1571.433492][   T12]  ? process_one_work+0xa0e/0x1980
[ 1571.438622][   T12]  ? worker_thread+0x5ef/0xe50
[ 1571.443398][   T12]  ? kthread+0x370/0x450
[ 1571.447679][   T12]  ? ret_from_fork+0x72b/0xd50
[ 1571.452458][   T12]  ? ret_from_fork_asm+0x1a/0x30
[ 1571.457430][   T12]  report_bug_entry+0xe1/0x290
[ 1571.462222][   T12]  ? ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20
[ 1571.468143][   T12]  handle_bug+0x1cd/0x2a0
[ 1571.472485][   T12]  exc_invalid_op+0x17/0x50
[ 1571.477000][   T12]  asm_exc_invalid_op+0x1a/0x20
[ 1571.481869][   T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20
[ 1571.488403][   T12] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 17 e2 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 01 60 02 f7 e8 3c
[ 1571.508024][   T12] RSP: 0018:ffffc900001175d8 EFLAGS: 00010286
[ 1571.514120][   T12] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005
[ 1571.522094][   T12] RDX: ffff888022709d84 RSI: ffff888025f91888 RDI: ffffffff90e837b0
[ 1571.530070][   T12] RBP: ffffc90000117850 R08: 0000000000000005 R09: 0000000000000000
[ 1571.538049][   T12] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888022709d84
[ 1571.546031][   T12] R13: ffffc900001178c0 R14: 0000000000000000 R15: 0000000000000001
[ 1571.554118][   T12]  ? ieee80211_tx_h_rate_ctrl+0x1297/0x1a20
[ 1571.560061][   T12]  ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0
[ 1571.566154][   T12]  ? kmalloc_reserve+0x148/0x350
[ 1571.571123][   T12]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1571.577231][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.582885][   T12]  ? sta_info_hash_lookup+0x259/0x660
[ 1571.588283][   T12]  invoke_tx_handlers_late+0xfb4/0x2750
[ 1571.593860][   T12]  ? ieee80211_queue_skb+0x360/0x2220
[ 1571.599268][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.604923][   T12]  ? invoke_tx_handlers_early+0x65d/0x27d0
[ 1571.610774][   T12]  ieee80211_tx+0x304/0x460
[ 1571.615314][   T12]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1571.620391][   T12]  ? rcu_is_watching+0x12/0xc0
[ 1571.625186][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.630840][   T12]  ? ieee80211_skb_resize+0x119/0x670
[ 1571.636238][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.641888][   T12]  ? ieee80211_set_qos_hdr+0x2c1/0x3f0
[ 1571.647377][   T12]  ieee80211_xmit+0x30f/0x3e0
[ 1571.652099][   T12]  __ieee80211_tx_skb_tid_band+0x2c2/0x720
[ 1571.657928][   T12]  ieee80211_scan_state_send_probe+0x33d/0xac0
[ 1571.664116][   T12]  ieee80211_scan_work+0x750/0x1ff0
[ 1571.669331][   T12]  ? __lock_acquire+0x4a5/0x2630
[ 1571.674290][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.679943][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.685595][   T12]  ? do_raw_spin_lock+0x128/0x260
[ 1571.690648][   T12]  ? __pfx_ieee80211_scan_work+0x10/0x10
[ 1571.696300][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.701950][   T12]  ? rcu_is_watching+0x12/0xc0
[ 1571.706749][   T12]  cfg80211_wiphy_work+0x410/0x570
[ 1571.711885][   T12]  process_one_work+0xa0e/0x1980
[ 1571.716860][   T12]  ? __pfx_process_one_work+0x10/0x10
[ 1571.722250][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.727923][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.733580][   T12]  worker_thread+0x5ef/0xe50
[ 1571.738205][   T12]  ? kthread+0x13a/0x450
[ 1571.742457][   T12]  ? __pfx_worker_thread+0x10/0x10
[ 1571.747588][   T12]  kthread+0x370/0x450
[ 1571.751675][   T12]  ? __pfx_kthread+0x10/0x10
[ 1571.756282][   T12]  ret_from_fork+0x72b/0xd50
[ 1571.760927][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[ 1571.766062][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1571.771714][   T12]  ? __switch_to+0x800/0x1100
[ 1571.776419][   T12]  ? __switch_to_asm+0x39/0x70
[ 1571.781205][   T12]  ? __pfx_kthread+0x10/0x10
[ 1571.785813][   T12]  ret_from_fork_asm+0x1a/0x30
[ 1571.790633][   T12]  </TASK>
[ 1571.793876][   T12] Kernel Offset: disabled
[ 1571.798201][   T12] Rebooting in 86400 seconds..