last executing test programs:

6m8.927670452s ago: executing program 2 (id=470):
syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb000000090410"], 0x0)
r0 = syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1d, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00030400000024032504c23271cd4dea333da331acfa423730cf96539bdba5eceb0fda3437e26264c60033fb50338c25af65c7fc7559d46b1b28bf693f8c50b43d0b161bcbf6f16d050fcfbc5d9813e64147512d001028c8139c5f3c390e90ff9c600cbd7ecfee00"/114]}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9}, @mss={0x2, 0x4, 0x4}, @mss={0x2, 0x4, 0x8}, @exp_smc={0xfe, 0x6}, @nop, @window={0x3, 0x3, 0x4}]}}}}}}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x5}, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r5, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000300)=0xc)

6m5.754788426s ago: executing program 2 (id=475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b0001006272"], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00'})
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6m2.002618204s ago: executing program 2 (id=481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, <r6=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x7)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002019})

5m59.346092553s ago: executing program 2 (id=484):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x10, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000)
connect$bt_l2cap(r3, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0)

5m58.774804959s ago: executing program 4 (id=485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1240, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12a0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xd}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlockall(0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r5 = socket(0x2, 0x5, 0x800003)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$key(r5, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00')
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]})
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1})

5m55.201103315s ago: executing program 3 (id=488):
epoll_create1(0x80000)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
epoll_create1(0x0)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x23f}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000002040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0)

5m53.570365332s ago: executing program 3 (id=491):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x10, 0x1)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000)
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0)

5m53.22482473s ago: executing program 4 (id=492):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000040))
dup3(r0, r1, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}})
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_usb_connect$cdc_ecm(0x0, 0x105, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x1, 0xf9, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x74, {{0x8, 0x24, 0x6, 0x0, 0x0, "fe2085"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0xd298, 0xd, 0x1, 0xd0}, [@mdlm={0x15, 0x24, 0x12, 0xe}, @country_functional={0x6, 0x24, 0x7, 0x5, 0x1}, @mdlm_detail={0x9a, 0x24, 0x13, 0x1, "2fad934ef18fb8674557015133b13f75597e3d29050cf145ef8916de79133f940a7e17c26584c8939fa2ac4694e382ffe35a4e67e73d31b3817a021dad84e0aa43e7db7f7cc3932e56995c708036077ff2a8b705f20ae1067b050a61cf3283751f8bb32f88cb6166008029759323ad15bc49e394cadfdd0d1bfe4b6fbeb3f15a71eabd1034b3e8fbb90086d3a18fa53a415797c57ccc"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xc, 0x6, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x30, 0xa, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x8, 0x5, 0xd1, 0xff, 0xd}, 0x59, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x827}}]})
r4 = add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r5=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$nl_generic(0x10, 0x3, 0x10)

5m52.036215802s ago: executing program 3 (id=494):
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1ad, 0xfffffffffffffffc)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
lseek(r0, 0x10005, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000040200000000000000000000010500000020000001e5"], 0x0, 0x2a}, 0x28)
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0)
syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe})

5m49.472689155s ago: executing program 4 (id=496):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="e0000000130001000000000000000000786368616368613230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000009ccc652d92e596f2fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000f3cecec0e9d2cd1852a609fb877058999be57628101f6119695b13ffb9434ffafdb70000000000000000fda93073cba42d0daf9d"], 0xe0}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x80)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)}, 0x20)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5m48.137826293s ago: executing program 3 (id=497):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="bb9374", 0x0, 0xffffffff, 0x0, 0x0, 0x0})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140), 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

5m47.595642817s ago: executing program 2 (id=498):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
socket$inet(0xa, 0x801, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="14fd54ab72df97e6256c00000000", 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
semget$private(0x0, 0x4000000009, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB="01980000131300000500110042d12355625abaa2f60600000008001b000b000000180012800e00010077697265677561"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

5m47.192219779s ago: executing program 4 (id=499):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5m46.869745651s ago: executing program 4 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002019})

5m44.501524688s ago: executing program 4 (id=503):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

5m42.475846015s ago: executing program 3 (id=506):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, 0x0)
socket(0xa, 0x80805, 0x0)
userfaultfd(0x80801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6(0xa, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2)

5m41.555882994s ago: executing program 2 (id=508):
mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
pipe(&(0x7f0000000080))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
r2 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r2, 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000005f00"], 0x0, 0x34}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)
clock_gettime(0x3, &(0x7f0000000140))

5m41.510291018s ago: executing program 3 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
sched_setaffinity(r3, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)

5m25.872239558s ago: executing program 32 (id=505):
mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
pipe(&(0x7f0000000080))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
r4 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r4, 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000005f00"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
clock_gettime(0x3, &(0x7f0000000140))

5m25.597235097s ago: executing program 33 (id=507):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x3, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="bb9374", 0x0, 0xffffffff, 0x0, 0x0, 0x0})
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140), 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r1 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

5m25.445958992s ago: executing program 34 (id=508):
mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
pipe(&(0x7f0000000080))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
r2 = gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(r2, 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000005f00"], 0x0, 0x34}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)
clock_gettime(0x3, &(0x7f0000000140))

5m25.202063911s ago: executing program 35 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0})
sched_setaffinity(r3, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)

5m25.0229085s ago: executing program 36 (id=503):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000094231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})

4m46.687624525s ago: executing program 5 (id=517):
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x30)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4})
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040000}, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd, 0x0, 0xff})
ioprio_set$uid(0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4m44.704465976s ago: executing program 5 (id=518):
socket$igmp(0x2, 0x3, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)
unshare(0x6a040000)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8000)
dup3(r6, 0xffffffffffffffff, 0x0)

4m42.247970819s ago: executing program 5 (id=519):
mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
pipe(&(0x7f0000000080))
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
clock_gettime(0x3, &(0x7f0000000140))

4m40.821037518s ago: executing program 5 (id=520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x4})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

4m35.628734947s ago: executing program 5 (id=522):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @none, 0x0, 0x1}, 0xe)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[0x0]}, 0x0)

4m32.515972153s ago: executing program 5 (id=524):
socket$igmp(0x2, 0x3, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)
unshare(0x6a040000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)

4m29.973718423s ago: executing program 9 (id=514):
socket(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000003c0)={0x5, 0x98c6, 0xfd})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

4m27.397186224s ago: executing program 9 (id=529):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[0x0]}, 0x0)

4m23.424975652s ago: executing program 9 (id=530):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb)

4m21.922110556s ago: executing program 9 (id=532):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
socket$inet(0xa, 0x801, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="14fd54ab72df97e6256c00000000", 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
semget$private(0x0, 0x4000000009, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB="01980000131300000500110042d12355625abaa2f60600000008001b000b000000180012800e00010077697265677561"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

4m16.935476132s ago: executing program 37 (id=524):
socket$igmp(0x2, 0x3, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB], 0x20000600}}, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0xc0d0)
unshare(0x6a040000)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)

4m13.510293876s ago: executing program 9 (id=540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0x4, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)

4m10.922828796s ago: executing program 9 (id=544):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket(0x6, 0x2, 0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

3m55.064607374s ago: executing program 38 (id=544):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket(0x6, 0x2, 0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

6.72225186s ago: executing program 1 (id=1112):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

6.54869034s ago: executing program 1 (id=1116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x15c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x94}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x8e5e249c9e02389c}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x51)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000300001801c00028008000200a2000000050001001d00000008000300ff0f00000d000100f5"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x98}}, 0x40)

5.5104982s ago: executing program 8 (id=1122):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000003bc0)=[{&(0x7f00000002c0)="a74df8a2630198b813723f4dfc61e83d8e95de424354f57491a00456a19bbb11e6a08d2c4129bb546b20896de82d64c3cfc34b2a6f016732f5833ca2a30ea0b6fcde209c1ab1e5cbaf2df040263646eeae3ffb7beec2fab3765affdb49b6c8c4a5b029ca9c923f66f6c2df03b705afe62e1f7fc1f48fd10c2987637969ac2a3201014fecc4fe626ca01ad79cc05c2c38898842b07f2c5ec445fcecba961b0afdf0f4258604a1da11b7b35cb51fe255034aaa2cbff78859f03eccecbeb9de40368cd967b860566df7426729fab017e11fa9f52c", 0xd3}, {&(0x7f00000003c0)}], 0x2)

5.301934075s ago: executing program 1 (id=1124):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)

5.180438945s ago: executing program 8 (id=1126):
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64"], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.741773618s ago: executing program 8 (id=1127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.570287437s ago: executing program 0 (id=1128):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4)

4.223102499s ago: executing program 1 (id=1130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

3.927647611s ago: executing program 1 (id=1131):
syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb0000000904"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)

3.917616448s ago: executing program 6 (id=1132):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4)

3.391263072s ago: executing program 8 (id=1136):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000003bc0)=[{&(0x7f00000002c0)="a74df8a2630198b813723f4dfc61e83d8e95de424354f57491a00456a19bbb11e6a08d2c4129bb546b20896de82d64c3cfc34b2a6f016732f5833ca2a30ea0b6fcde209c1ab1e5cbaf2df040263646eeae3ffb7beec2fab3765affdb49b6c8c4a5b029ca9c923f66f6c2df03b705afe62e1f7fc1f48fd10c2987637969ac2a3201014fecc4fe626ca01ad79cc05c2c38898842b07f2c5ec445fcecba961b0afdf0f4258604a1da11b7b35cb51fe255034aaa2cbff78859f03eccecbeb9de40368cd967b860566df7426729fab017e11fa9f52c", 0xd3}, {&(0x7f00000003c0)}], 0x2)

3.186715696s ago: executing program 0 (id=1137):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.104624756s ago: executing program 8 (id=1138):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, 0x0, r4}}, [@algo_auth={0x11a, 0x1, {{'blake2s-128-x86\x00'}, 0x690, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0xdec, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="b156a8fc9cf1ceda616bff7bedf099cceb4647e290a6137d9f009701afa23203c5a1d329df58df03f7e29626b52b2e435012eaa452f7755e30cf5aab6460fddfcbb2c6c622fd4dcc2a95cf1a113b227b5205a31aee0635d3ac6e619cb49aada53a2b4b5ada971adea1e1343fe759dece47a452fb05ecbae084bbcde0f855e7d42e4100619426d79a60f0d83f5c4b1af7e196d8989ea8ca6ed9337e803cbdee878e40eb06b6ba614fa15ea5041e148762a8aa3ec429555c35bc57c988fe231d1fb7b7f74eb111cc6e08f6bd383bcf4eaed1b38d7a4e9c40c37c59ec9b14604a32a987b2d22c9b5ebb5a86955a816efb97c22c20a00bea56766c6d8bd6e5d49dad5c88416cf00a6a23ae571381975e4c39727eb00a3ca09a5a452056ca2fd5f275c0f31506a97ec04fb466076b2ea740033bf6a202de4cb39a5146a419628e70bf792edb7c4ca5fcdadb76fb22727c6b4e4dce00a5b63fe8449d72e79f65a3c1ff4b30fdbba3a4a5f47152a3becb34383d2ad564963c226e0ad57554262f694880bfda42fc4c8d68c0e44126371756e65d127a59207d4090956cf666958065d4afd32e9c011612abe70797a4ddbac09ad6c51e05bfcc73bd0756ad47484b75b244b2397fb7d357ca3a56a50a8a7aa9ffe98c72b200cedbaa10689727c083fdf0f5d5fc06a2557dcc2d0b1dca70ec513a82fe26b5eb0cce40b13fcb6de9da917d3b76edb90148ae718e24d75bfd1561d3a1586957000a2a7225f8858416de22228c3f616baf210d1efdd13264abb385e277c1aa451858782c94ed0e0ee2d806a85c75388f7951abd24369308bc6ed6cd7b4b7e2ae3f2e3f9a9f5e70155313b8df1da4f5ca9c96851949af9deed590fe70ad4592128e61b72244f408545360fe37fedefdfe44ef1c2665ec6c9c0a525dac9992aa7f95f3c1eb988f3fed8b981436b210d9407b1eca0dba2b3b1177d0a3e027b576498a074be65755683458786865d5021079df56e7515fe98aed2ea12a44f9e8053485a38e374ef6248502df627d2d2b8dd44727a5750a0140d6830c9ef5d18bad95a44b20eba6618a9d062ddbd9c9c2e92d6ca56d1de110e4cf8cfe62f426e6b5b1e257a5e32ee5ed605a2032808a5950b80811d7987a1cb5bdbfe52cd1f43fcddbba4b62d09a57bdce780bfeb78bfe737d71b3b634871a82698f51d39e6a8895d89b63a8223fb1f507709b8a1a333cf84e9f4a996349f772f2acb260f2519b5500063c31df5f6a05681daa827431a05b98bc0d2106d6abfb7382faa10272f48100dd90a3b677ab9185ff98c31d26c76e26cb3bf09cc70f8a615f0703638381107ef7ba060fab2c12db771b92a32b57b232ec2fac3f57a9f827ff8cb1a590aa66a7b502c4f127d43eb11c98eaaa03d42b0180120c4e1c8f1d5c9d59c6bf8fa884ae5187b73be20168d657e8e04dc8ff27aeabb6f607f23d056758c6c8b29fe7c8a8fae06375738f582d1b01b0a6a760666c853921e03ad3ef78db03201c0cfd0c5086e4bce80011437641bcd621a6f0457030381890dbb8212ebaca4580b6b2b35e8940f4687353886c4321ce0f145842972149d53646170df21cd26e2c729c94f959c9bdbe5bcf7c88d0cfd5ec32b3070522135b2eb191cfb01ba28df935dce574f1353ab5f3e4b9de4c89a2fe77aa84fa518963e61fa83658736b6f78d40876ad550bd690fa3824de7518e72008784cac157cd450be481ae86b758b40e9be6a4193a451f1345ffe4c88fec3af838da9aa96d12829de937048047945833dad53c1f542fda4dd5b7ca8f4b29078cf68e800cc1c9572661e12dfa7fac908023f49b2b6f69c4e5d5b715de0c02c9db4b060a8fee131c25efe7d86ce4545aa8fac94eb0f14716fd65f59f2573d814e4799d153782c59c7e941e8c682dfb2a7ad5386eabb5123bef16555285c96a40f439fe02004f75dd6785822146aa515f5f6c90a24efc72d031b347867134e52f986c3549c0b316237db118c3b6efda0c92c008fc15084e4f5856e6047bc1a5a19f7a9595727a769c2d0764d482f20280d860d831f5ef9aba39714afa7f3fe85a3b4cd5715f8ee6e20886c2ad190d60a38bb5d7853e9465c34bac4b03893edeabce14456274eb4aa279c30d381472a0036a4058d863b3987a0d570196fe1c7976b4aabd41ffde6dfc5b468bddcb0f71513fadfe7e0bbd32c409f78f989fb3a9ef55fb57135e16236f3f8558371ea9165bc471a5715aac3d359979daf991fb8f0497ebbae15fe1c628dfff4bbf64c1efc10f6cc4723db30673bc851183faf622d7aa7d40231a0b15816fcf7cdaeee244843f60b47da00676cd166d0853d161b4cbc555c35905e11a768d60bac536b336b5ef69214db80c71962491e87cdf8441e46ba7270c0fa6815bfada79d1a12029b10ccab08e2971c10dd1558e29169fe2f3c65c8a5a569332ff2baa507cc79622af84048c7b1dfb5adc9ef04f5faa166c33decc2629a6744750dc68975ccda21e72098c6b9485c886a9e0c550e200aea2878e028ffdf0f9f20a7480cc88cdb51406c74c059292bd376d9fdd94633f497181d8c468cfc5d9023ea89b96165ff877a87b3caf605da32546a53f6a20b70ad40e94af1c5eee7d3ecb2ed07e5b413643c2df6d27da458fbc140e97c9cafa8dc97cc79dfcc144070a2cd5adb31bf3a786b30baf087b9273dffb5726e55ae6e1bc2fcf356b446bb322acbcfe35753835bc6dc69ea4845a4d0807ec730fd0490ed81b2f8c7e58c07da8f03a432e509adaaeccc9a405c2b111e26062503cff9b1b611deafaccc0cd9f5f28935376d4d377ff3260670ed956c96374a27320d1a1bcc5bb1bb94e5d2e241ed88da7c4064f8412ff03d7b84b31f4b3afb7c26d131e7343adec9f21ee0efc64a3b14599e3e4032f7af8664475dd8bb42b8bcf8b4bb8a61f4f439cbd6521899f3ff4627abd709ffd0d47b04997643b9c4deaf3af1f453ea445bcc0af145b9845af09b2777e93670e3e4eed77700286f73c2220677c67caad086d9cbf27a8a37c175a8a6584ca7bdef91ac60c088e76cb1414653652df9d86ecae52c26681b5e31f70bf5e03f3fd3d70a174b6c5f098e8bc1687f7c770c73a5449718ff4662065d807283264a238dfd787f40eac0bc6e165855bc71946cda2593a09d71fddd693423fef3b2be1ef9f907eaf786cc7446c6585aba758369833c48823c004ca613ff0e55d485794d862b5243d06f669afca436a7624a38a81787ea62ad3b7f1b340be8a21941e4338245078ad2d4b6fc00a35f94f7eb083c706f5d782c09b09008aefc5dc3c52e1db55a343d017db507c663e2033c224c3dcd3cbc97de9f00bab9c78a672406cc153a0add2285524ecd24236645aa4881d35ee9c40cedb787a04917bcceea935317bc16444733f51d4d0111be4eefd94ce4c0db7cd8385d1d180b563bfba7b965b4735f2195dc31009b6fc885eead0050ed80bd21fbdd3a5432f64078c94e338fdc48a19b1714bc5842234647fc0e32cf27ba5977574b552a315e3c7034877cac0dd70be0832856993add1ea79153a120d9e1f6ed5e9e3d41ff9e11953bb10ef9df2f5fa532cb82a41c2791c73e53d81666cf382419295c7741290049688c6bf7e395e3222abfd94c9d423b30ec7213f29a4560f4b356dfaeabef89d897014422872f9675cd65c17547c753d52f6adee0fa796716c923d35ff7f44f3e5e43a01a8d6dbd79381c91bf4bf5b443b03956ee015019d4cf41654214186038c0e4e888b4ca0d6f29544a9043e201d3b482a61eb50cb1500f1e850eb6410058e6fac6e34cb494568071aea1d7dde90575ed9b0c4ff8cf2b2c8621eb85f66064ad659636c0d164abf972de63c3a5b8637f4014af3aaccf7b67098e46900398efed545bda8c174c05d817d43d97e3a082c499b475847ba2f00ca99072f76cd5299c7193e1f4b1eb0e39cbfd46d08b607a14b8291a6d8473f7bd3211e4aa7aa7034a649efca36447b76404ea19e657815506da20d8d2082884bf9cbcb6b5d2653a249e3032eb944d4aeb3a2353f47147e3930c84ada6c37719b2cdb2678946d5a9a9b4e32c6625cbaae6398a6d5c9b2bf6a0a87c493115581f27739badf456de575df11d8a704657a3a7a3f76242b777f42facec24f92427859b3204db98f1df5f977ab1c4d41040ef518dd48dd41a230494084604b088702c342072695a9e67512a7cb9b1465ad5f2b07ed4ef10a85ca60ef5e76995a9967198b1fa7eacdb61874d13942c6c50f017ae5c26dc48a2c1e7dec7a13f9a6893243e3634ec48ed1e9b2a7dfe69e9e49d37cd3eaa2ce1c0f1c3d69dc18161b1d2e6eb", @nested={0xd5, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r5}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0xdec}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[@ANYBLOB="30000000514ce4ba9ad323e2eed72ef247b7e20cdb88ca56ac5191d8b2306acc6e9a2878ff94a657", @ANYRES16=r6, @ANYBLOB="010000000000000000001c0000000a0004007770616e33000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x73}}}], 0x40}, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050)
sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001480)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081)
sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

2.916694562s ago: executing program 7 (id=1139):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
pipe(&(0x7f0000000080))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0)

2.79346562s ago: executing program 6 (id=1140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

2.607527859s ago: executing program 6 (id=1141):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}]}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.561563323s ago: executing program 0 (id=1142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

2.511670926s ago: executing program 7 (id=1143):
socket$kcm(0x2, 0xa, 0x2)
socket$inet(0x2, 0xa, 0x400)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

2.448755967s ago: executing program 1 (id=1144):
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x8, 0x4, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000340)=0x1, 0x12)

2.24927168s ago: executing program 0 (id=1145):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x80)

2.027068132s ago: executing program 0 (id=1146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.730825658s ago: executing program 8 (id=1147):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd", @ANYBLOB="0c009900b4170e7e08006140fb01"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79"])
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1.352116102s ago: executing program 7 (id=1148):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r1, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2)

1.350428047s ago: executing program 6 (id=1149):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000040))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x9}, 0x10}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve1\x00'})

1.105221353s ago: executing program 7 (id=1150):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000840)=""/86, 0x56}], 0x2}, 0x0)

916.326022ms ago: executing program 6 (id=1151):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendmmsg$inet(r0, &(0x7f0000008940)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000001c0)="4ea9273962607950aa229b9b391a", 0xe}, {&(0x7f0000000a40)="20ef99512e4c9ed54c73e372d2cfd65f373c04e09adc4a9d341ee8510d7054f7eb89d81d21d2fca2e4083ff0068cd06a6b3428e1d24325bc8a8197f3eb71534ee16f7ff8c65695b0d1752a1136bf2356ecbe984f1ac47caa446dc75453cae570a768ea371b8b8b6c11128c1add9237820bf3d7ca05a8e22ab7174723ebcf548224348615e246187b16b1cf5ea240a0b0f3b7dee829c9e5e0c430f44b396452d8742052484a7d6cb0ea71130fd4ff6b907b4a12cb3a4d31a1bea89250a730b43ce26226bd76a629a941c291ced31b6cb078f947a226b40d7064a7ad259a3f9f4ce14a1dd5", 0xe4}, {&(0x7f0000000b40)="31c5c8a37ebe3ebf784ca5f50ece09419c38011176d8369afc9de2ee4c772f1aac759a8730ac9e9149c4cb41116f570e2cb5f47a33cdb763dff85ec5a3d9416ebc7f129309aae02a10365bf2255d524c44e8ecafddede644e36f21e3f5a4d332db167376f67e3873c8648d96fb630842cf89c1b67665ad936fc09fbeee4b797bfbd19e1bc8", 0x85}, {&(0x7f0000000c00)="4e67f3c865932e7a62000d2cfb99528a54b45fdaf2a280961f52673b05a46893f6624a03e0e6f0b48fe01052d31c18bb1521b6f0490d610697deaa090aa11ba1e826cb94861a71032045ee8e21c95d52562a337fc402667a7d87f8bf78e80779f4854d815a65", 0x66}], 0x4, &(0x7f0000000e40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x84, [@multicast1]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}], 0x30}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003300)=[{&(0x7f0000000ec0)="95a90de73095b0712fe008fec9e687be71443fd78cb06c770c39943b6f5c3f10c5623ac79680051532a972972a1c74e79d925ee65cba2b2270e765a1dbe796459ee130f65567640a260c4592042a16fb35ed0ba983436ef47d5476b1ad9009b41c93b8fedec54701de8f436d3489463b0dcaabc57f58cb9516af19baef2838439d52d84010ea3790d15f6a3ffe338869bdf589dd40ad35c8", 0x98}, {&(0x7f0000002300)="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", 0xb6b}], 0x2, &(0x7f0000003340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xfb, [@local, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @multicast1, @loopback, @local, @rand_addr=0x64010101, @multicast1, @remote, @loopback]}, @timestamp_prespec={0x44, 0x54, 0x25, 0x3, 0x6, [{@multicast2, 0x2af}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x3ff}, {@empty, 0x2}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x202f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0xd6}, {@multicast2, 0x8}]}, @timestamp_addr={0x44, 0x44, 0x67, 0x1, 0xb, [{@multicast2, 0x1}, {@local, 0x9}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x8}, {@remote, 0x26}, {@multicast2, 0x27}]}, @end, @rr={0x7, 0xf, 0x88, [@loopback, @broadcast, @private=0xa010100]}, @lsrr={0x83, 0x17, 0xfe, [@loopback, @remote, @local, @private=0xa010100, @local]}]}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xfa, 0x0, 0x4, [0x0, 0x9]}, @lsrr={0x83, 0x13, 0x79, [@empty, @loopback, @loopback, @local]}, @timestamp_prespec={0x44, 0x24, 0xa3, 0x3, 0x1, [{@multicast1, 0xfffff800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa10}, {@rand_addr=0x64010101, 0x8000}, {@rand_addr=0x64010100, 0x8}]}, @lsrr={0x83, 0x1f, 0x85, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @multicast1, @loopback, @empty, @broadcast]}, @lsrr={0x83, 0x17, 0x4b, [@dev={0xac, 0x14, 0x14, 0x33}, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0xa, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xff}, {@local, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0x8, [{@rand_addr=0x64010102}]}, @ssrr={0x89, 0x13, 0x58, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x480000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x49}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xd7, 0x3, 0x3, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x1}, {@multicast2, 0xf8}, {@multicast1, 0x2cc0000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9793}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x5, [0x2]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0xa6, [@empty, @private=0xa010100, @remote]}, @timestamp_addr={0x44, 0x1c, 0xa3, 0x1, 0x9, [{@multicast1, 0x1}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x6}, 0x9}]}]}}}], 0x2f8}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000036c0)="7540c9ce2ce2a23b0095292e95ccdfd496e123a740736f97d3d679e9b1d6732dc2be38180616532c9a5553", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)="0527e1374ddbda8d9e56", 0xa}, {&(0x7f00000049c0)="8d62ee7e1bcb", 0x6}, {0x0}, {&(0x7f0000004b40)="61c5e5cb2a3ec3d2df4a6b6c38718868f2b671ccdbcdabbaf6a76055d9d613e8d2cd15c0d3f43eb171c9407454e87b0f31de4a6c78284448257e33c937d2793b58d20491c0146bae0367d2b9036817442123d0c7b0e819a0f6d1323a35ae87ea16535f672e5b20d3affa5a7502cbb718549bef072c6506b51ea0fb08ec0f0de4b6918178b2146dfc50069d919a915c99ff3a65bfdee1dd44d24e94bd09bff8c31ec1e95b2530c84b1542847d6c33add845fe3ef79b139e2a036af52da26725e0e2c31a81e20f7030d558a41c9f947a2902cbc986d587109710a4334b27301268fe58dc77710d801a3275c188554145ffad336d1e9923e2f31fb6b60ef68aef190e57963f9e7a51e2666e503ee68d682fd697503b5a6543ee00bbf73df606936e056628928e71dbbb7ecb14aee0d8ce4d26fa17deea7d612965aa4a5a2c38698a75bf1668ede0790baed5696a1d05b4e691e9b899b7cb1a938f3bb5ad9490066dde89765d299f67346b6a1f17a2604d34a72387b80176b0a4ae2e82a142b7c812dd5d5867b6be60571424d172e4e1ab598e7517f9d34f02a9bc7eff81d49f40fa41cdb3cb196da927b3fb4717f9fecdd390d298cefa025db04fc0e48c7c6d59c818fbff517ec476d6e68c7c6e8181729fd907a6bf2007f21bdf0ab363bd1d92545d8e28ccb89ccb1aa7a03dc9aff5cc2c0da997b26a99979d21a3971eceb91b26c5446780abc108e43e20020f0e85966a74778e8388c02ca5b525f1c701b8d835dad6ac3a15cd84b998032b4f5bab910a937b54f84c0127e6b93f680f7f1d2422583d579624c59e239c58298a0e357d1ebf8dae2bb1916599f981f38286ac0b16ab76b5e2d87a9efaddfba8ed1f1cf8f9244f55522bd5595edcccc0f8edb6492001bde45aad4028226defa2d78abec7f9f028c9d090fa0685d647ed08445e1c032c9207d70d3ffe06118f3802e9ece3621e119463b4320ea0f9e5367cc581e9e427f03ac6291bd50caaa935e6573385ad6407032cb7847a9477e294687d8e6528305a8059d48e0342227d9c4df419b7928ec34d07ad96e09e683b5d4689a7b8ebedf605bde332e4ade0a62003527b916025043c02944aeb0b4f334da4773365782e8ff97092f9f002fd5942915c7be1db00a45c82c12564955dcc4e52806d1390636ff2c506cd1b595b7ac8bd51c41cd155c55cf1b906b9beda52661f15fe4f8b7655cd4ca60273cb0749bfda10efdce2adfbb210471b699fb6d4389ef4b28afd5f4de1e4c40791d829f17aa0d1bc03701a199ccfd80f698ecdb749cf10f3483cb80691b7b10a06b55b3fb20a0df944adede42bbea328d28e41c63dcc92ef5ac1ec956fbd021b677a0a18fcd8dc13b59107aea83c3ddabf833b2d4b789e2045630abc6fb9ea17dc8eb84954794929e7f39e475353a9d637c0c021fe70ed3514f85f418f677557be949aaf535745577a49be86c400bf40e2346dc4329d71ab44aa5c2456bac70a20d297cba2ce25e9d23e80d54e1a788414cf0cb1bdffafeed03f692971151f8c400c359b96fe474c9a213afb225d5f9e6a3dfdf29996766cebe215bc4608b2c2eaf8dedc6175a5ac68c40304d8550cd2a828f1f910c192e925b6b85a35c7ddccd502a2e224934a86bd1d79b3462ee5eced4a179100f9bef5de5bae72afc094773205e6f64258048d1207ca6632424816a3ff364fc239b6190ff024a2c604384123af89e9b35ce88be87f1142e79a935c794346ca11ea8e2633b74eec09567c65fc2d73de04d5366519368bd48dffb4f09db2d5a65199d8652d1386a51f6192a7dc4850f923e75dd198320af4a5439a83f8b77ad12c19d92f3ba13af84dee1b944d8ddea3aa8ad1f659a8b15f500d3f419f98b52c33205d8b120399002e22a87bc7364ca8feb21866815e02b7301fab002ba94893e21fa5003888183fb8058f444b4ae31ef6eb1108cc10e752bfda529ece3a2b2c81d8a90b249653fd746b4efdd4a682338a6d3d74c4255a14ddf6ed426233cef134a4015e16208d6c784cfb014648c5df4f51bddac633210a6369c64e350d574d1658565419885d97b3d845bbe2ab49f629d22892fbbdebd7b30e20a1e1d984c288a80f738948ccf326aca12434a334c16be2a792964ed0eabbe165e5f3c9e4bcad14c97fa2d23d1d8b3e09baa6f8f287b05f921d131bf8b263c38a64351e0e8ec6b6d7b79284c879b2a75f02fe03cf77aa082c8ec04350e3348ac8db1889ba2a1b49aa165a646520193a241bcf58e10aa67d49447fb04bed54d8f9e03c88584b19ece82d5fe1a0911ea5766994c6589beb27771f49f60fdc4077467278b80e16bb679756b229353d0c86e573706505cefba6c27c4aa46ca118ecf063cce1573f323a5c0db42d4ecc2afd832e4e97ce64ef7cf19c7f511bb0c9d8eb663f433b5f75c5bda9bddcf06812162cb14613eab9c3bb04be181c8c36ecc0aaede4d3a55ab7bcbc4d49b318209f90dbf5a484bba956d32ecd9003fb12210c988e6e4c3535ba29d785ee44c080ab505898eadac02714b2a2db876c396f5fd355adbadc47b4c16778a10d37bebfb69c05ad14bf08c2ebae42c0", 0x72e}], 0x5, &(0x7f0000005d40)}}], 0x4, 0x0)

851.745622ms ago: executing program 0 (id=1152):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100"/71], 0x110)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

784.790601ms ago: executing program 7 (id=1153):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x14, r1, 0x701, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800c094}, 0x90)

648.516981ms ago: executing program 7 (id=1154):
syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb0000000904"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)

0s ago: executing program 6 (id=1155):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)

kernel console output (not intermixed with test programs):

an: left promiscuous mode
[  431.528989][ T5868] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  431.551082][ T1017] veth1_macvtap: left promiscuous mode
[  431.551188][ T1017] veth0_macvtap: left promiscuous mode
[  431.551462][ T1017] veth1_vlan: left promiscuous mode
[  431.551654][ T1017] veth0_vlan: left promiscuous mode
[  431.679385][ T5868] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  431.680404][ T5868] usb 1-1: Dual-Role OTG device on HNP port
[  431.680754][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.136745][ T5868] gspca_main: spca501-2.14.0 probing 0000:0000
[  432.150322][ T5868] gspca_spca501: reg write: error -32
[  432.150340][ T5868] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  432.150493][ T5868] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  432.232156][ T8222] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  432.278046][ T5868] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  432.415779][ T8222] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  432.417420][ T8222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.564677][ T8222] usb 9-1: config 0 descriptor??
[  432.564677][   T37] audit: type=1326 audit(1787048020.264:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8256 comm="syz.6.533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164f63e0d9 code=0x7fc00000
[  432.646099][ T8222] gspca_main: cpia1-2.14.0 probing 0813:0001
[  432.997657][   T37] audit: type=1326 audit(1787048020.694:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8256 comm="syz.6.533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f164f63e0d9 code=0x7fc00000
[  433.139707][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  433.201691][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  433.696774][ T8222] gspca_cpia1: usb_control_msg 03, error -32
[  433.765308][ T8259] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  433.765425][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  433.765702][ T8259] vhci_hcd vhci_hcd.0: Device attached
[  434.070983][ T8222] cpia1 9-1:0.0: unexpected state after lo power cmd: 17
[  434.469124][  T197] usb 49-1: new low-speed USB device number 2 using vhci_hcd
[  434.856662][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  434.917731][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  435.184781][ T8222] gspca_cpia1: usb_control_msg 01, error -110
[  435.184808][ T8222] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[  435.253033][ T8272] vhci_hcd: connection reset by peer
[  435.256851][   T66] vhci_hcd vhci_hcd.8: stop threads
[  435.256884][   T66] vhci_hcd vhci_hcd.8: release socket
[  435.257067][   T66] vhci_hcd vhci_hcd.8: disconnect device
[  435.413036][ T8222] usb 9-1: USB disconnect, device number 4
[  435.811282][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  435.859460][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  436.619958][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  437.131342][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  438.012023][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  438.047436][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  438.078570][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  438.104367][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  438.105299][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  438.374695][ T5245] 8021q: adding VLAN 0 to HW filter on device eth11
[  439.188736][ T8286] tipc: Started in network mode
[  439.191525][ T8286] tipc: Node identity ea183b4a2c65, cluster identity 4711
[  439.320760][ T8286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.663797][  T197] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  439.744715][ T8283] tipc: Disabling bearer <eth:syzkaller0>
[  440.425576][   T59] Bluetooth: hci0: command tx timeout
[  441.078013][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[  441.078091][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[  442.504298][   T59] Bluetooth: hci0: command tx timeout
[  443.136604][   T37] audit: type=1800 audit(1787048030.674:1955): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.545" name="idVendor" dev="configfs" ino=22414 res=0 errno=0
[  443.136664][   T37] audit: type=1800 audit(1787048030.704:1956): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.545" name="idProduct" dev="configfs" ino=22421 res=0 errno=0
[  443.528067][   T37] audit: type=1800 audit(1787048031.224:1957): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.545" name="manufacturer" dev="configfs" ino=22443 res=0 errno=0
[  443.528125][   T37] audit: type=1800 audit(1787048031.224:1958): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.545" name="serialnumber" dev="configfs" ino=22444 res=0 errno=0
[  443.836658][ T8331] 0x000000000007-0x000000020000 : ""
[  444.579482][   T59] Bluetooth: hci0: command tx timeout
[  446.334770][ T8357] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  447.135977][ T5593] Bluetooth: hci0: command tx timeout
[  448.013277][ T8331] ftl_cs: FTL header corrupt!
[  448.196818][ T5572] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  448.439079][ T5572] usb 7-1: Using ep0 maxpacket: 32
[  448.440008][ T5572] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  448.441566][ T5572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.441590][ T5572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.441617][ T5572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.693080][ T5572] usb 7-1: config 0 descriptor??
[  450.616083][ T8370] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd8": -EINTR
[  450.808351][ T5572] ft260 0003:0403:6030.000E: unknown main item tag 0x0
[  450.808387][ T5572] ft260 0003:0403:6030.000E: unknown main item tag 0x0
[  450.917734][ T5572] ft260 0003:0403:6030.000E: failed to retrieve chip version
[  450.959351][ T5572] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -71
[  451.138094][ T5572] usb 7-1: USB disconnect, device number 2
[  452.031576][ T5572] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  452.189565][ T5572] usb 7-1: Using ep0 maxpacket: 8
[  452.196477][ T5572] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  452.201331][ T5572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  452.201446][ T5572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.618665][ T5572] usb 7-1: config 0 descriptor??
[  453.301307][ T5572] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  454.905576][ T8402] netlink: 132 bytes leftover after parsing attributes in process `syz.8.551'.
[  455.168635][  T197] usb 7-1: USB disconnect, device number 3
[  456.137759][   T37] audit: type=1326 audit(1787048043.824:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8405 comm="syz.8.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  456.137824][   T37] audit: type=1326 audit(1787048043.824:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8405 comm="syz.8.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  457.100268][ T1982] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  457.102257][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.102396][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.102648][ T8280] bridge_slave_0: entered allmulticast mode
[  457.112977][ T8280] bridge_slave_0: entered promiscuous mode
[  457.231877][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.232018][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.232278][ T8280] bridge_slave_1: entered allmulticast mode
[  457.237466][ T8280] bridge_slave_1: entered promiscuous mode
[  457.331955][ T1982] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  457.516948][ T1982] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  457.521379][ T1982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.521591][ T1982] usb 9-1: Product: syz
[  457.521634][ T1982] usb 9-1: Manufacturer: syz
[  457.521812][ T1982] usb 9-1: SerialNumber: syz
[  457.662427][ T8280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.704850][ T8280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.736467][ T1982] usb 9-1: config 0 descriptor??
[  458.359405][ T8423] netlink: 20 bytes leftover after parsing attributes in process `syz.8.553'.
[  458.501590][ T8280] team0: Port device team_slave_0 added
[  458.559100][ T8280] team0: Port device team_slave_1 added
[  458.671804][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.556'.
[  458.792398][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.792418][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.792451][ T8280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.031759][ T8280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.031778][ T8280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.031811][ T8280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.069958][    T9] usb 9-1: USB disconnect, device number 5
[  460.639348][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  460.730901][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  460.813264][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  461.579126][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  462.551597][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  464.548207][ T8280] hsr_slave_0: entered promiscuous mode
[  464.567348][ T8280] hsr_slave_1: entered promiscuous mode
[  466.658927][ T5593] Bluetooth: hci1: command tx timeout
[  468.819138][ T5593] Bluetooth: hci1: command tx timeout
[  470.987818][ T5593] Bluetooth: hci1: command tx timeout
[  473.299466][ T5593] Bluetooth: hci1: command tx timeout
[  476.011990][ T5696] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  476.086331][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.566'.
[  476.160369][ T5696] usb 8-1: Using ep0 maxpacket: 16
[  476.162063][ T5696] usb 8-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  476.163709][ T5696] usb 8-1: config 251 has an invalid interface number: 16 but max is 0
[  476.163736][ T5696] usb 8-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  476.163757][ T5696] usb 8-1: config 251 has no interface number 0
[  476.166342][ T5696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.166374][ T5696] usb 8-1: Product: syz
[  476.166430][ T5696] usb 8-1: Manufacturer: syz
[  476.166442][ T5696] usb 8-1: SerialNumber: syz
[  476.553772][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.570130][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.090791][ T8359] usb 8-1: USB disconnect, device number 3
[  477.274987][ T8506] CIFS: Attempting to mount //127.0.0.1/share
[  481.669943][ T8506] CIFS: VFS: Error connecting to socket. Aborting operation.
[  481.672346][ T8506] CIFS: VFS: cifs_mount failed w/return code = -4
[  484.434008][ T8524] netlink: 132 bytes leftover after parsing attributes in process `syz.6.569'.
[  486.729014][   T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  486.829541][  T197] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  486.879105][   T31] usb 8-1: Using ep0 maxpacket: 16
[  486.880450][   T31] usb 8-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  486.881658][   T31] usb 8-1: config 251 has an invalid interface number: 16 but max is 0
[  486.881687][   T31] usb 8-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  486.881709][   T31] usb 8-1: config 251 has no interface number 0
[  486.889213][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.889242][   T31] usb 8-1: Product: syz
[  486.889259][   T31] usb 8-1: Manufacturer: syz
[  486.889275][   T31] usb 8-1: SerialNumber: syz
[  487.105321][  T197] usb 7-1: unable to get BOS descriptor or descriptor too short
[  487.105384][  T197] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  487.109961][  T197] usb 7-1: config 63 has an invalid interface number: 66 but max is 0
[  487.109992][  T197] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  487.110014][  T197] usb 7-1: config 63 has no interface number 0
[  487.110049][  T197] usb 7-1: config 63 interface 66 has no altsetting 0
[  487.113699][  T197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.113728][  T197] usb 7-1: Product: syz
[  487.113744][  T197] usb 7-1: Manufacturer: syz
[  487.113761][  T197] usb 7-1: SerialNumber: syz
[  487.176448][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.187723][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.386113][   T31] usb 8-1: USB disconnect, device number 4
[  488.136010][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.136655][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.190129][ T8545] netlink: Conntrack attr has 4 unknown bytes
[  488.190216][ T8545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.450134][  T197] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  488.450976][  T197] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  488.451505][  T197] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  488.452044][  T197] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  488.453800][  T197] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  488.454326][  T197] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  488.454406][  T197] uvcvideo 7-1:63.66: No streaming interface found for terminal 29.
[  488.454598][  T197] uvcvideo 7-1:63.66: Entity type for entity Output 32773 was not initialized!
[  488.549082][  T197] usb 7-1: USB disconnect, device number 4
[  489.062926][ T1017] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.261444][   T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  490.178913][   T31] usb 8-1: Using ep0 maxpacket: 16
[  490.180647][   T31] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  490.182774][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.182829][   T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  490.182925][   T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  490.182957][   T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  490.182984][   T31] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  490.186048][   T31] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  490.186075][   T31] usb 8-1: Manufacturer: syz
[  490.622760][   T31] usb 8-1: config 0 descriptor??
[  490.929453][ T8573] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd6": -EINTR
[  491.388911][   T31] rc_core: IR keymap rc-hauppauge not found
[  491.388934][   T31] Registered IR keymap rc-empty
[  491.393033][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.409265][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.430189][   T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  491.432722][   T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18
[  491.438430][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.449281][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.471333][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.489274][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.509440][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.529285][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.549602][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.569292][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.594805][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.609314][   T31] mceusb 8-1:0.0: Error: mce write urb status = -71
[  491.642353][   T31] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  491.642384][   T31] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  491.799053][ T8588] netlink: 68 bytes leftover after parsing attributes in process `syz.6.585'.
[  491.802819][   T31] usb 8-1: USB disconnect, device number 5
[  492.001127][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13
[  493.394834][ T6836] Bluetooth: hci6: command 0x0406 tx timeout
[  493.394875][ T6836] Bluetooth: hci8: command 0x0406 tx timeout
[  493.394898][ T6836] Bluetooth: hci9: command 0x0406 tx timeout
[  493.751080][ T1017] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.472283][   T36] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  494.619157][   T36] usb 7-1: Using ep0 maxpacket: 16
[  494.620138][   T36] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  494.622995][   T36] usb 7-1: config 251 has an invalid interface number: 16 but max is 0
[  494.623024][   T36] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  494.623046][   T36] usb 7-1: config 251 has no interface number 0
[  494.671218][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.671303][   T36] usb 7-1: Product: syz
[  494.671348][   T36] usb 7-1: Manufacturer: syz
[  494.671405][   T36] usb 7-1: SerialNumber: syz
[  495.989046][ T8621] netlink: 68 bytes leftover after parsing attributes in process `syz.8.595'.
[  496.075267][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.075873][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.103524][ T8343] usb 7-1: USB disconnect, device number 5
[  496.133219][ T1017] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.378289][   T37] audit: type=1326 audit(1787048085.054:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  497.378455][   T37] audit: type=1326 audit(1787048085.054:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  497.378507][   T37] audit: type=1326 audit(1787048085.054:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  497.378618][   T37] audit: type=1326 audit(1787048085.054:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  497.378848][   T37] audit: type=1326 audit(1787048085.054:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  497.378956][   T37] audit: type=1326 audit(1787048085.054:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.8.596" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80073e0d9 code=0x7fc00000
[  498.318344][ T1017] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.336706][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  498.431016][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  498.438185][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  498.455458][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  498.468575][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  498.743440][ T8646] netlink: 900 bytes leftover after parsing attributes in process `syz.6.599'.
[  498.852165][ T8650] netlink: 900 bytes leftover after parsing attributes in process `syz.6.599'.
[  498.888989][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  499.060492][    T9] usb 9-1: Using ep0 maxpacket: 8
[  499.066972][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  499.067033][    T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  499.100646][    T9] usb 9-1: config 4 interface 0 has no altsetting 0
[  499.117231][    T9] usb 9-1: string descriptor 0 read error: -22
[  499.117337][    T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  499.193324][    T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  499.346906][    T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  499.380765][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  499.380864][    T9] usb 9-1: media controller created
[  499.412310][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  499.525383][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.539975][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.747357][ T5593] Bluetooth: hci2: command tx timeout
[  501.555819][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[  501.565286][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[  501.990045][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  502.353587][    T9] usb 9-1: USB disconnect, device number 6
[  502.835483][ T5593] Bluetooth: hci2: command tx timeout
[  503.032027][ T5710] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  503.176973][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14
[  503.177722][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.178030][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.178389][ T8435] bridge_slave_0: entered allmulticast mode
[  503.259159][ T5710] usb 8-1: Using ep0 maxpacket: 8
[  503.260121][ T5710] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  503.261782][ T5710] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  503.261809][ T5710] usb 8-1: config 0 has no interface number 0
[  503.261867][ T5710] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  503.261892][ T5710] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  503.261920][ T5710] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  503.261948][ T5710] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  503.261993][ T5710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.317934][ T8435] bridge_slave_0: entered promiscuous mode
[  503.361229][ T5710] usb 8-1: config 0 descriptor??
[  503.610817][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.610948][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.611279][ T8435] bridge_slave_1: entered allmulticast mode
[  503.738905][ T8435] bridge_slave_1: entered promiscuous mode
[  503.760739][ T5710] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  503.822160][ T5710] usb 8-1: USB disconnect, device number 6
[  503.874722][ T5710] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  504.447085][   T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  504.463894][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.571523][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.608891][ T5717] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  504.636472][   T36] usb 7-1: unable to get BOS descriptor or descriptor too short
[  504.636534][   T36] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  504.638009][   T36] usb 7-1: config 63 has an invalid interface number: 66 but max is 0
[  504.638038][   T36] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  504.638060][   T36] usb 7-1: config 63 has no interface number 0
[  504.638095][   T36] usb 7-1: config 63 interface 66 has no altsetting 0
[  504.721984][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.722016][   T36] usb 7-1: Product: syz
[  504.722033][   T36] usb 7-1: Manufacturer: syz
[  504.722049][   T36] usb 7-1: SerialNumber: syz
[  504.768963][ T5717] usb 9-1: Using ep0 maxpacket: 8
[  504.774918][ T5717] usb 9-1: unable to get BOS descriptor or descriptor too short
[  504.774977][ T5717] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  504.777565][ T5717] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  504.777595][ T5717] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  504.794740][ T8708] netlink: 900 bytes leftover after parsing attributes in process `syz.7.610'.
[  504.835166][ T5717] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  504.835256][ T5717] usb 9-1: Manufacturer: syz
[  504.835275][ T5717] usb 9-1: SerialNumber: syz
[  504.899018][ T5593] Bluetooth: hci2: command tx timeout
[  504.906048][ T8710] netlink: 900 bytes leftover after parsing attributes in process `syz.7.610'.
[  504.966567][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.967246][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.021053][ T8704] netlink: Conntrack attr has 4 unknown bytes
[  505.021106][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.076039][   T36] uvcvideo 7-1:63.66: Found Unit with invalid ID 0
[  505.088360][   T36] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  505.088633][   T36] uvcvideo 7-1:63.66: No valid video chain found.
[  505.108097][   T36] usb 7-1: USB disconnect, device number 6
[  505.137705][ T8435] team0: Port device team_slave_0 added
[  505.142603][ T8497] udevd[8497]: setting mode of /dev/bus/usb/007/006 to 020664 failed: No such file or directory
[  505.142904][ T8497] udevd[8497]: setting owner of /dev/bus/usb/007/006 to uid=0, gid=0 failed: No such file or directory
[  505.203225][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.220398][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.979153][ T5593] Bluetooth: hci2: command tx timeout
[  512.468575][ T8435] team0: Port device team_slave_1 added
[  512.496251][  T197] usb 9-1: USB disconnect, device number 7
[  512.979062][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.615'.
[  513.039440][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.039460][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.039493][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.156187][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.156205][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.156230][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.559458][ T8435] hsr_slave_0: entered promiscuous mode
[  514.563445][ T8435] hsr_slave_1: entered promiscuous mode
[  514.564520][ T8435] debugfs: 'hsr0' already exists in 'hsr'
[  514.564548][ T8435] Cannot create hsr debugfs directory
[  514.665343][   T37] audit: type=1800 audit(1787048102.364:1967): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.617" name="idVendor" dev="configfs" ino=24117 res=0 errno=0
[  514.667401][   T37] audit: type=1800 audit(1787048102.364:1968): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.617" name="idProduct" dev="configfs" ino=24118 res=0 errno=0
[  514.668598][   T37] audit: type=1800 audit(1787048102.364:1969): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.617" name="serialnumber" dev="configfs" ino=24119 res=0 errno=0
[  514.686148][   T37] audit: type=1800 audit(1787048102.384:1970): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.617" name="manufacturer" dev="configfs" ino=23358 res=0 errno=0
[  514.690974][   T37] audit: type=1800 audit(1787048102.384:1971): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.617" name="product" dev="configfs" ino=23359 res=0 errno=0
[  514.893849][ T1017] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.614469][ T5717] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  517.021831][ T5717] usb 9-1: unable to get BOS descriptor or descriptor too short
[  517.021886][ T5717] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  517.024240][ T5717] usb 9-1: config 63 has an invalid interface number: 66 but max is 0
[  517.024267][ T5717] usb 9-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  517.024286][ T5717] usb 9-1: config 63 has no interface number 0
[  517.024315][ T5717] usb 9-1: config 63 interface 66 has no altsetting 0
[  517.027044][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.027068][ T5717] usb 9-1: Product: syz
[  517.027082][ T5717] usb 9-1: Manufacturer: syz
[  517.027095][ T5717] usb 9-1: SerialNumber: syz
[  517.058908][   T36] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  517.208930][   T36] usb 8-1: Using ep0 maxpacket: 32
[  517.211011][   T36] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  517.213037][   T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.213070][   T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.213170][   T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.277698][   T36] usb 8-1: config 0 descriptor??
[  517.348362][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.350022][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.395105][ T8737] netlink: Conntrack attr has 4 unknown bytes
[  517.395151][ T8737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.552800][ T5717] uvcvideo 9-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  517.552902][ T5717] uvcvideo 9-1:63.66: No valid video chain found.
[  517.556278][ T5717] usb 9-1: USB disconnect, device number 8
[  517.711054][   T36] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  517.711095][   T36] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[  517.884674][ T1017] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.921967][   T36] ft260 0003:0403:6030.000F: failed to retrieve chip version
[  517.922368][   T36] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -71
[  517.957045][   T36] usb 8-1: USB disconnect, device number 7
[  519.971936][ T8773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.891194][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.961611][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.966581][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.977631][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.987753][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  521.314183][ T1017] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.407168][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15
[  521.508913][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  521.678934][    T9] usb 9-1: Using ep0 maxpacket: 8
[  521.682229][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  521.682291][    T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  521.688039][    T9] usb 9-1: config 4 interface 0 has no altsetting 0
[  521.733116][    T9] usb 9-1: string descriptor 0 read error: -22
[  521.733218][    T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  521.782956][    T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  521.810148][    T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  521.810547][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  521.810600][    T9] usb 9-1: media controller created
[  521.886839][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  522.409897][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.410595][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.036497][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  523.144158][ T5593] Bluetooth: hci0: command tx timeout
[  525.296232][ T5593] Bluetooth: hci0: command tx timeout
[  525.312329][    T9] usb 9-1: USB disconnect, device number 9
[  526.816428][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  527.310517][ T5593] Bluetooth: hci0: command tx timeout
[  527.450628][ T1017] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.752856][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16
[  529.280971][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.281108][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.281364][ T8637] bridge_slave_0: entered allmulticast mode
[  529.314821][ T8637] bridge_slave_0: entered promiscuous mode
[  529.362491][ T8833] fuse: Bad value for 'fd'
[  529.380076][ T5593] Bluetooth: hci0: command tx timeout
[  529.657821][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.658075][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.658332][ T8637] bridge_slave_1: entered allmulticast mode
[  529.693051][ T8637] bridge_slave_1: entered promiscuous mode
[  530.103357][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.370843][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.444558][ T8840] misc userio: Invalid payload size
[  530.564081][ T8842] misc userio: The device must be registered before sending interrupts
[  530.814242][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.632'.
[  530.849512][ T1017] bridge_slave_1: left allmulticast mode
[  530.849550][ T1017] bridge_slave_1: left promiscuous mode
[  530.849857][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.099458][ T1017] bridge_slave_0: left allmulticast mode
[  531.099511][ T1017] bridge_slave_0: left promiscuous mode
[  531.099773][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.470457][ T1017] bridge_slave_1: left allmulticast mode
[  532.470493][ T1017] bridge_slave_1: left promiscuous mode
[  532.470701][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.642412][ T1017] bridge_slave_0: left allmulticast mode
[  532.642455][ T1017] bridge_slave_0: left promiscuous mode
[  532.642740][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.312886][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.661664][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.412761][ T1017] bond0 (unregistering): Released all slaves
[  535.939680][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.020646][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.041345][ T1017] bond0 (unregistering): Released all slaves
[  536.150915][ T8637] team0: Port device team_slave_0 added
[  536.552685][ T8637] team0: Port device team_slave_1 added
[  536.553229][ T8873] fuse: Bad value for 'fd'
[  536.785541][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.785559][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.785591][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.846711][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.846730][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.846764][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.966066][ T8637] hsr_slave_0: entered promiscuous mode
[  537.987139][ T8637] hsr_slave_1: entered promiscuous mode
[  538.000758][ T8637] debugfs: 'hsr0' already exists in 'hsr'
[  538.000787][ T8637] Cannot create hsr debugfs directory
[  540.460258][ T5696] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  540.621251][ T5696] usb 7-1: unable to get BOS descriptor or descriptor too short
[  540.621313][ T5696] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  540.622726][ T5696] usb 7-1: config 63 has an invalid interface number: 66 but max is 0
[  540.622755][ T5696] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  540.622778][ T5696] usb 7-1: config 63 has no interface number 0
[  540.622813][ T5696] usb 7-1: config 63 interface 66 has no altsetting 0
[  540.625243][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.625270][ T5696] usb 7-1: Product: syz
[  540.625288][ T5696] usb 7-1: Manufacturer: syz
[  540.625304][ T5696] usb 7-1: SerialNumber: syz
[  540.913500][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.952031][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.291221][ T8908] netlink: Conntrack attr has 4 unknown bytes
[  541.291258][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.422145][ T5696] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  541.422709][ T5696] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  541.425953][ T5696] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  541.426703][ T5696] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  541.428599][ T5696] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  541.439351][ T5696] uvcvideo 7-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  541.439579][ T5696] uvcvideo 7-1:63.66: No streaming interface found for terminal 29.
[  541.439642][ T5696] uvcvideo 7-1:63.66: Entity type for entity Output 32773 was not initialized!
[  541.525999][ T5696] usb 7-1: USB disconnect, device number 7
[  543.295135][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17
[  545.013030][ T8937] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  545.837905][ T8959] openvswitch: netlink: Flow actions attr not present in new flow.
[  545.916179][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.916363][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.916616][ T8777] bridge_slave_0: entered allmulticast mode
[  545.971374][ T8777] bridge_slave_0: entered promiscuous mode
[  546.136467][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.136618][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.136881][ T8777] bridge_slave_1: entered allmulticast mode
[  546.150518][ T8777] bridge_slave_1: entered promiscuous mode
[  546.316540][ T8969] batman_adv: batadv0: Adding interface: veth0
[  546.316562][ T8969] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.316601][ T8969] batman_adv: batadv0: Interface activated: veth0
[  546.480378][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.480408][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.532362][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.532587][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.574540][ T8972] batman_adv: batadv0: Interface deactivated: veth0
[  546.574572][ T8972] batman_adv: batadv0: Removing interface: veth0
[  547.320324][ T5245] 8021q: adding VLAN 0 to HW filter on device eth18
[  547.485408][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.669144][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.128899][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  548.326947][    T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  548.328389][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.328437][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.375468][    T9] usb 7-1: config 0 descriptor??
[  548.409339][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  548.694413][ T8637] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  548.811253][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  548.814531][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  548.816040][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  548.845406][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  548.848294][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  549.016206][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.072635][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  549.073260][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  549.073824][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  549.074350][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  549.074856][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  549.075389][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  549.077290][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  549.077915][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  549.082896][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  549.084226][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  549.368093][ T8637] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  549.571383][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.575457][ T8777] team0: Port device team_slave_0 added
[  549.618638][ T8637] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  549.723004][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.727262][ T8777] team0: Port device team_slave_1 added
[  550.023666][    T9] pwc: Registered as video103.
[  550.136638][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21
[  550.167643][ T8637] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  550.195696][    T9] usb 7-1: USB disconnect, device number 8
[  550.232416][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  550.512239][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.584617][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.584632][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.584654][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.676385][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.676403][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.676437][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.867727][ T9046] syzkaller0: entered promiscuous mode
[  550.867749][ T9046] syzkaller0: entered allmulticast mode
[  551.120483][ T1017] hsr_slave_0: left promiscuous mode
[  551.163538][ T1017] hsr_slave_1: left promiscuous mode
[  551.164679][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.164707][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.244446][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.244493][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.439110][ T1017] hsr_slave_0: left promiscuous mode
[  551.493462][ T1017] hsr_slave_1: left promiscuous mode
[  551.494802][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.494822][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.513972][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.514066][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.529013][ T8343] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  551.663695][ T1017] veth1_macvtap: left promiscuous mode
[  551.663773][ T1017] veth0_macvtap: left promiscuous mode
[  551.695432][ T1017] veth1_vlan: left promiscuous mode
[  551.695576][ T1017] veth0_vlan: left promiscuous mode
[  551.718940][ T8343] usb 9-1: Using ep0 maxpacket: 16
[  551.719816][ T8343] usb 9-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  551.722023][ T8343] usb 9-1: config 251 has an invalid interface number: 16 but max is 0
[  551.722049][ T8343] usb 9-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  551.722072][ T8343] usb 9-1: config 251 has no interface number 0
[  551.725876][ T8343] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.725903][ T8343] usb 9-1: Product: syz
[  551.725920][ T8343] usb 9-1: Manufacturer: syz
[  551.725936][ T8343] usb 9-1: SerialNumber: syz
[  551.949228][ T1017] veth1_macvtap: left promiscuous mode
[  551.949343][ T1017] veth0_macvtap: left promiscuous mode
[  551.949625][ T1017] veth1_vlan: left promiscuous mode
[  551.949822][ T1017] veth0_vlan: left promiscuous mode
[  552.018224][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.026323][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.299490][ T9069] Set syz1 is full, maxelem 1029 reached
[  553.226667][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  553.279707][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  553.439562][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.686'.
[  554.118905][ T8343] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  554.212915][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  554.276702][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  554.288904][ T8343] usb 7-1: Using ep0 maxpacket: 32
[  554.289891][ T8343] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  554.297836][ T8343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.297895][ T8343] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  554.297942][ T8343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.366646][ T8509] usb 9-1: USB disconnect, device number 10
[  554.396426][ T8343] usb 7-1: config 0 descriptor??
[  554.421174][ T8343] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  554.850787][ T9047] tipc: Started in network mode
[  554.850821][ T9047] tipc: Node identity 22676cf8ac49, cluster identity 4711
[  554.850995][ T9047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.889343][ T9042] tipc: Resetting bearer <eth:syzkaller0>
[  555.022600][ T9042] tipc: Disabling bearer <eth:syzkaller0>
[  555.544084][ T8777] hsr_slave_0: entered promiscuous mode
[  555.547010][ T8777] hsr_slave_1: entered promiscuous mode
[  555.547846][ T8777] debugfs: 'hsr0' already exists in 'hsr'
[  555.547867][ T8777] Cannot create hsr debugfs directory
[  555.823002][ T9086] Set syz1 is full, maxelem 1029 reached
[  555.948434][ T9092] netlink: zone id is out of range
[  555.948452][ T9092] netlink: zone id is out of range
[  555.948462][ T9092] netlink: zone id is out of range
[  555.948471][ T9092] netlink: zone id is out of range
[  555.948480][ T9092] netlink: set zone limit has 8 unknown bytes
[  556.301990][ T9095] Set syz1 is full, maxelem 1029 reached
[  556.518505][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.695'.
[  557.069239][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  557.128324][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  557.171765][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  557.190241][    T9] usb 7-1: USB disconnect, device number 9
[  557.277159][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  557.297047][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  559.080304][ T5245] 8021q: adding VLAN 0 to HW filter on device eth19
[  559.084024][ T9128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.188956][  T197] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  559.338142][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.7.704'.
[  559.345336][  T197] usb 9-1: Using ep0 maxpacket: 16
[  559.358100][  T197] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  559.404299][  T197] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  559.404462][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  559.404497][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  559.404521][  T197] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  559.404548][  T197] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  559.406293][  T197] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  559.406320][  T197] usb 9-1: Manufacturer: syz
[  559.458916][   T59] Bluetooth: hci1: command tx timeout
[  559.483536][  T197] usb 9-1: config 0 descriptor??
[  559.548131][ T9139] syzkaller0: entered promiscuous mode
[  559.548161][ T9139] syzkaller0: entered allmulticast mode
[  559.600073][ T9126] tipc: Resetting bearer <eth:syzkaller0>
[  559.782404][ T9126] tipc: Disabling bearer <eth:syzkaller0>
[  559.818962][  T197] rc_core: IR keymap rc-hauppauge not found
[  559.818985][  T197] Registered IR keymap rc-empty
[  559.819152][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.849054][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.871126][  T197] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  559.874623][  T197] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22
[  559.915809][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.929051][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.949239][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.969855][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  559.989001][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.022476][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.049049][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.068964][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.105198][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.130357][  T197] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  560.189061][  T197] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  560.189474][  T197] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  560.236259][  T197] usb 9-1: USB disconnect, device number 11
[  560.708886][ T8343] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  560.849710][ T9165] Set syz1 is full, maxelem 1029 reached
[  560.879016][ T8343] usb 7-1: Using ep0 maxpacket: 32
[  560.879874][ T8343] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  560.881205][ T8343] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.881261][ T8343] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  560.881308][ T8343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.941805][ T8343] usb 7-1: config 0 descriptor??
[  560.968648][ T8343] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  561.499680][ T9176] Set syz1 is full, maxelem 1029 reached
[  561.539178][   T59] Bluetooth: hci1: command tx timeout
[  562.623234][ T9210] tipc: Started in network mode
[  562.623271][ T9210] tipc: Node identity 9ea10246db24, cluster identity 4711
[  562.623459][ T9210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.665689][ T5245] 8021q: adding VLAN 0 to HW filter on device eth20
[  562.728346][ T9197] syzkaller0: entered promiscuous mode
[  562.728376][ T9197] syzkaller0: entered allmulticast mode
[  562.986189][ T9191] tipc: Resetting bearer <eth:syzkaller0>
[  562.995160][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[  562.995233][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[  563.131492][ T9191] tipc: Disabling bearer <eth:syzkaller0>
[  563.216372][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.7.717'.
[  563.319615][ T9217] 8021q: adding VLAN 0 to HW filter on device bond1
[  563.322463][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.324822][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.365629][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.365799][ T9218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.366957][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.367152][ T9218] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.407727][ T9218] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  563.466588][ T5868] usb 7-1: USB disconnect, device number 10
[  563.620647][   T59] Bluetooth: hci1: command tx timeout
[  563.706276][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.718'.
[  564.227371][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.363942][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.854184][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.725'.
[  565.202498][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.308952][  T197] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  565.330442][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.469063][  T197] usb 9-1: Using ep0 maxpacket: 32
[  565.473685][  T197] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  565.477564][  T197] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.477624][  T197] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  565.477658][  T197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.531937][  T197] usb 9-1: config 0 descriptor??
[  565.567696][  T197] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  565.698916][   T59] Bluetooth: hci1: command tx timeout
[  566.013288][ T9251] syzkaller0: entered promiscuous mode
[  566.013308][ T9251] syzkaller0: entered allmulticast mode
[  566.035218][ T9249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  566.273477][ T9247] tipc: Resetting bearer <eth:syzkaller0>
[  566.431624][ T9247] tipc: Disabling bearer <eth:syzkaller0>
[  566.969743][  T197] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  567.106721][ T8777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  567.131189][  T197] usb 7-1: Using ep0 maxpacket: 16
[  567.146947][  T197] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  567.149957][  T197] usb 7-1: config 251 has an invalid interface number: 16 but max is 0
[  567.150237][  T197] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  567.150299][  T197] usb 7-1: config 251 has no interface number 0
[  567.193766][  T197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.193808][  T197] usb 7-1: Product: syz
[  567.193824][  T197] usb 7-1: Manufacturer: syz
[  567.193840][  T197] usb 7-1: SerialNumber: syz
[  567.307986][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  567.362398][ T8777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  567.397232][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  567.425166][ T8777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  567.456040][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  567.479209][ T8777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  567.515490][ T8777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  567.595637][ T9109] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.595834][ T9109] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.596001][ T9109] bridge_slave_0: entered allmulticast mode
[  567.598134][ T9109] bridge_slave_0: entered promiscuous mode
[  567.671191][ T9109] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.671322][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.672025][ T9109] bridge_slave_1: entered allmulticast mode
[  567.674378][ T9109] bridge_slave_1: entered promiscuous mode
[  567.877886][ T9109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.912912][ T9109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.126559][ T9109] team0: Port device team_slave_0 added
[  568.129222][ T5868] usb 9-1: USB disconnect, device number 12
[  568.372797][ T9109] team0: Port device team_slave_1 added
[  568.742941][ T9294] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  568.748352][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.748367][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.748390][ T9109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.836138][ T9109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.836157][ T9109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.836188][ T9109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.026674][ T9301] Set syz1 is full, maxelem 1029 reached
[  569.089238][ T1017] bridge_slave_1: left allmulticast mode
[  569.089278][ T1017] bridge_slave_1: left promiscuous mode
[  569.089551][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.200212][ T1017] bridge_slave_0: left allmulticast mode
[  569.200240][ T1017] bridge_slave_0: left promiscuous mode
[  569.200483][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.409093][ T1017] bridge_slave_1: left allmulticast mode
[  569.409122][ T1017] bridge_slave_1: left promiscuous mode
[  569.409365][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.520336][ T1017] bridge_slave_0: left allmulticast mode
[  569.520365][ T1017] bridge_slave_0: left promiscuous mode
[  569.520548][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.729151][ T1017] bridge_slave_1: left allmulticast mode
[  569.729188][ T1017] bridge_slave_1: left promiscuous mode
[  569.729455][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.738408][ T5868] usb 7-1: USB disconnect, device number 11
[  569.912399][ T1017] bridge_slave_0: left allmulticast mode
[  569.912438][ T1017] bridge_slave_0: left promiscuous mode
[  569.912688][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.154945][ T9315] netlink: zone id is out of range
[  570.154962][ T9315] netlink: zone id is out of range
[  570.154971][ T9315] netlink: zone id is out of range
[  570.154980][ T9315] netlink: zone id is out of range
[  570.154988][ T9315] netlink: set zone limit has 8 unknown bytes
[  570.590107][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.674827][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.731437][ T1017] bond0 (unregistering): Released all slaves
[  571.141333][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.249609][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.319063][ T1017] bond0 (unregistering): Released all slaves
[  571.329133][ T5572] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  571.498964][ T5572] usb 9-1: Using ep0 maxpacket: 32
[  571.499709][ T5572] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  571.501096][ T5572] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.501149][ T5572] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  571.501195][ T5572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.505695][ T5572] usb 9-1: config 0 descriptor??
[  571.548956][ T5572] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  571.759565][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.839554][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.903313][ T1017] bond0 (unregistering): Released all slaves
[  572.340060][ T9109] hsr_slave_0: entered promiscuous mode
[  572.342800][ T9109] hsr_slave_1: entered promiscuous mode
[  572.345301][ T9109] debugfs: 'hsr0' already exists in 'hsr'
[  572.345329][ T9109] Cannot create hsr debugfs directory
[  572.992214][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.526839][ T8777] 8021q: adding VLAN 0 to HW filter on device team0
[  573.650304][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.650442][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.718248][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.718385][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.155273][  T197] usb 9-1: USB disconnect, device number 13
[  575.723778][ T1017] hsr_slave_0: left promiscuous mode
[  575.762097][ T1017] hsr_slave_1: left promiscuous mode
[  575.763319][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.817931][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.929330][ T1017] hsr_slave_0: left promiscuous mode
[  575.983832][ T1017] hsr_slave_1: left promiscuous mode
[  575.986018][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.109115][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.300621][ T1017] hsr_slave_0: left promiscuous mode
[  576.342465][ T1017] hsr_slave_1: left promiscuous mode
[  576.343597][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  576.390894][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.139855][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  577.220158][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  577.979617][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  578.050785][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  578.749555][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  578.793647][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  579.443514][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.6.758'.
[  579.475559][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.8.760'.
[  579.808147][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  579.942105][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  579.953148][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  579.970313][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  579.987141][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  580.116045][ T9359] 8021q: adding VLAN 0 to HW filter on device bond1
[  580.550341][ T9376] netlink: zone id is out of range
[  580.550358][ T9376] netlink: zone id is out of range
[  580.550368][ T9376] netlink: zone id is out of range
[  580.550377][ T9376] netlink: zone id is out of range
[  580.550386][ T9376] netlink: set zone limit has 8 unknown bytes
[  580.613720][ T9376] Set syz1 is full, maxelem 1029 reached
[  580.788239][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.7.764'.
[  581.458897][   T59] Bluetooth: hci1: command tx timeout
[  581.988549][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.769'.
[  582.144758][   T59] Bluetooth: hci2: command tx timeout
[  582.500495][  T197] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  582.638907][  T197] usb 8-1: device descriptor read/64, error -71
[  582.892426][  T197] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  583.060244][  T197] usb 8-1: device descriptor read/64, error -71
[  583.179401][  T197] usb usb8-port1: attempt power cycle
[  583.612606][  T197] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  583.686706][  T197] usb 8-1: device descriptor read/8, error -71
[  583.918859][  T197] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  583.951255][  T197] usb 8-1: device descriptor read/8, error -71
[  584.111836][  T197] usb usb8-port1: unable to enumerate USB device
[  584.179670][   T59] Bluetooth: hci2: command tx timeout
[  584.526612][ T9389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  584.680659][ T9109] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  584.744694][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  584.794963][ T9109] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  584.862489][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  585.024260][ T9109] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  585.148369][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  585.151604][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.151751][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.151960][ T9362] bridge_slave_0: entered allmulticast mode
[  585.166213][ T9362] bridge_slave_0: entered promiscuous mode
[  585.192958][ T9109] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  585.381116][ T9109] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  585.495111][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.495349][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.495592][ T9362] bridge_slave_1: entered allmulticast mode
[  585.508676][ T9362] bridge_slave_1: entered promiscuous mode
[  585.963942][ T9362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.996002][ T9362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.220482][ T9485] Set syz1 is full, maxelem 1029 reached
[  586.259002][   T59] Bluetooth: hci2: command tx timeout
[  586.311042][ T9362] team0: Port device team_slave_0 added
[  586.358039][ T9362] team0: Port device team_slave_1 added
[  586.522077][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.522108][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.522141][ T9362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.600944][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.600963][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.600996][ T9362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.723630][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.785'.
[  587.014819][ T9491] 8021q: adding VLAN 0 to HW filter on device bond2
[  587.200457][ T5572] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  587.359131][ T5572] usb 9-1: Using ep0 maxpacket: 16
[  587.360081][ T5572] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  587.361850][ T5572] usb 9-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  587.361909][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  587.361942][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  587.361968][ T5572] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  587.361994][ T5572] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  587.363759][ T5572] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  587.363788][ T5572] usb 9-1: Manufacturer: syz
[  587.464065][ T5572] usb 9-1: config 0 descriptor??
[  587.881308][ T5572] rc_core: IR keymap rc-hauppauge not found
[  587.881332][ T5572] Registered IR keymap rc-empty
[  587.881496][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  587.900631][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  587.923748][ T5572] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  587.947140][ T5572] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input23
[  588.028125][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.038989][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.059251][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.079124][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.100306][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.127968][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.139034][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.158946][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.181040][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.200686][ T5572] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  588.236909][ T5572] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  588.236937][ T5572] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  588.319730][ T5572] usb 9-1: USB disconnect, device number 14
[  588.338907][   T59] Bluetooth: hci2: command tx timeout
[  588.826349][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.790'.
[  588.826382][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.790'.
[  589.241593][ T9362] hsr_slave_0: entered promiscuous mode
[  589.244837][ T9362] hsr_slave_1: entered promiscuous mode
[  589.986296][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'.
[  590.418888][   T59] Bluetooth: hci2: command tx timeout
[  591.095466][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.803'.
[  591.923612][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.8.804'.
[  600.564922][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.745196][ T9109] 8021q: adding VLAN 0 to HW filter on device team0
[  600.855500][ T1525] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.855748][ T1525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.015111][ T1525] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.015245][ T1525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.223059][ T5572] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  601.368912][ T5572] usb 9-1: Using ep0 maxpacket: 32
[  601.369889][ T5572] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  601.371458][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.371492][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.371535][ T5572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.444872][ T5572] usb 9-1: config 0 descriptor??
[  601.857735][ T5572] usbhid 9-1:0.0: can't add hid device: -32
[  601.857871][ T5572] usbhid 9-1:0.0: probe with driver usbhid failed with error -32
[  601.914699][ T5572] usb 9-1: USB disconnect, device number 15
[  602.685063][ T9682] netlink: zone id is out of range
[  602.842575][ T1017] bridge_slave_1: left allmulticast mode
[  602.842612][ T1017] bridge_slave_1: left promiscuous mode
[  602.842879][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.115407][ T1017] bridge_slave_0: left allmulticast mode
[  603.115446][ T1017] bridge_slave_0: left promiscuous mode
[  603.115740][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.552225][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.820'.
[  604.570525][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.629660][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.672673][ T1017] bond0 (unregistering): Released all slaves
[  605.348898][   T31] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  605.428869][  T197] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  605.502284][   T31] usb 9-1: Using ep0 maxpacket: 32
[  605.502961][   T31] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  605.504225][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.504258][   T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.504287][   T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.558330][   T31] usb 9-1: config 0 descriptor??
[  605.588871][  T197] usb 8-1: Using ep0 maxpacket: 16
[  605.589781][  T197] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  605.592657][  T197] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.592712][  T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  605.592744][  T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  605.592773][  T197] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  605.592800][  T197] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  605.596176][ T1017] hsr_slave_0: left promiscuous mode
[  605.596861][  T197] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  605.596887][  T197] usb 8-1: Manufacturer: syz
[  605.698179][  T197] usb 8-1: config 0 descriptor??
[  605.804566][ T1017] hsr_slave_1: left promiscuous mode
[  605.815945][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.922770][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.071663][  T197] rc_core: IR keymap rc-hauppauge not found
[  606.071688][  T197] Registered IR keymap rc-empty
[  606.072151][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.097162][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.147015][  T197] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  606.186963][  T197] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input24
[  606.205420][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.209926][   T31] usbhid 9-1:0.0: can't add hid device: -32
[  606.210118][   T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -32
[  606.236267][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.251695][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.273332][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.291073][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.297272][   T31] usb 9-1: USB disconnect, device number 16
[  606.319281][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.349239][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.370189][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.399258][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.423471][  T197] mceusb 8-1:0.0: Error: mce write urb status = -71
[  606.477868][  T197] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  606.477897][  T197] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  606.590070][  T197] usb 8-1: USB disconnect, device number 12
[  607.642622][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  607.719856][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  608.622819][ T9781] syz.6.834 uses obsolete (PF_INET,SOCK_PACKET)
[  609.383218][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'.
[  609.529007][ T9797] netlink: 'syz.6.836': attribute type 12 has an invalid length.
[  609.738865][ T5572] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  609.891083][ T5572] usb 9-1: Using ep0 maxpacket: 16
[  609.892265][ T5572] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  609.893985][ T5572] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  609.894111][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  609.894145][ T5572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  609.894175][ T5572] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  609.894201][ T5572] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  609.895973][ T5572] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  609.895999][ T5572] usb 9-1: Manufacturer: syz
[  610.002012][ T5572] usb 9-1: config 0 descriptor??
[  610.398875][ T5572] rc_core: IR keymap rc-hauppauge not found
[  610.398897][ T5572] Registered IR keymap rc-empty
[  610.399368][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.434969][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.450969][ T5572] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  610.454227][ T5572] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input25
[  610.506190][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.525653][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.539342][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.561735][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.579259][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.599357][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.619036][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.639114][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.662212][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.679252][ T5572] mceusb 9-1:0.0: Error: mce write urb status = -71
[  610.721438][ T5572] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  610.721472][ T5572] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  610.769154][ T5572] usb 9-1: USB disconnect, device number 17
[  611.088853][ T8343] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  611.241180][ T8343] usb 7-1: Using ep0 maxpacket: 16
[  611.242021][ T8343] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  611.243518][ T8343] usb 7-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  611.243575][ T8343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  611.243608][ T8343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  611.243633][ T8343] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  611.243660][ T8343] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  611.245149][ T8343] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  611.245176][ T8343] usb 7-1: Manufacturer: syz
[  611.345222][ T8343] usb 7-1: config 0 descriptor??
[  611.728858][ T8343] rc_core: IR keymap rc-hauppauge not found
[  611.728879][ T8343] Registered IR keymap rc-empty
[  611.729118][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.749931][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.824526][ T9842] netlink: zone id is out of range
[  611.850000][ T8343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  611.872635][ T8343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26
[  611.894629][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.924200][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.942469][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.959044][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  611.987163][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.005321][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.023420][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.050839][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.071431][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.170403][ T8343] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  612.203459][ T8343] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  612.203488][ T8343] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  612.251512][ T8343] usb 7-1: USB disconnect, device number 12
[  612.298639][ T9109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.797313][ T9109] veth0_vlan: entered promiscuous mode
[  613.016821][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.848'.
[  613.091908][ T9863] netlink: 'syz.6.848': attribute type 12 has an invalid length.
[  613.093052][ T9109] veth1_vlan: entered promiscuous mode
[  614.152665][ T9362] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  614.207963][ T9362] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  614.219567][ T9109] veth0_macvtap: entered promiscuous mode
[  614.225997][ T9362] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  614.384625][ T9362] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  614.411105][ T9362] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  614.455009][ T9362] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  614.457444][ T9109] veth1_macvtap: entered promiscuous mode
[  614.493793][ T9362] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  614.821784][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.857'.
[  615.152896][ T9362] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  615.293390][ T9912] netlink: 'syz.6.857': attribute type 12 has an invalid length.
[  615.850290][  T197] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  615.857705][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.028158][ T9109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.040448][  T197] usb 9-1: Using ep0 maxpacket: 16
[  616.041394][  T197] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  616.056342][  T197] usb 9-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[  616.056510][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  616.056586][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  616.056659][  T197] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  616.056769][  T197] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  616.127269][  T197] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  616.127299][  T197] usb 9-1: Manufacturer: syz
[  616.160297][  T197] usb 9-1: config 0 descriptor??
[  616.596758][  T197] rc_core: IR keymap rc-hauppauge not found
[  616.596778][  T197] Registered IR keymap rc-empty
[  616.603618][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.626311][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.662408][  T197] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  616.687399][  T197] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input27
[  616.720842][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.744072][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.759657][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.779352][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.799589][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.829715][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.855445][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.879486][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.906645][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  616.928622][  T197] mceusb 9-1:0.0: Error: mce write urb status = -71
[  617.032390][  T197] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  617.032421][  T197] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  617.229384][   T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.237890][  T197] usb 9-1: USB disconnect, device number 18
[  617.325976][   T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.326463][   T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.502869][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  617.572009][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  617.575044][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  617.579271][   T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.602754][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  617.606413][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.865'.
[  617.644261][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  618.118352][ T9362] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.418199][ T9362] 8021q: adding VLAN 0 to HW filter on device team0
[  618.594025][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.594255][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.784295][ T3277] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.784428][ T3277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.980052][ T9982] syzkaller0: entered promiscuous mode
[  618.980082][ T9982] syzkaller0: entered allmulticast mode
[  619.183877][ T9996] netlink: 40 bytes leftover after parsing attributes in process `syz.8.873'.
[  619.284347][ T9996] Set syz1 is full, maxelem 1029 reached
[  619.779013][   T59] Bluetooth: hci0: command tx timeout
[  619.828923][ T8222] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  619.978949][ T8222] usb 7-1: Using ep0 maxpacket: 16
[  619.979798][ T8222] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  619.981298][ T8222] usb 7-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[  619.981353][ T8222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  619.981384][ T8222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  619.981413][ T8222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  619.981440][ T8222] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  619.982931][ T8222] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  619.982957][ T8222] usb 7-1: Manufacturer: syz
[  620.089479][ T8222] usb 7-1: config 0 descriptor??
[  620.206345][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.877'.
[  620.429312][ T8222] rc_core: IR keymap rc-hauppauge not found
[  620.429334][ T8222] Registered IR keymap rc-empty
[  620.429758][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.449321][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.507792][ T8222] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  620.538554][ T8222] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input28
[  620.594884][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.615275][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.631603][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.659864][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.683034][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.699314][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.723469][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.736807][ T8478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.742803][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.775156][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.791936][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  620.832564][ T8222] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  620.832593][ T8222] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  620.912591][ T8222] usb 7-1: USB disconnect, device number 13
[  621.877505][   T59] Bluetooth: hci0: command tx timeout
[  622.027853][ T8478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.500047][T10032] Set syz1 is full, maxelem 1029 reached
[  622.928979][ T8222] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  623.019845][ T8478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.079943][ T8222] usb 7-1: Using ep0 maxpacket: 16
[  623.135106][ T8222] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  623.136497][ T8222] usb 7-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[  623.136552][ T8222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  623.136584][ T8222] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  623.136605][ T8222] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  623.136623][ T8222] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.179908][ T8222] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  623.180014][ T8222] usb 7-1: Manufacturer: syz
[  623.237709][ T8222] usb 7-1: config 0 descriptor??
[  623.698852][ T8222] rc_core: IR keymap rc-hauppauge not found
[  623.698876][ T8222] Registered IR keymap rc-empty
[  623.699429][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.719991][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.750300][ T8222] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  623.753062][ T8222] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29
[  623.757815][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.793940][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.849233][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.873234][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.889322][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.909167][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.929224][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.938894][   T59] Bluetooth: hci0: command tx timeout
[  623.949886][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.966713][ T8478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.979938][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  623.999284][ T8222] mceusb 7-1:0.0: Error: mce write urb status = -71
[  624.023324][ T8222] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  624.024566][ T8222] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  624.075874][ T8222] usb 7-1: USB disconnect, device number 14
[  624.422625][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[  624.422700][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[  626.020878][   T59] Bluetooth: hci0: command tx timeout
[  626.375599][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.375732][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.375949][ T9959] bridge_slave_0: entered allmulticast mode
[  626.378968][ T9959] bridge_slave_0: entered promiscuous mode
[  626.401094][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.401440][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.402070][ T9959] bridge_slave_1: entered allmulticast mode
[  626.415679][ T9959] bridge_slave_1: entered promiscuous mode
[  626.465084][ T9362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.653205][ T8478] bridge_slave_1: left allmulticast mode
[  626.653233][ T8478] bridge_slave_1: left promiscuous mode
[  626.653429][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.807229][ T8478] bridge_slave_0: left allmulticast mode
[  626.807263][ T8478] bridge_slave_0: left promiscuous mode
[  626.827918][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.544319][T10080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  627.968424][ T8478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  628.051410][ T8478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  628.098853][   T59] Bluetooth: hci0: command tx timeout
[  628.137221][ T8478] bond0 (unregistering): Released all slaves
[  628.245371][ T5245] 8021q: adding VLAN 0 to HW filter on device eth21
[  628.420224][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.447993][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.644454][ T9959] team0: Port device team_slave_0 added
[  628.666623][ T9959] team0: Port device team_slave_1 added
[  628.919000][ T8478] hsr_slave_0: left promiscuous mode
[  628.958898][ T8478] hsr_slave_1: left promiscuous mode
[  628.959775][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.959794][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.030468][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.030498][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.437173][ T8478] veth1_macvtap: left promiscuous mode
[  629.437278][ T8478] veth0_macvtap: left promiscuous mode
[  629.437641][ T8478] veth1_vlan: left promiscuous mode
[  629.437829][ T8478] veth0_vlan: left promiscuous mode
[  630.250123][ T8478] team0 (unregistering): Port device team_slave_1 removed
[  630.289573][ T8478] team0 (unregistering): Port device team_slave_0 removed
[  630.635249][ T5245] 8021q: adding VLAN 0 to HW filter on device eth22
[  630.637527][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  630.637553][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.637575][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  630.692458][T10128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  630.796116][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  630.796136][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  630.796169][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.187158][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.908'.
[  631.736049][ T9959] hsr_slave_0: entered promiscuous mode
[  631.737348][ T9959] hsr_slave_1: entered promiscuous mode
[  631.738340][ T9959] debugfs: 'hsr0' already exists in 'hsr'
[  631.738380][ T9959] Cannot create hsr debugfs directory
[  631.864960][ T9362] veth0_vlan: entered promiscuous mode
[  632.365073][ T9362] veth1_vlan: entered promiscuous mode
[  632.980082][ T9362] veth0_macvtap: entered promiscuous mode
[  633.032620][ T5245] 8021q: adding VLAN 0 to HW filter on device eth23
[  633.050409][ T9362] veth1_macvtap: entered promiscuous mode
[  633.168142][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.306282][ T9362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.420428][   T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.089173][ T1525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.089682][ T1525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.090111][ T1525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  635.751113][ T5245] 8021q: adding VLAN 0 to HW filter on device eth24
[  635.968178][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.968204][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.375348][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.375371][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.892592][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'.
[  639.408853][ T8359] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  639.610478][ T8359] usb 7-1: Using ep0 maxpacket: 32
[  639.615546][ T8359] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  639.629714][ T8359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.629751][ T8359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.629794][ T8359] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.686177][ T8359] usb 7-1: config 0 descriptor??
[  640.131426][ T8359] usbhid 7-1:0.0: can't add hid device: -71
[  640.131582][ T8359] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  640.243216][ T8359] usb 7-1: USB disconnect, device number 15
[  640.870200][ T9959] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  641.292790][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  641.345135][ T9959] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  641.657304][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  641.668465][ T9959] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  641.842739][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  641.846415][ T9959] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  641.981774][ T9959] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  642.164591][T10405] netlink: 'syz.7.960': attribute type 12 has an invalid length.
[  642.175270][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.960'.
[  642.426509][T10416] netlink: zone id is out of range
[  642.426526][T10416] netlink: zone id is out of range
[  642.426537][T10416] netlink: zone id is out of range
[  642.426546][T10416] netlink: zone id is out of range
[  642.426556][T10416] netlink: set zone limit has 8 unknown bytes
[  642.671964][T10416] Set syz1 is full, maxelem 1029 reached
[  642.882813][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0
[  642.975249][ T9959] 8021q: adding VLAN 0 to HW filter on device team0
[  643.054420][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.056253][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.171877][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.173232][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.002078][T10461] netlink: 'syz.8.971': attribute type 12 has an invalid length.
[  644.024796][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.971'.
[  645.868870][  T197] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  646.025890][T10504] bond1: option tlb_dynamic_lb: invalid value (128)
[  646.037946][  T197] usb 8-1: Using ep0 maxpacket: 32
[  646.045330][  T197] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  646.062342][  T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.062379][  T197] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.062422][  T197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.120846][  T197] usb 8-1: config 0 descriptor??
[  646.181580][T10504] bond1 (unregistering): Released all slaves
[  646.552012][  T197] usbhid 8-1:0.0: can't add hid device: -71
[  646.552141][  T197] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  646.603846][  T197] usb 8-1: USB disconnect, device number 13
[  646.659050][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  646.794490][ T9959] veth0_vlan: entered promiscuous mode
[  646.812811][ T9959] veth1_vlan: entered promiscuous mode
[  646.969977][ T9959] veth0_macvtap: entered promiscuous mode
[  647.091029][ T9959] veth1_macvtap: entered promiscuous mode
[  647.267270][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.425343][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.453389][T10536] C: renamed from veth1_to_team (while UP)
[  647.860594][T10536] netlink: 'syz.7.990': attribute type 4 has an invalid length.
[  647.860620][T10536] netlink: 116 bytes leftover after parsing attributes in process `syz.7.990'.
[  647.861291][T10536] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  647.979887][ T1525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.980283][ T1525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.306785][T10552] netlink: 'syz.6.995': attribute type 16 has an invalid length.
[  648.306804][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'.
[  648.815621][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9
[  648.840933][ T1050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.878566][ T8479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.214707][ T1525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.214730][ T1525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.814502][T10566] bond1: option tlb_dynamic_lb: invalid value (128)
[  649.843291][T10566] bond1 (unregistering): Released all slaves
[  649.960699][T10570] netlink: 'syz.1.1000': attribute type 1 has an invalid length.
[  649.996066][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.996090][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.597048][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1010'.
[  651.788865][   T37] audit: type=1326 audit(1787048239.104:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.0.535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf0dce0d9 code=0x7fc00000
[  651.788927][   T37] audit: type=1326 audit(1787048239.104:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.0.535" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9cf0dce0d9 code=0x7fc00000
[  654.055524][T10608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  654.407456][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'.
[  654.460062][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1020'.
[  654.829090][ T8509] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  654.984769][ T8509] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  654.986244][ T8509] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.010020][ T8509] usb 9-1: config 0 descriptor??
[  655.018297][ T8509] gspca_main: cpia1-2.14.0 probing 0813:0001
[  655.480769][ T8509] gspca_cpia1: usb_control_msg 03, error -32
[  655.510482][T10645] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[  655.510596][T10645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  655.519873][T10645] vhci_hcd vhci_hcd.0: Device attached
[  655.560915][ T8509] cpia1 9-1:0.0: unexpected state after lo power cmd: 17
[  655.758891][ T8359] usb 49-1: new low-speed USB device number 3 using vhci_hcd
[  655.896020][ T8509] gspca_cpia1: usb_control_msg 01, error -71
[  655.896044][ T8509] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[  655.896073][T10647] vhci_hcd: connection reset by peer
[  655.923933][ T8509] usb 9-1: USB disconnect, device number 19
[  655.930234][   T43] vhci_hcd vhci_hcd.8: stop threads
[  655.930262][   T43] vhci_hcd vhci_hcd.8: release socket
[  655.930342][   T43] vhci_hcd vhci_hcd.8: disconnect device
[  660.776916][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10
[  660.778631][T10640] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  660.893375][ T8359] vhci_hcd vhci_hcd.8: vhci_device speed not set
[  661.446264][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1030'.
[  662.621312][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'.
[  662.938998][T10711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'.
[  664.291740][T10710] netlink: 'syz.6.1041': attribute type 10 has an invalid length.
[  664.770489][ T8359] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  664.918951][ T8359] usb 8-1: Using ep0 maxpacket: 16
[  664.927184][ T8359] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  664.955399][ T8359] usb 8-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config
[  664.955461][ T8359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  664.955493][ T8359] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  664.955518][ T8359] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  664.955544][ T8359] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  664.958538][ T8359] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  664.958566][ T8359] usb 8-1: Manufacturer: syz
[  665.041596][ T8359] usb 8-1: config 0 descriptor??
[  665.092072][  T197] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  665.279563][  T197] usb 9-1: Using ep0 maxpacket: 32
[  665.281576][  T197] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  665.285568][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  665.285603][  T197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  665.285645][  T197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.360838][  T197] usb 9-1: config 0 descriptor??
[  665.658828][ T8359] rc_core: IR keymap rc-hauppauge not found
[  665.658847][ T8359] Registered IR keymap rc-empty
[  665.658989][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.678912][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.706140][ T8359] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  665.734901][ T8359] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input30
[  665.794294][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.809007][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.829124][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.849259][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.870087][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.889102][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.908853][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.912127][  T197] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  665.912165][  T197] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  665.931397][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.958974][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  665.978938][ T8359] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  666.003974][  T197] ft260 0003:0403:6030.0010: failed to retrieve chip version
[  666.004296][  T197] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -5
[  666.057339][ T8359] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  666.057366][ T8359] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  666.115449][ T8359] usb 8-1: USB disconnect, device number 14
[  667.818735][  T197] usb 9-1: USB disconnect, device number 20
[  668.467250][T10836] netlink: 'syz.7.1074': attribute type 10 has an invalid length.
[  668.559024][T10836] team0: Device vxcan0 is of different type
[  669.158926][ T8509] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  669.309368][ T8509] usb 2-1: Using ep0 maxpacket: 16
[  669.313863][ T8509] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  669.316917][ T8509] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  669.317065][ T8509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  669.317098][ T8509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  669.317128][ T8509] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  669.318171][ T8509] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  669.362930][ T8509] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  669.362960][ T8509] usb 2-1: Manufacturer: syz
[  669.421771][ T8509] usb 2-1: config 0 descriptor??
[  669.558654][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1081'.
[  669.758958][ T8509] rc_core: IR keymap rc-hauppauge not found
[  669.758981][ T8509] Registered IR keymap rc-empty
[  669.759446][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.787703][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.800957][ T8509] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  669.828173][ T8509] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31
[  669.851958][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.876145][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.889443][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.909672][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.929423][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.949234][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.969418][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  669.989552][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  670.009769][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  670.032580][ T8509] mceusb 2-1:0.0: Error: mce write urb status = -71
[  670.057133][ T8509] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  670.057169][ T8509] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  670.143309][ T8343] usb 2-1: USB disconnect, device number 19
[  672.059414][T10900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.061433][T10881] syzkaller0: entered promiscuous mode
[  672.061459][T10881] syzkaller0: entered allmulticast mode
[  672.063524][T10873] netlink: 'syz.0.1083': attribute type 10 has an invalid length.
[  672.327587][T10904] tipc: Resetting bearer <eth:syzkaller0>
[  672.358390][T10914] netlink: 'syz.7.1088': attribute type 1 has an invalid length.
[  672.379639][T10880] tipc: Resetting bearer <eth:syzkaller0>
[  672.526659][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1091'.
[  672.550561][T10880] tipc: Disabling bearer <eth:syzkaller0>
[  672.617923][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1092'.
[  673.401535][T10937] 0x000000000007-0x000000020000 : ""
[  674.204616][T10937] ftl_cs: FTL header corrupt!
[  674.225123][T10944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32
[  676.516559][T10974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33
[  677.086932][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'.
[  677.087102][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'.
[  685.430247][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1103'.
[  685.871600][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[  685.871675][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[  685.933176][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1107'.
[  685.966487][T11019] netlink: 'syz.6.1107': attribute type 10 has an invalid length.
[  686.029687][T11027] openvswitch: netlink: Flow actions attr not present in new flow.
[  686.058859][T11013] netlink: 'syz.6.1107': attribute type 1 has an invalid length.
[  686.060321][   T59] Bluetooth: hci0: link tx timeout
[  686.075088][   T59] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  686.286662][T11019] team0: Device vxcan0 is of different type
[  686.391042][T11012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  686.409684][T11028] tipc: Resetting bearer <eth:syzkaller0>
[  686.597812][T11010] tipc: Disabling bearer <eth:syzkaller0>
[  686.696952][T11043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.697653][T11043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.036931][T11046] bond1: option tlb_dynamic_lb: invalid value (128)
[  687.133996][T11046] bond1 (unregistering): Released all slaves
[  687.324483][T11052] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  687.380057][T11063] netlink: 'syz.6.1120': attribute type 1 has an invalid length.
[  687.382595][T11063] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1120'.
[  687.401508][T11063] netlink: 'syz.6.1120': attribute type 10 has an invalid length.
[  687.441157][T11063] team0: Device vxcan0 is of different type
[  687.710809][T11072] openvswitch: netlink: Flow actions attr not present in new flow.
[  687.824103][   T59] Bluetooth: hci0: link tx timeout
[  687.824127][   T59] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  688.126674][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1126'.
[  688.191612][   T59] Bluetooth: hci0: command 0x0406 tx timeout
[  688.193432][T11089] 8021q: adding VLAN 0 to HW filter on device bond2
[  688.321185][T11044] netlink: 'syz.7.1113': attribute type 10 has an invalid length.
[  688.369465][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  688.369490][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  688.756215][T11097] syzkaller0: entered promiscuous mode
[  688.756245][T11097] syzkaller0: entered allmulticast mode
[  688.832257][T11097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  689.014842][T11105] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1129'.
[  689.048524][T11100] tipc: Resetting bearer <eth:syzkaller0>
[  689.190014][T11095] tipc: Resetting bearer <eth:syzkaller0>
[  689.443404][T11095] tipc: Disabling bearer <eth:syzkaller0>
[  689.638122][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  689.807847][    T9] usb 2-1: Using ep0 maxpacket: 16
[  689.813587][    T9] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  689.815110][    T9] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  689.818069][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.818098][    T9] usb 2-1: Product: syz
[  689.818115][    T9] usb 2-1: Manufacturer: syz
[  689.818131][    T9] usb 2-1: SerialNumber: syz
[  690.025580][T11129] openvswitch: netlink: Flow actions attr not present in new flow.
[  690.108065][ T8359] usb 2-1: USB disconnect, device number 20
[  690.384273][T11133] 8021q: adding VLAN 0 to HW filter on device bond1
[  690.508345][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1139'.
[  691.355683][T11166] syzkaller0: entered promiscuous mode
[  691.355713][T11166] syzkaller0: entered allmulticast mode
[  691.388510][T11166] tipc: Started in network mode
[  691.388548][T11166] tipc: Node identity 42db056dc9d2, cluster identity 4711
[  691.452644][T11166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  691.541996][T11166] tipc: Resetting bearer <eth:syzkaller0>
[  691.624308][T11164] tipc: Resetting bearer <eth:syzkaller0>
[  691.854817][T11164] tipc: Disabling bearer <eth:syzkaller0>
[  691.898890][ T5868] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  692.015880][T11178] openvswitch: netlink: Flow actions attr not present in new flow.
[  692.060587][ T5868] usb 9-1: Using ep0 maxpacket: 16
[  692.064578][ T5868] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  692.073460][ T5868] usb 9-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config
[  692.073660][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  692.073749][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  692.073823][ T5868] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  692.073887][ T5868] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  692.120125][ T5868] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  692.120205][ T5868] usb 9-1: Manufacturer: syz
[  692.316025][ T5868] usb 9-1: config 0 descriptor??
[  692.714291][ T5868] rc_core: IR keymap rc-hauppauge not found
[  692.714310][ T5868] Registered IR keymap rc-empty
[  692.714727][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.741677][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.761864][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  692.814339][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input34
[  692.876264][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.892257][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.909189][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.941118][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.963727][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.979260][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  692.999204][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  693.019173][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  693.042808][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  693.048893][ T8509] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  693.064538][ T5868] mceusb 9-1:0.0: Error: mce write urb status = -71
[  693.102939][ T5868] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  693.102968][ T5868] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  693.278804][ T8509] usb 8-1: Using ep0 maxpacket: 16
[  693.279774][ T8509] usb 8-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63
[  693.281311][ T8509] usb 8-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  693.286632][ T8509] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.286661][ T8509] usb 8-1: Product: syz
[  693.286678][ T8509] usb 8-1: Manufacturer: syz
[  693.286695][ T8509] usb 8-1: SerialNumber: syz
[  693.316862][ T5868] usb 9-1: USB disconnect, device number 21
[  693.699947][ T8509]  1024-page vmalloc region starting at 0xffffc9000fc12000 allocated at kcov_ioctl+0x58/0x650
[  693.700053][ T8509] list_add corruption. next->prev should be prev (ffffffff8e221000), but was ffffffff00080000. (next=ffffc9000fc12000).
[  693.700693][ T8509] ------------[ cut here ]------------
[  693.700701][ T8509] kernel BUG at lib/list_debug.c:31!
[  693.700753][ T8509] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  693.700787][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: kworker/1:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  693.700813][ T8509] Tainted: [L]=SOFTLOCKUP
[  693.700819][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  693.700831][ T8509] Workqueue: usb_hub_wq hub_event
[  693.700854][ T8509] RIP: 0010:__list_add_valid_or_report+0xf4/0x130
[  693.700875][ T8509] Code: 6b 40 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 03 cb 60 fd 48 8b 53 08 48 c7 c7 60 73 ca 8b 4c 89 f6 48 89 d9 e8 fd cd 58 fc 90 <0f> 0b 4c 89 f7 e8 f2 6a 40 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 d3
[  693.700891][ T8509] RSP: 0018:ffffc9000552f790 EFLAGS: 00010246
[  693.700906][ T8509] RAX: 0000000000000075 RBX: ffffc9000fc12000 RCX: 8416211a2cf1bd00
[  693.700920][ T8509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  693.700931][ T8509] RBP: 1ffff92001f82401 R08: 0000000000000000 R09: 0000000000000000
[  693.700943][ T8509] R10: dffffc0000000000 R11: ffffed10170e4903 R12: ffffc9000fc12008
[  693.700963][ T8509] R13: dffffc0000000000 R14: ffffffff8e221000 R15: ffffc9001cc2b000
[  693.700977][ T8509] FS:  0000000000000000(0000) GS:ffff888125d38000(0000) knlGS:0000000000000000
[  693.700993][ T8509] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  693.701005][ T8509] CR2: 00007f6d82af19f8 CR3: 000000003806a000 CR4: 00000000003526f0
[  693.701025][ T8509] Call Trace:
[  693.701032][ T8509]  <TASK>
[  693.701041][ T8509]  kcov_remote_stop+0x457/0x680
[  693.701072][ T8509]  hub_event+0x4789/0x4cf0
[  693.701113][ T8509]  ? __pfx_hub_event+0x10/0x10
[  693.701132][ T8509]  ? process_scheduled_works+0xa20/0x14e0
[  693.701156][ T8509]  ? rcu_is_watching+0x15/0xb0
[  693.701178][ T8509]  ? process_scheduled_works+0xa20/0x14e0
[  693.701197][ T8509]  process_scheduled_works+0xa8e/0x14e0
[  693.701229][ T8509]  ? __pfx_process_scheduled_works+0x10/0x10
[  693.701252][ T8509]  ? assign_work+0x3cf/0x5d0
[  693.701272][ T8509]  worker_thread+0xa47/0xfb0
[  693.701298][ T8509]  ? __kthread_parkme+0x71/0x1f0
[  693.701324][ T8509]  kthread+0x388/0x470
[  693.701349][ T8509]  ? __pfx_worker_thread+0x10/0x10
[  693.701369][ T8509]  ? __pfx_kthread+0x10/0x10
[  693.701394][ T8509]  ret_from_fork+0x514/0xb70
[  693.701423][ T8509]  ? __pfx_ret_from_fork+0x10/0x10
[  693.701449][ T8509]  ? __switch_to+0xc89/0x1420
[  693.701474][ T8509]  ? __pfx_kthread+0x10/0x10
[  693.701499][ T8509]  ret_from_fork_asm+0x1a/0x30
[  693.701534][ T8509]  </TASK>
[  693.701544][ T8509] Modules linked in:
[  693.701560][ T8509] ---[ end trace 0000000000000000 ]---
[  693.701569][ T8509] RIP: 0010:__list_add_valid_or_report+0xf4/0x130
[  693.701588][ T8509] Code: 6b 40 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 03 cb 60 fd 48 8b 53 08 48 c7 c7 60 73 ca 8b 4c 89 f6 48 89 d9 e8 fd cd 58 fc 90 <0f> 0b 4c 89 f7 e8 f2 6a 40 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 d3
[  693.701602][ T8509] RSP: 0018:ffffc9000552f790 EFLAGS: 00010246
[  693.701617][ T8509] RAX: 0000000000000075 RBX: ffffc9000fc12000 RCX: 8416211a2cf1bd00
[  693.701630][ T8509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  693.701641][ T8509] RBP: 1ffff92001f82401 R08: 0000000000000000 R09: 0000000000000000
[  693.701652][ T8509] R10: dffffc0000000000 R11: ffffed10170e4903 R12: ffffc9000fc12008
[  693.701665][ T8509] R13: dffffc0000000000 R14: ffffffff8e221000 R15: ffffc9001cc2b000
[  693.701679][ T8509] FS:  0000000000000000(0000) GS:ffff888125d38000(0000) knlGS:0000000000000000
[  693.701694][ T8509] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  693.701706][ T8509] CR2: 00007f6d82af19f8 CR3: 000000003806a000 CR4: 00000000003526f0
[  693.701728][ T8509] Kernel panic - not syncing: Fatal exception
[  693.702326][ T8509] Kernel Offset: disabled