last executing test programs:

4.498155956s ago: executing program 2 (id=1540):
mkdir(&(0x7f0000000140)='./file0\x00', 0x1e)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884)
mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000280)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000000))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x20200000001000d4, 0x0})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
write$sysctl(r10, &(0x7f0000000300)='1\x00', 0x2)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="4ac3b27e7ce50000008000000000ea3b34007300", @ANYRES16, @ANYBLOB="010025bd7000000000000100000007000800e000000108000700ffffffff0500010000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0)
write$sysctl(r10, &(0x7f0000000380)='2\x00', 0x2)

2.732831483s ago: executing program 2 (id=1549):
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240))
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = timerfd_create(0x1, 0x800)
timerfd_gettime(r2, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000080601753a19000000000000000000091300020073797a32000000000900020073796a32000000000900020073797a3200000000"], 0x38}}, 0x4000000)
setns(0xc9, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}], {0x14}}, 0x90}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000023c0)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002400)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)

1.964152286s ago: executing program 3 (id=1558):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r5, 0x1}}, 0x18)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000740)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000007c0)="0503e5fdd3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000800)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x40800, 0x3)
connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffa, @empty}, 0x10)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x9}, 0x2)

1.897765289s ago: executing program 0 (id=1559):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x41}]})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = open(0x0, 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x13)
fcntl$setlease(r1, 0x400, 0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000300)='./file0\x00', 0x30)
close_range(r0, 0xffffffffffffffff, 0x0)

1.896811641s ago: executing program 1 (id=1560):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4)
listen(r0, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000001c0)=""/129}, &(0x7f0000000280)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0})
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_names\x00')
pread64(r3, &(0x7f0000000300)=""/24, 0x18, 0x80002)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xa4, 0x7fff0003}]})
close_range(r6, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa24bd0a4e696908004582003c0068000007069078ac1e0101ac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)

1.790253479s ago: executing program 1 (id=1561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000400000007"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000240), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x8, 0x1, 0x67, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x27, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @loopback, @multicast2, @local, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}]}, @lsrr={0x83, 0x7, 0xfd, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x19}]}}, "217b355ff14074b7"}}}}}, 0x0)

1.789860813s ago: executing program 1 (id=1562):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000001c0), 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
socket(0x1d, 0x2, 0x6)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa010}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x1, 0x84)
r9 = getpid()
sched_setscheduler(r9, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x1f, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

1.73953464s ago: executing program 3 (id=1563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0xf5ff, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)

1.685895117s ago: executing program 3 (id=1564):
r0 = openat$dsp(0xffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000001c0)=0x88f)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@updpolicy={0xf8, 0x19, 0x100, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x6e6bb2, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x4d6, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000900)=ANY=[@ANYBLOB="3c1204"], 0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000940)={<r3=>0x0, 0x1c, &(0x7f0000000980)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f00000009c0)=0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40804)
prctl$PR_GET_TSC(0x19, &(0x7f0000000040))
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008000000000000000000854f7425b0a252f6f4b88d2a77dc54c3210a40957ec41bcbc1246bed9c91bf0aba2dd4a046bca2a2c141d71e7c7e2b8cc255c45387177a2249e733746857f1075125d0c3243946aa75a68333a8530697541e16152cb6402b570e59053ec4da0a05bb8f5fb94704ec7f1064bb7e55dd2279522680ca9286d24de5d67c7fb266223e060ae85d70171ee92138a7fb9af803deb6be293eb65024a8f71e68b7acb13e97cba71c65a6cacec52fab85fa2bfa6d7a794645be23c50ec6c506b7aae8cb463efbd4c36f9f0ce06206eb", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="3d92081ac554fe208040ac691015d4219a66f6989dce863e8765941c29a68c352f4e37bf77a122248cfc00000000b6ab9a33216167a9f8590f039f452b39694b19d38610aef60a309b8caf56c297d9c6e55fdb22828429524f2c0a75cb3c6f042dc7e98089690953080e", @ANYBLOB='\x00'/28], 0x50)
r5 = syz_open_dev$usbfs(&(0x7f0000000640), 0x75, 0x10bf01)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000680)=0x1)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b04"], 0x40}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'virt_wifi0\x00', 0x200})
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0)
read$msr(r11, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r11, 0xc040564b, &(0x7f0000000100)={0x2, 0x0, 0x3011, 0x1, 0x8, {0x5, 0xc26}})
socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000003c0)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r8, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58200000fdff00000000", @ANYRES32=0x0, @ANYBLOB="100a00000000020014000300697036746e6c30000000000000000000240012800b000100697036746e6c00001400028008000700c0b000000800080029000000"], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x4000084)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYRES8=r10, @ANYRESOCT=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.662280994s ago: executing program 1 (id=1565):
r0 = socket$l2tp(0x2, 0x2, 0x73)
accept4(r0, 0x0, &(0x7f0000000080), 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x7, 0x7, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000680)={[{0x2b, 'net_cls'}]}, 0x9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000802)
lgetxattr(0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x2000005, r6}, 0x38)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
openat$cgroup_netprio_ifpriomap(r7, &(0x7f00000006c0), 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={r7, 0x20, &(0x7f0000001b40)={&(0x7f00000004c0)=""/101, 0x65, <r8=>0x0, &(0x7f0000000b40)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r8, 0xfffffffffffffdb7)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0xfe, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, r7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x4ff5, r9}, 0x38)
syz_emit_ethernet(0x80, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a2c6cb1cff986dd60156909004a2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80000000000"], 0x0)

1.589623123s ago: executing program 1 (id=1566):
unshare(0x8040480)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@increfs]})
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005a40)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000027c0)="d9723dd8bdf496628eb4fa88029dcce9d2d60dd81d4ba6ed0549883a27753301a08186527729fc9f9c86aa27dab6cadab213ced0693591eee03beef3d998c21b8a65c16f7f65d525587948fa6d1adab21c8324722a832652ec829ebd689358771bf19cedf5b090da57158af1cb47a5205a2cc283c8932715ba904b7a8a7cb6b20b5f1907cc6b92eec21fb8fb6eab267b038f9f0eec1cf8ba805efcee965050a9bcfc89fec67beea0e0ba4ba19b619b8a5e3a513fb65e6bca4cb7195b7672e2b027c6a3480a326abd4a791c3c59cdea3fe8ac869bb0af7123791d12bcfcc391", 0xdf}, {&(0x7f00000028c0)="9bd488add8e6b7be628cb9a00a0c040b6585c063766cea748144", 0x1a}, {&(0x7f0000002900)="34eafb98895c40f1c8085bc3ae178ff8720b4fbd89bffe6db4b4db1fb5cc27bf91c30423895e5a5cedf17a1bd279cda565977a5e90b7c709a2965e83a0caec31685189cc5a39ccee80f2dbc8c8abaf5356382c64be566a8d3fd5bfaef5e73dfa607f4580c6a4217016dd5ece9bb761cc0c12a0b91a0eac57ff7ef1ab99ba13c6425a64aeafbc4999519c0a623c5a38f9dea4dc32ecce3c435025629e184c4b94598bc5c6eab4f84b5e49122d819582e370b489", 0xb3}, {&(0x7f00000029c0)="4d60744cbe35a5b395f870ad8f899c4c600027e9ff6bd465d4dea6e90ba89056d2dd", 0x22}], 0x4}, {0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002a40)="4065408332b4", 0x6}], 0x1, &(0x7f0000002ac0)=[@iv={0x104, 0x117, 0x2, 0xf4, "5dc356d9a2486e2f973e82b73c33b339455dd451c9967b4ebf682f64ffd12b292cc9e9588708ff1baafbdcee2a1b97c650402117446eaac9fd41a5941a8fe89305d8cc991cb0bb94d7df7c296a5497925a9205526331e366131a2710b1d3111bc1370cd2fa1790b10327ace6e4d303a0d4e28e2dc8750422b3eccd1cf4cf48b093b326cc378d1e9e114b0e75606699f611eb636c8d99f231440b4cf3862919854f85ee7856293418e44e377a8c8bfd3cd41c538444654cb251a4619cca6e5d0c3326feb0dcb037f06ddb4a38e1e8cf9614eefaff6250767134b328b78ad7af00ed58b6539c6f1352307476bab8347af6511b87ea"}, @iv={0x24, 0x117, 0x2, 0x12, "75fce9c19f2a077a2c603e804e96e0742c9f"}, @iv={0x78, 0x117, 0x2, 0x66, "c62062aa45ad6d13d52b4634ab85df637187d44f9be1e8328b1bd632ad2b327c1c192ca19b0f7a111e2a500a4d14b826674757f0943a7f0ac3cb0a5b786f641fb12d4ce55797b0c6b4b7854441b0c633e8cde15133649f095dc8b6a3ca898611843217a90975"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @assoc={0x10, 0x117, 0x4, 0xee97}], 0x11e0, 0x800}, {0x0, 0x0, &(0x7f0000003cc0), 0x0, 0x0, 0x0, 0x40844}, {0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000003d00)="db62e89e7aa61a1223ce4604f0e4ba56ad0b47b4652c24c2fdb832153a4c59d5d28988b03a89a0e84df1f63bf6bd184d2e397e252f5250e3d1c4fee815c1fdf1f21a625324523341f2f31f9837b5deafbff6a51d805fe9d416c07d9856e3c6e8575572acd05ad550d176cc9bba8244a4cc384deda3b869307bac5ae963abeb3a9cd8b6e63d3201a9c9550706d1c6d1e522ca6eccaf7c2a2f2ddd34e112a5", 0x9e}, {&(0x7f0000003dc0)="eb80fcf88337ad4c8df611a8a1e0d2e5887a4c364dfdc6aa78545804e19a35cdf1c7d932729c53525e7932e54c9e60ca6874153ceb48c2d1c88a21270d73997422f06970d44201cbba266bdb4364", 0x4e}, {&(0x7f0000003e40)="f5356f5d61c44a00360b6e79e6229cddd8f11f72fe2ad56a7aed3cda47a6ba2671a6e296a3f83f0c9ea5bf3ad4c76f434b4c6a3459d3675e0a8c0c10cecb0eb85a32fb94d04b2cccd4fc58610a01111d49b1e70121a8053e1512990bac79f3f0f6414217915da2af746578c7610c28eb00df7bc98235c7f15bc6a189709c1b65e436a14d791993252e04f132bc3c53d28413ccaa7a45d16a0731ed151e6c3c1d32aa25bce84a8496dbb120", 0xab}, {&(0x7f0000003f00)="974991ca0aa559f503916b4680afaf7673aadf8d21f7b1dfc50fd35b6fc867c12d9fd523abe4615703292c663a1e9244f89ce36f3936d4ede298690900105723fc1cbdab144d3e8f5ba4559857ec99015a5b9af09ecb5c8b7285187254bae787e788e543f543337a3d3742fd50fb8b1eba9618bc0f8bd75f7320a91d8987b99b3537f828dd2ba1d62ad64d8c391cd40f377cb1a77c1b35144a1b88cbec3e02c88c2cb6259c877b0c18db57ddab453fbeeb92d1c1a9c895023f41779aa7a2a988dbdc8f71e75d2ab52ce9b36549331e0f186fa0660ca08c7fedfa079513fb5f4225a3151fbf4236c60a8a6024c10a7feb75d1f7b4651d8d4c09d0531df2eb0611869f7057fc58fddb3da32f1267fe0b21c13d671129f4796fb68129c229469806cbe556afe8f748835592ab8ddeb36d33fa7a8d78dc1414dd035d128f1125582f1dae8220a23adf9d42ea9f3bcfd2f579ee6be96d273e7c6b6d9086683d85afe8eddb579273d678a8186896c013358ccd0f61d51c91f20addf2928f46deea305910816f4b2fabdf29bdec528f6a28e78403a94c351326ee729fb4f77599adb6483228e5227cbe1d00ce7086640e50a6a57482622582fd4cc60d4fe7c6579168db9bc484f033a8f36b6dba2eb375ee4864ae4c8271078a5569c1ca8f739f1dfa8d5263bc0a9a6674f3def78614a6e2c76dfb80d511b4908e6292df87b986cb0b9108bf83dfb587c6938b1ee2ec289f64fa027de0b26f8db6a08ab109a8dac90b330dc21ce3daac2941611147ca4b99e2b36bb01bf8fd6110dca884969cbf9bf0c0057f8d5a225659e6480a8f00a42f91944d5058a7dd8b8464341e9bbf97329d8dc37f35f412813480fcd8d60618edfb2392cc68798a25b63eb7ebc405897bf7b96ce4858000f34a0d061ef8ca64712e28f5f3f1a8810398c1c227f6539fc14ce4a0c055618251b54a17f54d4f6133af10a4cc1984edd8499085e7e2db1ef5d88e2e5ac65769b5778afd4f4c37c1e2b02372b480937c0a08668c17d7b83b2f897e9ba7745f9da8617f400f57c88f732d3209040b3926d07abe0f66c27353a8aa539ab2a572992f9da63deabd32fec68af624d9802da84b8a05d402b8898ed12740d691eec80f9a43e28a3e1652dbf8d824a3ad292983672b163b68a65bc6aadc085781cfdb3a33281b6709a958a73f866691fd33f377b0a362b69b2782ecab411834bda75500da66c108643103bea2545fca2a905fe88cf0ea01259aff4db0f4c708e97c5070d2a80cd06278a3b9f6aef134fa5d619415d04d6a19ad09efbda04bd7771494e261a0dbac6263c625953b3a4f8a2d7d9ffebc22da9d5d8bd5111c9cecfb5f8d5a668062f91ca7f610abc3e7f00377574a73936a1c8d952a21f23cc0a5e1ffaf3f5b34c653dea642e122b38d28e8dc88858c1b00343885f07546bc5f5aee2687f743d0492f95cad1c3f94d1fd5fdd82770e5f6aaf525b014c467a225baa8cab3d59bb7f7bf03b62d78d735d68c5903f652650404ad19b1b670d6862a885fb8c48ff75a090ec27c4c3d8d18d7882c92836bc995bbfaeec23024b2d08f2515dde97a3d432e8099874f2150a64495147016e3b77bf072110c0ccccad66121e70d6b0b11ce51fc49f0e69930645f7724e179b281af519067ff383eaab6b470c15480b8eefc1858f91a52398152ed9b301ff11f67c6d5fa4722fbf8c223ffb9857e40fed47eb9fbb0a47578d134ae685574eab211a5374ebe22307107652fcc7684774b94809a881457fa9c501b31b4968a81b2d81df7ee493146032d07544d7d495fd93bd632f58287e6242457602c7373145f41d356301171e8c79c887c799b5541dde770f3f9425c72f7748a14d93b3c47bede02430e97bcf15d0156d17e01b9a09fb4e5441404e141299e08902e9399de940ab66970d035cff4e8e0b3892e9f2bb3086fd3a5b820c1f7aea9f468a6428534044318303923162149907dd684dc80b12699052e8964e804a5ef790f4a1091d2372809baa2a4b7917538bbe147ff1cacda9c165b3abfa777c51048b2a4b5cb315b50b2b37f7c06fe7b9986ab438620cc8628ce392b4be09d4c22ed294ae466cdefbe80de95b0f1266c983c98e5a6e5bc5a1d769ac761db2620f9992a29d7198d1ce2ebb3361d46b73d9cf3a9c92b6de353b4c959510f57dc3f6756de7bfbe95d965eb0d0530d5df840c0435c8c00cd7ae0a4cd72d80881948a837980f1f39fb471528c808f6c7e6533342ff6d9eb7ba2f3a45522b5d99d14108f7eb95b893f2cbbb51a7c99f45787e6fe627f551b90226454e5ff3aa2f9c94207b6b162560f11a9b265f856cde52899d3649d335a1821ecfb031ce6679bee561f1dd6d97a2fe5b52b461ee03fd4be8bcf77d9c70ea0892d4136cc36efe144aa4cc1e873ca6be5419597041d6be35a4754365d908d2f087589d14c3bcf9d56a5bf2e9a1c5a69d748779be0453717ab74ae43d537b5f0789b41bac9cf7c49228bcc10617a5e58666babaddd9affa086ddd5695b7eaa900789353ae5ce8957c7092b3823c8bb4bd4a928ae117b4c081aff3e21db5cbcf9bddc505a6174c9862e2cef2998d176b2de2018f28b94087a89f9ba50ef04683f34350bdaa0d88a09cf8165e9c6805b9d54c0eb929f54fcddcb1b64dcfc03ba637b02eeab9c0480197cde472ad6f2697bd2f5bb85f77023699551bf815106a333f7819daca755c8c459b3aeada0d97a19f624300a9ad9d8c49d44279d1e90791ae4caf9404a00216972c61bfe0b72a5a3aa3f97b1070205e4ca255dd6ef879f7e7355143b5025df6291033cbcdca016c2334b8dba0a6f51f0e7e72295b2779d0b90714da625442e3cbc9aedbd8ee6c98828a0a5fb5d6e860dbf5b47ad5761960b32038206e89c4176659725870d1049dbeb583ce9ba61d488d2618fd67ca9e987d1fc7862da5c5cea553ced686bc0c389e97c5c2eef1166f0f3c769870f3eb7330dfb96b2b9ec702f9a8292e47ac71ef65b1620bf11be1f41466b740eb2f1ee3ef1088a44e3aeabd81d33714358f7ec18fad9b3beffaa61785a3d21a3b7d6c0e45b76c32e5d00f2b7f419cb3f7245a658a5490d1d3c14d32ef88ee2a4878b551d0c9a7952c07476ecd42cc2e1f8a8cfa6d59ae476d93f58a84f70289a532703c708ff2597ecaafbcf27d2dc0f394697b12726bb0d911d0a08fc6568d9f036b937ae2f4eaaa1720a3f470605f96e2da782c1bcb86c866419ecc78c12c7859d8652b56ad771314d50cbb70b1c2f2122cc7c4dc89b862453809bbeb9cd83179a3f52507529882489fe2b2d918f2af3d613c1d0499859a71174085e0380c2a021b13b242a3726fe6c5b887bc0d7ca016e971d9fb9a9734db88cf70d70ebed622457257f9051058d9b15e74b71a498d76d3dc2e81ab69bc030b7c5d85c544d9f14f1aaf44a331432c8308fa44967ba752e899e0473694ec2667a7bb0ae6aba44db84da8db024aef6c61da2af5d77a825e228a9def72d18a6bc5241073909bfe4b30b4aa9c345817a5959d487969bff8cbda2d6bdc3841d070f139121e6532d15dc7a8e32c5d362625ae263bbaa1308b36b4faf5bde3ae9837936a7846fa42489e8478b4dbbfc036da8ce8cb2e38b1d3a2a4031924d1cdf7437311af115e20cb7c1a13fd26203ebab04b6129ffa76aa232d5d739ede3034f8767ae612502642a290e2a3321eefbd9ed64e31a24cc10ea969a9d9dcc926959485791ae3c26e2f2b9879c92121bf92108f2ff28e32f7f9feac00437dbb790b676123e848db482042c0f50fbf617c91f81d1a0c02c5c4c00d629eda275179232699b824560ed176f92c62979a9a26223a339615fd4392e48162d1dff1ae70366d1508630e236c299a14201ab2683c11c752956f75797c61b6d1cb06245c81442bdbd2b311a83a53d64ca1fe4c80f1e11df9c708abec25c673bb341fd740e20f773588daf19d4f9a9308885c4ad531fa5efa660bd447509dcc588e1c253231d643c5501dfddb7ddf443ef24830b7e408896f0658eccd241b524e72c8668d6f9509b50cb27807d466e1dc650ba3ed88d2a603b6c1ec184995704913a35feb8a7522b7c216bdb41346ab30bb5f44b33b58e2e4503026fff28f52f715c792bca8e4e6912bedab5cb50f943eff50b9a7449e95668d5179d8063bf75581c65857ba24a26d257910828865e2bf9ec2055f78778f812134e52ed8d2e4904a0250440d74dbc72aa385e931f509d988517043b4fed183fc53d5b2bb4397d7d609346904fd417f186dccc9c61c76a77cbf505771b40d5c6b76fc7863af825feba571b6cfb447987577b615a66aa2f795c2d0fcefd9d694d837386845757cbcb2675478eed8b7b13c6e44dd063550d8a337e06bb4ac309c9ad8b498db0a9ce714b00cb4d4ec189d01273e40fb39f8ccdda48e39f0d2efeb19c75d8b1088d1318cc1eaded70c4cdcaa3a30913cd27db7d4615e5beef81df04375f949d24e70ec614eac6093af8f14fe4145080caa50f337e72996a854e89ca3cae82106d93df1b19d2eeadc3c150f4ca0a1a01aa8cbd9f9b4e4471558faf19ec8c5d19132ce8b997a8c2bf40cfc099b04f6535e046b5e5a6b240fd71e030ab9b8d57de22fa1091d050dea4e1b60f56b442f1dd3fd038de7966ab0fafd1b5c8b1a33908ad47f1482a311c97b974ec681c185cdef5cdbe4f7863f98d80ae7dead72bb49fa28cc74d7877140325deedef8e75ba492e0899dd664cf9089b62a4c20b1e7c13ebd061cdec79462b0df87024fab80eeecb1573de56131fd96f2e6dfa5ac1464076ef42debb5e57048680877c50b65ac26a4915a8ed7961cd93506b2e87e82802f082a0cd4fa93903231be6e0e41517728178c6334920691681d1f966ceb0f6a245ef8c3bc9d75992bb10af44f1bd2bc88e8b6a2fd558bb7bc8240cbd039b8eb358af1de7d589f6fbd3710bd075c7cd9173d628aebdd2ec783d7f14d39c104e8e3b0fc8026ec28ccf4bdaf2ef865148b8d776da059d6ad5289e481ed46e51c3558ca5385533fed25d49d6a40d69b9dbbf66c941dd7870289410b186ffa66ef5ea0d4ec25e647ca4d0cb4d21281335bec3e030255c647ca253e03e0ea32cd9a16e72ab860a70acdd38dcb3543baed7baeddb56582dc2e1f0517bd3cf2794c24e49e6e1142e3571700b2de8a5b575cc2bacfa9668aefbbb1d4491ffde0affd73ab22a36043c1e24f85f490e642202c5c88b680e1cd44b465483c62ce5846c3da2c82c5ffa0134146db7d80ba20beab2b0aa31d2bd6674ad7666b1a9c23bcaca7e3455a194264e83362c3085feb0601caf4bdb342c640dbb48d67da27543201a64f278829c3d8983dc17613ebf08f7fca109234a434685082d120dc5a53f9e0871b64ca681f3e88c1898e9ef3cd8de88537de24a34c3a3887037ece8e09089b6d2eeec4f82d9763b3f7963d14b474f0b94d620b3246910b57a26c10bf8bcb57b03e1be00d1f5bd33219419ef84c2f62ea6d14ebb89ff612bac8d1a827c15eed7d05835ccae726edf89a9d6584bdb4fe1a1440795208c923efef0a99bc37ce12a5bce39c1e3d1261fce33238fdf5c80aa1068bac4137a89172d83b1fdd07f408ee9b45bc9cc095d8161527c4641e04c7b1c6ddd903e401453eddcd636060cdd2103279984a168b4dbb20ce7392622e2159cd87d6b5a71afa040d98caba476a8882fafde8bf16c0d46ce6bf254936958478ce66b3eb5e56df29a6de96aa58db9ee9ef6f8bf760d2dee9ae822bd1a96ecb9d0f031a", 0x1000}, {&(0x7f0000004f00)="c93f7d0ccf69c40745d3bac2cf0220a4d9a7443a8f8b95658574846b504fe30ac52b36ce878b4e7578d99cfe5f8c5933b9d84b5f1b3eb7f1e0e23db5898167f60825bbfdc28c3f314b97433867710cdfe4388e653be9fd5dfba974721779a16e287739a6b6d47e23a45cbbe82c9f394f9471fca4", 0x74}, {&(0x7f0000004f80)="6b29fee3c0e6f1e485dc863be7122230c362218931430ce841766500a3716297f46fb6cb50aa3f78eeb4de2dd364b7dd6a28ab5034ee1ce63c1845f0bb", 0x3d}, {&(0x7f0000004fc0)="bc8f8ddfdcdf223ad23c21053fcb544160a2cc7b70e71977896980f99e7e0cdb74c611387adeb603cb261ca9488d7e8ff96fb0fa946554ff9f9dbaa62799b6690306a88d0c9a615faba94455c81f4e8e5516aee26a1d5dd14ea82b02856bba6fc5d13a916d059643fc59670f1e62e3be960cd59c0c9514287c4887a24aba771ace3f896cd1a293f5a9b58af828b96f379878fb47081ea8bfefb792b459f1901927b6837567dbb4ab4466e7b65df345f299ca2a97386a44", 0xb7}, {&(0x7f0000005080)="200d77ba6a486fddf1bfc71a733044a636dd0c636877941c681ac4cd064cb7b7f6c7", 0x22}], 0x8, &(0x7f0000005100)=[@op={0x10}, @iv={0xf4, 0x117, 0x2, 0xe3, "03fafc3e36a9cb32c184727539281a926565e74f7c9357216cdc853cecc987f7e5092c08508a778f8cc9624c717bfa1c359bcf20543d3cc11c4b02a95827b11ec208fc42bb197b8601e3626157f4169e4bdbe23b446dadab8257ab368ed3974a5644de7a880a87f9843c1439212556b1edac67c912c95b817dafafe335b81fc477cc53b5c3cc40b324f847cb37792d1c571769402634689879420fda3c50f8f36a07a6ef6538f41253b8b82ef9f8c80366d392640d24f962dd033687ff6175841d892e359e83c3b5985ffb7146456afc5985ecab2246e889ab780e4e95e7874e4fd72f"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x7fff}, @iv={0xfc, 0x117, 0x2, 0xe9, "1cf295f94b1b5958775a1da34535fd54dd73f48a661f909d2af1089de6f6c2e7338ba37293c990bc2de6e751a1bc018edd20f53267d645103840241969c146797b28ad2d37b5fab6c8450c576cdea212220a0766606d847f6d8bda9b349a60386dfce62c7c137b70992eb102348e8dffba100fa8258b16aa03fb6a7df07d866e8acf35dfc93eb613c9f3160148918429ce6c09de1e9ce2207c2b541dd2964ee14c4d5342d91b27ea098046153030e77d331288b4b3f791e8f3096fa1a4f79307c24d16ffef5e165a61453b945a27ae0f18e82d2c7288b8f4b219f21cbe46d2c5b431ba093d327b6999"}, @iv={0x5c, 0x117, 0x2, 0x4b, "dcadf9b2ecfbc9842aa720b74dab5b2afbb0ca975ed1a3a90d1dd6204bb64b92b2491d5c74151a4f6883b4d153be623b4c0524b4e691cce51b7f4747219f58e452913b29cfeae897b78563"}, @iv={0xd8, 0x117, 0x2, 0xc5, "1f5195b3c123aeea98af9db0452301f7083f8c9906edaf58351096af4a171ee30ada5eb9965a08e9e4e7c6b2ff324fa300c47e37955d77a4a6b25f3d97eee5d356cc9499f4744e36a366c991679be7efc4f274d587b277db5aad6f560818603b6f101e7d2d544a22aa459f3be8e4c9d453063c959f4a230866cfc9dafe8a4b60745cb47b0ccab9777f365f354f3c1e81dd06ecfa3c71814a579ef9739a2a93836b924547d315d92ab288aef03768d8e7d111e13613267b78fefabc612bc335d0060c6733c4"}], 0x354, 0x20004081}, {0x0, 0x0, &(0x7f0000005480), 0x0, &(0x7f00000054c0)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x810}, {0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005500)="e48af17c9e809ab87d728f9df1165cb3328323df4552812cf007c1713c874f0f5b0d73cdfc744b06575029245741e6bb411fc8e81b16397ceffac5d4cc24f8899527d19544690b3d0fa19fdc0c082eb4", 0x50}, {&(0x7f00000055c0)="82e208d0249110b3932c05a4a82f175f73cfbbd816e44c34437be6363c4eb0f7747bc7e329ad8cdc39002ba04ab16c7abd9dc3f9f5d3ba36d48ad8083a44283598edafac9c6a3a38034b6fde1e922f4285a48e52c2161d78cf99b2c270da5d03229e755a7940194b1c04a7a7576b7ce9c31f478db78f9dbd45e884c9a5d08ff739fa94bb04e1c25a7fd377d3543410f4059ae290ca4d9e71c97d3c9378f66aefb2", 0xa1}, {&(0x7f0000005680)="bedf4ae18af41ebaab4ab9d6bc2df306bb8332a397e44c95c7bba9ff5b1035a040ad812bb36848f195851a983943384fbdb2560af97069eebf35fa45b1edbc94207a32306c0ecaf742dfb7cafc7e2fe9362811c741fc7c73a30b25e1a29a659977e5c8e79f8ebaa231511ebbc32c28a70b0d75d987e6334239477a3b67da9f84b3146e9795b8d89bb249196a6ff4b1271878e9aa5e1707189b8722eec4153cbc6c90fd4eba3f1c1e500e5a02604a765e9dd4d21220d55d511531b9abbb849f4bb4eeda5349d6a519f5343d5016", 0xcd}], 0x3, &(0x7f00000057c0)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x5}, @iv={0xc0, 0x117, 0x2, 0xad, "cdb704ed8d1eec02f3fc1ae2c2814f7a730f46018bcc1cae9fab373de387f9791a297d43a99058d9af401d3e8f1d3ee1e2a3d330bc51f35d379bbe9f363b35743cc8ac832e12cf94ad4000c84ade8944ad916290476ff2683ab8584ca3f9e895ad8e3fa60ddc7b613a57242fdefee360c72738841a4007fd9106538c6ab14c0e65896cf9d7c8edd44a2a312ff30e0105ac2cc80484b62655336aa962c1a07d0d4c37dbcbc563e57df76dd4df07"}, @assoc={0x10, 0x117, 0x4, 0xfffffffa}, @iv={0xc0, 0x117, 0x2, 0xad, "2794f861c3dd2e0ff4328e99739df8ca21345de58b8b054e63a6ee36196cf4f41cf73ef340e9c1b0dde5681b9aefad87653f267a05802d912d7a765cb52f00221dcf300de268a62cb2cbde35f93f893fa9ac00b8a2777a8999a170c6add7a7c4f376dbfc375e0af7193d2920abb13cc3d0681d7ecaca6d250d9e076dec94612260f18b71b0f79c9240dc563c1c1449086df705dff3291b1fff54bcc9803b21ec57b81877e5d157421883d96896"}, @iv={0xb4, 0x117, 0x2, 0xa2, "efc6df0e0d8c5d97ff82773d598d457fa5f89dcdd01a9aceb0b51395e518cefbcbfc1c4bb29e45416e7a026c45ef2b7b5fd221dff1ecd8f269123b4c6c7685b0698f9d25002f7d59d9c1469cf58e22cf5c56e6e52c09d94c06af0332ddfcfb2f19365fefa3a394f80c726278d09baec00c1db1d18896b1e6f1fe0b88adfe34db93abb2e02591077d73090d1026a864870f4c7368b34dfa68f90719fa10ca9e98b8d6"}, @assoc={0x10, 0x117, 0x4, 0x7}], 0x274, 0x4040}], 0x6, 0x20004000)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire]})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
syz_emit_vhci(&(0x7f0000005480)=ANY=[@ANYBLOB="040e04011a0c"], 0x7)
mknod$loop(&(0x7f0000002680)='./file0\x00', 0xfff, 0x1)
mount(&(0x7f00000026c0)=@nullb, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740)='msdos\x00', 0x18, &(0x7f0000002780)='debug')
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
unshare(0x28000600)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(r5, &(0x7f0000003cc0)='net/tcp\x00')
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000206430000000000000000000700000705000100070000000900020073797a3100000000000004000100000012000300686173683a6e65742c706f7274000000500ba5da8bedb7704e8122cd7d631d77871938adfe9a690782"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

1.475595965s ago: executing program 3 (id=1567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0x1c400, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000300)=0x80)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
syz_usb_connect(0x3, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000"], 0x0)
mkdir(&(0x7f0000000080)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='mnt/ttyUSB0\x00', 0x181102, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000280)={0x4, 0x7, 0x54c, 0xf9, 0xd, "0000000000df00", 0x6, 0x10})

1.049676441s ago: executing program 0 (id=1568):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002180)='/dev/comedi3\x00', 0x400, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)=0xfffffff8)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000022c0)={'comedi_parport\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0x3, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x6a, 0x7c, 0x207, 0x6, 0x0, 0xb]})
r2 = socket(0x2a, 0x2, 0x9)
bind$inet(r2, &(0x7f0000000080)={0x2a, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x1000)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r4 = gettid()
syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00')
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

975.778078ms ago: executing program 0 (id=1569):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x3}, @multicast, @void, {@ipv4={0x3f00, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "6ed8e98eefd47125"}}}}}, 0x0)

917.935534ms ago: executing program 0 (id=1570):
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x0, <r0=>0x0}, 0x8)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000380), 0x4, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "865ceecd68404d293a5a322840528c946d410f6119113271e165db8343b0d34d1a164bd477ffe89704768a98d4b5c111c192c8d05e05b13c7c4ef23fe93f3eb9"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r2}, 0x8)
read(r3, 0x0, 0x0)
read$dsp(r3, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
shmget(0x1, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil)
write(r8, &(0x7f00000001c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r8, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0)
sendto$inet6(r8, &(0x7f0000000100)="800037bbfa9ba1ce1a92c71f2a35ebe8452fada02d5e9dfd08496a5cbe6bc076b181b5618e1324d9167f0a1b29c3c2967a9ac800445eaef394cd9fdf8b056bf9a8e318b6dd5c073a6f6350356991ee776da7485bf2138ae427b27c26fd", 0x5d, 0x4000810, 0x0, 0x0)
syz_socket_connect_nvme_tcp()
recvmmsg(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)=""/4109, 0x100d}], 0x1}, 0xa}], 0x1, 0x10040, 0x0)

914.340116ms ago: executing program 0 (id=1571):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000000400000007"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000240), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0)
syz_emit_ethernet(0x82, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x8, 0x1, 0x67, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x27, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @loopback, @multicast2, @local, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}]}, @lsrr={0x83, 0x7, 0xfd, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x19}]}}, "217b355ff14074b7"}}}}}, 0x0)

840.383976ms ago: executing program 0 (id=1572):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
read(r0, &(0x7f00000001c0)=""/84, 0x54)
bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000280)=0x20, 0x4)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x6, 0x8, 0x3ff, 0x8, "15b6e9", 0x2}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaa"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0x4, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000940), 0x0, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000d80)={"72c5b02add2f255d13e36aab", &(0x7f0000000c40)="667771f2c80657f88ef9c12b41fd6f802a1baece09e04c60720400227f2dee39a798bfc97fd5c4f581bac2473c7d6ef9e1130e77e3539a7e61b17f803f92366e9f9d284176b94469f010b64657980d259ecc09566421248c6de03f3bece8afd86607ea696a673f658fd794b120e287e7906c5fc16da122a7cc1361ac992a89eeb33dd695", 0x84, 0x4, &(0x7f0000000d00)={0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, "a5000d46", 0x7, "acb59d0f", 0x2, 0x1, 0x9, "0f147f", "dfeb147fb00ad005ba5acc7a448803a9bc3db7408fab3383b32bc152b2e9c93a33ace2b16a6df3492c6513454dda"}, 0x2, 0x7f, 0x7f, &(0x7f0000000d40)})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0xc, 0x492f, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000300)="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", 0x7, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=""/16}, 0x20)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x40000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c6, 0x5, 0x0, 0x79, 0xfffffffffffffffc, 0x0, 0x5, 0x1, 0x2, 0xffffffffffffffff], 0xeeee8000, 0x200})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

692.319166ms ago: executing program 2 (id=1573):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x2, 0x0)
write$cgroup_freezer_state(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0)
ioctl$FIONCLEX(r0, 0x5450)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

548.867489ms ago: executing program 2 (id=1574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000001c0), 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
socket(0x1d, 0x2, 0x6)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa010}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x1, 0x84)
r9 = getpid()
sched_setscheduler(r9, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x1f, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)

306.528448ms ago: executing program 2 (id=1575):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x402)
syz_emit_ethernet(0x4a, &(0x7f0000001200)={@local, @random="24bd0a4e6969", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x20, 0x3c, 0x68, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x2, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "c516f1ed3622f5c0a5643b882c9ff164"}]}}}}}}}, 0x0)

257.253077ms ago: executing program 2 (id=1576):
mkdir(&(0x7f0000000140)='./file0\x00', 0x1e)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884)
mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000280)='./file0\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000000))
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000000c0)=@arm64_fp_extra={0x20200000001000d4, 0x0})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
write$sysctl(r10, &(0x7f0000000300)='1\x00', 0x2)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="4ac3b27e7ce50000008000000000ea3b34007300", @ANYRES16, @ANYBLOB="010025bd7000000000000100000007000800e000000108000700ffffffff0500010000000000080002000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0)
write$sysctl(r10, &(0x7f0000000380)='2\x00', 0x2)

148.025319ms ago: executing program 1 (id=1577):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5})
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x228f2d75e17d14e1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1cc, 0xffffffff, 0xffffffff, 0x1cc, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffffff, 0xff, 0xffffffff], [0xff, 0x7f00007f, 0xffffff00, 0xffffff00], 'nr0\x00', 'netpci0\x00', {0xff}, {0xff}, 0xff, 0x10, 0x3, 0x3c}, 0x0, 0x198, 0x1cc, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x7fff, 0x44, 0xf}, {0xffffffffffffffff, 0x3, 0x4}, {0xffffffffffffffff, 0x1, 0x2}, 0x400, 0x4}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x8, 0x8, 'syz1\x00', 'syz0\x00', {0xde34}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3fc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r7 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r7, 0x410, &(0x7f0000000940)={0x1, 0x1, 0x0, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000980)='net/psched\x00')
r9 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00')
lseek(r9, 0x4, 0x1)
fanotify_init(0x40, 0x8000)
read$FUSE(r8, &(0x7f0000000fc0)={0x2020}, 0x229)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000dc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x4000080)

55.312007ms ago: executing program 3 (id=1578):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001300)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="cf04fdfffffffcffffff1300000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600080211000001000006001200fc0700000600b500c90200000400ac000c00430001"], 0x12c}, 0x1, 0x0, 0x0, 0x404c000}, 0x240008c0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x45a5a55bae394130, 0xa, 0x5, 0x3ff, 0x4, @remote, @empty, 0x80, 0x40, 0x0, 0x3}})
r5 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xf)
close(r6)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000440)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x82, 0x1, 0x7, 0x30, @private2, @remote, 0x10, 0x7, 0xa, 0x800}})
sendmsg$ETHTOOL_MSG_STATS_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x84, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STATS_HEADER={0x4}, @ETHTOOL_A_STATS_GROUPS={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "bd493369e0bcf205fb42109468b32aa0e8e2e8b014d03176"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x1}, @ETHTOOL_A_STATS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x40080)

0s ago: executing program 3 (id=1579):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854)
sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x4000020)
r3 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x220200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, 'mtd0\x00'})
readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000001c0)={0x32, 0x2, 0x2, 0x8, 0x0, [@mcast2]}, 0x18)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
write$P9_RSTATu(r4, &(0x7f0000001700)=ANY=[@ANYBLOB="370200007d02000005f600000000000005830000000008080000000000000000020000000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb1403f196a51cd5157adc8103b494e13700cfc36d07c500f04cd85f2a70f5e9930e5e989cd5ef4d51f60da7582c4a05c8f828f68dc1774d5de2e820862381f6686dd1bb8fd70000003e00f8f669fb716dcf315ecaf385409ac65b9408678c3c3b9e1d52c36cde7ba4a400b4b077dc74000000000000000007ec21cabff20f9c0089f90600000000002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65642d979a3fde5f475daf03b1372d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a92049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff0000000000000000000000000000000000406681761cc9b05cf223b16fd50aaa39c77be8c9694afdce22ec2d3870ebfbb4bf50f356eca6dd40740bb990506051a4e7829b27650cac272c59206cd35b41013f9e45b1d9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x237)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6028d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x182b356d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='1', 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006)
pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xe7c)

kernel console output (not intermixed with test programs):

apter converter now disconnected from ttyUSB0
[  275.625096][ T6070] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  275.625447][ T6070] keyspan 5-1:1.0: device disconnected
[  275.833559][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  276.213518][ T9497] CIFS: Attempting to mount //127.0.0.1/share
[  276.385465][ T9501] Cannot find add_set index 32767 as target
[  276.409594][ T9501] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  276.570003][ T9510] netlink: 'syz.2.1115': attribute type 1 has an invalid length.
[  276.624691][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  277.003226][ T9525] syz.3.1119 (9525): drop_caches: 2
[  277.010501][ T9524] syz.3.1119 (9524): drop_caches: 2
[  277.010707][ T9524] syz.3.1119 (9524): drop_caches: 2
[  277.099960][ T9497] CIFS: VFS: cifs_mount failed w/return code = -112
[  277.107692][    T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  277.258412][    T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  277.260205][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.260228][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  277.260241][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  277.260252][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  277.260271][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.262248][ T9519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.262300][ T9519] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.292261][    T9] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  277.299320][    T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  277.299392][    T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  277.304544][    T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  277.318530][    T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  277.318609][    T9] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  277.321593][    T9] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  277.344724][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  277.422063][ T9538] Cannot find add_set index 32767 as target
[  277.438660][ T9538] netlink: 'syz.0.1123': attribute type 1 has an invalid length.
[  277.596042][ T5883] usb 7-1: USB disconnect, device number 28
[  277.598160][ T5883] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  277.599781][ T5883] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  277.600181][ T5883] keyspan 7-1:1.0: device disconnected
[  277.730848][ T9544] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[  277.829303][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  277.860729][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1128'.
[  277.893016][ T9551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1129'.
[  278.391195][ T9562] Cannot find add_set index 32767 as target
[  278.438554][ T9562] netlink: 'syz.1.1133': attribute type 1 has an invalid length.
[  278.728034][ T9573] bond9: entered promiscuous mode
[  278.797537][ T5741] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  278.864898][ T6070] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  279.027069][ T6070] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  279.027917][ T6070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.027943][ T6070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.029467][ T6070] usb 6-1: config 0 descriptor??
[  279.115926][ T1416] usb 8-1: new full-speed USB device number 24 using dummy_hcd
[  279.231888][ T6070] usbhid 6-1:0.0: can't add hid device: -71
[  279.231937][ T6070] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  279.236881][ T6070] usb 6-1: USB disconnect, device number 31
[  279.265572][ T1416] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  279.265600][ T1416] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  279.266005][ T1416] usb 8-1: config 0 has no interfaces?
[  279.266394][ T1416] usb 8-1: config 0 has no interfaces?
[  279.266797][ T1416] usb 8-1: config 0 has no interfaces?
[  279.267173][ T1416] usb 8-1: config 0 has no interfaces?
[  279.267540][ T1416] usb 8-1: config 0 has no interfaces?
[  279.267905][ T1416] usb 8-1: config 0 has no interfaces?
[  279.268281][ T1416] usb 8-1: config 0 has no interfaces?
[  279.268648][ T1416] usb 8-1: config 0 has no interfaces?
[  279.268664][ T1416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.270081][ T1416] usb 8-1: config 0 descriptor??
[  279.480155][ T6070] usb 8-1: USB disconnect, device number 24
[  279.715233][ T9589] FAT-fs (nullb0): bogus number of reserved sectors
[  279.715252][ T9589] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  279.718364][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1142'.
[  279.921509][ T9591] Cannot find add_set index 32767 as target
[  279.946235][ T9591] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  280.064847][ T9594] FAT-fs (nullb0): bogus number of reserved sectors
[  280.064865][ T9594] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  280.084999][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1144'.
[  280.170987][ T9596] FAT-fs (nullb0): bogus number of reserved sectors
[  280.171008][ T9596] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  280.177254][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1146'.
[  280.940781][ T5741] Bluetooth: hci2: Unable to find connection for big 0x00
[  281.549103][   T44] audit: type=1326 audit(1792223671.832:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.0.1151" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x0
[  281.654927][   T44] audit: type=1326 audit(1792223671.932:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.0.1151" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0
[  282.002645][ T9626] FAT-fs (nullb0): bogus number of reserved sectors
[  282.002665][ T9626] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  282.023702][ T9626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'.
[  282.785007][   T25] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  282.935635][   T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  282.936736][   T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.936770][   T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  282.936790][   T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  282.936808][   T25] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  282.936837][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.941925][ T9630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  282.941981][ T9630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  282.945324][   T25] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  282.946340][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  282.946375][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  282.958420][   T25] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  282.959440][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  282.959499][   T25] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  282.974593][   T25] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  283.271212][ T6070] usb 6-1: USB disconnect, device number 32
[  283.290056][ T6070] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  283.294693][ T6070] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  283.299537][ T6070] keyspan 6-1:1.0: device disconnected
[  283.556590][ T5741] Bluetooth: hci1: Unable to find connection for big 0x00
[  284.102589][ T9652] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  284.103027][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'.
[  284.247041][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.247104][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.247156][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.247189][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.632585][ T9660] Cannot find add_set index 32767 as target
[  284.670453][ T9660] netlink: 'syz.0.1166': attribute type 1 has an invalid length.
[  284.923720][ T9668] Cannot find add_set index 32767 as target
[  284.948688][ T9668] netlink: 'syz.0.1169': attribute type 1 has an invalid length.
[  285.314932][    T9] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  285.447762][    T9] usb 8-1: device descriptor read/64, error -71
[  285.627583][ T5741] Bluetooth: hci3: Unable to find connection for big 0x00
[  285.660368][   T44] audit: type=1326 audit(1792223675.942:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.1.1174" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x0
[  285.684912][    T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  285.765521][   T44] audit: type=1326 audit(1792223676.052:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9681 comm="syz.1.1174" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747efec code=0x0
[  285.814859][    T9] usb 8-1: device descriptor read/64, error -71
[  285.925463][    T9] usb usb8-port1: attempt power cycle
[  286.219037][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'.
[  286.222506][ T9691] capability: warning: `syz.0.1175' uses 32-bit capabilities (legacy support in use)
[  286.264899][    T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  286.287052][    T9] usb 8-1: device descriptor read/8, error -71
[  286.528331][    T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  286.545714][    T9] usb 8-1: device descriptor read/8, error -71
[  286.656314][    T9] usb usb8-port1: unable to enumerate USB device
[  287.557037][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  288.257399][ T9724] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  288.614954][ T5883] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  288.761011][ T9732] Cannot find add_set index 32767 as target
[  288.775884][ T5883] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  288.779039][ T5883] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.779075][ T5883] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  288.779094][ T5883] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  288.779168][ T5883] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  288.779199][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.794044][ T9728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  288.794198][ T9728] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  288.799496][ T5883] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  288.816577][ T5883] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  288.816638][ T5883] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  288.820738][ T5883] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  288.825673][ T5883] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  288.825734][ T5883] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  288.829549][ T5883] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  288.831075][ T9732] netlink: 'syz.1.1190': attribute type 1 has an invalid length.
[  289.088686][ T9741] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  289.098885][ T9742] evm: overlay not supported
[  289.186906][ T9747] netlink: 'syz.2.1196': attribute type 1 has an invalid length.
[  289.205193][   T44] audit: type=1326 audit(1792223679.482:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.1.1197" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x0
[  289.213890][ T6070] usb 8-1: USB disconnect, device number 29
[  289.227527][ T6070] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  289.244500][ T6070] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  289.249962][ T6070] keyspan 8-1:1.0: device disconnected
[  289.312043][   T44] audit: type=1326 audit(1792223679.592:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.1.1197" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747efec code=0x0
[  289.312930][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'.
[  289.892914][ T9769] FAT-fs (nullb0): bogus number of reserved sectors
[  289.892928][ T9769] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  289.902506][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1204'.
[  290.118610][ T9771] cdrom: dropping to single frame dma
[  290.256652][ T9776] bond7: entered promiscuous mode
[  290.608746][ T9788] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  290.646146][ T6070] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  290.665634][ T9792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1209'.
[  290.827555][ T6070] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  290.827581][ T6070] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  290.829409][ T6070] usb 5-1: config 0 has no interfaces?
[  290.829851][ T6070] usb 5-1: config 0 has no interfaces?
[  290.830280][ T6070] usb 5-1: config 0 has no interfaces?
[  290.830677][ T6070] usb 5-1: config 0 has no interfaces?
[  290.831069][ T6070] usb 5-1: config 0 has no interfaces?
[  290.831450][ T6070] usb 5-1: config 0 has no interfaces?
[  290.832024][ T6070] usb 5-1: config 0 has no interfaces?
[  290.833681][ T6070] usb 5-1: config 0 has no interfaces?
[  290.833697][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.846675][ T6070] usb 5-1: config 0 descriptor??
[  291.051217][ T6070] usb 5-1: USB disconnect, device number 23
[  291.514875][ T5741] Bluetooth: hci1: Unable to find connection for big 0x00
[  292.156836][ T9830] FAT-fs (nullb0): bogus number of reserved sectors
[  292.156849][ T9830] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  292.159312][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'.
[  292.556232][   T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  292.705289][   T10] usb 6-1: Using ep0 maxpacket: 32
[  292.705791][   T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  292.706659][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  292.708271][   T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  292.708284][   T10] usb 6-1: Product: syz
[  292.708291][   T10] usb 6-1: Manufacturer: syz
[  292.708298][   T10] usb 6-1: SerialNumber: syz
[  292.712309][   T10] usb 6-1: config 0 descriptor??
[  292.712839][ T9839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.713848][   T10] hub 6-1:0.0: bad descriptor, ignoring hub
[  292.713860][   T10] hub 6-1:0.0: probe with driver hub failed with error -5
[  292.800241][ T9863] bond10: entered promiscuous mode
[  292.919185][ T9839] dlm: no locking on control device
[  293.037272][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'.
[  293.122714][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  293.124850][    T9] usb 8-1: new full-speed USB device number 30 using dummy_hcd
[  293.504869][    T9] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  293.504895][    T9] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  293.525076][    T9] usb 8-1: config 0 has no interfaces?
[  293.529828][    T9] usb 8-1: config 0 has no interfaces?
[  293.532144][    T9] usb 8-1: config 0 has no interfaces?
[  293.533986][    T9] usb 8-1: config 0 has no interfaces?
[  293.539240][    T9] usb 8-1: config 0 has no interfaces?
[  293.609744][    T9] usb 8-1: config 0 has no interfaces?
[  293.635182][    T9] usb 8-1: config 0 has no interfaces?
[  293.644932][    T9] usb 8-1: config 0 has no interfaces?
[  293.644978][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.715293][    T9] usb 8-1: config 0 descriptor??
[  294.175422][    T9] usb 8-1: USB disconnect, device number 30
[  294.326770][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.342234][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  294.343121][ T9900] FAT-fs (nullb0): bogus number of reserved sectors
[  294.343132][ T9900] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  294.346470][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1233'.
[  294.404909][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.428591][   T37] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.505585][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.532434][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.594949][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.616562][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.688169][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.717178][   T69] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.786408][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.839098][   T37] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.905816][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  294.925980][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  294.932087][   T44] audit: type=1326 audit(1792223685.212:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.3.1237" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x0
[  294.948227][ T9904] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  294.948326][ T9904] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  294.995241][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  295.015671][   T69] raw-gadget.0 gadget.1: failed to queue suspend event
[  295.034881][   T44] audit: type=1326 audit(1792223685.312:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.3.1237" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fefec code=0x0
[  295.034934][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  295.085003][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  295.108752][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  295.174887][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  295.188006][   T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  295.188854][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.188876][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  295.188888][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  295.188899][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  295.188917][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.191245][ T9902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  295.191297][ T9902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  295.193608][   T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  295.199078][   T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  295.199114][   T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  295.205192][   T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  295.208399][   T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  295.208436][   T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  295.214071][  T194] raw-gadget.0 gadget.1: failed to queue suspend event
[  295.235200][   T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  295.274883][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  295.296755][ T1163] raw-gadget.0 gadget.1: failed to queue suspend event
[  295.364992][ T9839] raw-gadget.0 gadget.1: failed to queue resume event
[  295.385782][ T1163] raw-gadget.0 gadget.1: failed to queue suspend event
[  295.411392][ T9839] raw-gadget.0 gadget.1: failed to queue disconnect event
[  295.471544][ T9914] netlink: 'syz.1.1238': attribute type 1 has an invalid length.
[  295.525097][   T10] usb 6-1: USB disconnect, device number 33
[  295.526678][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'.
[  295.547555][ T5883] usb 5-1: USB disconnect, device number 24
[  295.554667][ T5883] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  295.560447][ T5883] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  295.560783][ T5883] keyspan 5-1:1.0: device disconnected
[  295.711677][ T9923] FAT-fs (nullb0): bogus number of reserved sectors
[  295.711691][ T9923] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  295.713660][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'.
[  295.866253][ T9926] FAT-fs (nullb0): bogus number of reserved sectors
[  295.866388][ T9926] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  295.874589][ T9926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'.
[  296.136353][ T9928] bond8: entered promiscuous mode
[  296.494868][   T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  296.657505][   T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  296.657537][   T10] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  296.657976][   T10] usb 5-1: config 0 has no interfaces?
[  296.658375][   T10] usb 5-1: config 0 has no interfaces?
[  296.658753][   T10] usb 5-1: config 0 has no interfaces?
[  296.659123][   T10] usb 5-1: config 0 has no interfaces?
[  296.659491][   T10] usb 5-1: config 0 has no interfaces?
[  296.659849][   T10] usb 5-1: config 0 has no interfaces?
[  296.660213][   T10] usb 5-1: config 0 has no interfaces?
[  296.660577][   T10] usb 5-1: config 0 has no interfaces?
[  296.660593][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.662284][   T10] usb 5-1: config 0 descriptor??
[  297.014975][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout
[  297.023480][ T9932] FAT-fs (nullb0): bogus number of reserved sectors
[  297.023492][ T9932] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  297.032335][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1244'.
[  297.254005][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  297.618002][ T9942] netlink: 'syz.1.1248': attribute type 1 has an invalid length.
[  297.618016][ T9942] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.1248'.
[  297.699256][   T44] audit: type=1326 audit(1792223687.982:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.700603][   T44] audit: type=1326 audit(1792223687.982:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.702780][   T44] audit: type=1326 audit(1792223687.982:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.702896][   T44] audit: type=1326 audit(1792223687.982:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.703033][   T44] audit: type=1326 audit(1792223687.982:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.703362][   T44] audit: type=1326 audit(1792223687.982:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.703498][   T44] audit: type=1326 audit(1792223687.982:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.703785][   T44] audit: type=1326 audit(1792223687.982:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.1.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf747efec code=0x7ffc0000
[  297.725322][ T5741] Bluetooth: hci3: command 0x0405 tx timeout
[  297.733716][ T9903] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  297.767621][ T5883] usb 5-1: USB disconnect, device number 25
[  297.990217][ T9959] FAT-fs (nullb0): bogus number of reserved sectors
[  297.990231][ T9959] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  297.993063][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'.
[  297.994957][ T6070] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  298.146583][ T6070] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  298.148945][ T6070] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.148969][ T6070] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  298.148982][ T6070] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  298.148993][ T6070] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  298.149012][ T6070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.151988][ T9948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.152042][ T9948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.159788][ T6070] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  298.163399][ T6070] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  298.163436][ T6070] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  298.166426][ T6070] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  298.167239][ T6070] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  298.167273][ T6070] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  298.174205][ T6070] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  298.467976][ T5883] usb 6-1: USB disconnect, device number 34
[  298.473653][ T5883] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  298.479492][ T9962] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[  298.488517][ T5883] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  298.488877][ T5883] keyspan 6-1:1.0: device disconnected
[  298.560587][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'.
[  298.611907][ T5741] Bluetooth: hci2: Unable to find connection for big 0x00
[  298.901857][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'.
[  300.289922][ T9999] bond14: entered promiscuous mode
[  300.694906][ T3374] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  300.815927][ T5741] Bluetooth: hci1: Unable to find connection for big 0x00
[  300.846130][ T3374] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  300.846155][ T3374] usb 7-1: too many configurations: 248, using maximum allowed: 8
[  300.846588][ T3374] usb 7-1: config 0 has no interfaces?
[  300.846989][ T3374] usb 7-1: config 0 has no interfaces?
[  300.847370][ T3374] usb 7-1: config 0 has no interfaces?
[  300.847856][ T3374] usb 7-1: config 0 has no interfaces?
[  300.848336][ T3374] usb 7-1: config 0 has no interfaces?
[  300.848712][ T3374] usb 7-1: config 0 has no interfaces?
[  300.849076][ T3374] usb 7-1: config 0 has no interfaces?
[  300.849435][ T3374] usb 7-1: config 0 has no interfaces?
[  300.849450][ T3374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.850660][ T3374] usb 7-1: config 0 descriptor??
[  301.054994][ T3374] usb 7-1: USB disconnect, device number 29
[  301.358415][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'.
[  301.497212][T10026] FAT-fs (nullb0): bogus number of reserved sectors
[  301.497228][T10026] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  301.510344][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'.
[  301.785404][ T3374] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  301.935633][ T3374] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  301.937504][ T3374] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.937527][ T3374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  301.937540][ T3374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  301.938013][ T3374] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  301.938045][ T3374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.943604][T10028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  301.943659][T10028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  301.978848][ T3374] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  301.983424][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  301.983460][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  301.985010][ T3374] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  302.002070][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  302.002107][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  302.003782][ T3374] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  302.097111][T10034] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1270'.
[  302.150250][T10036] openvswitch: netlink: IPv4 tun info is not correct
[  302.247223][T10038] kernel profiling enabled (shift: 7)
[  302.323700][ T3374] usb 5-1: USB disconnect, device number 26
[  302.330755][ T3374] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  302.342448][ T3374] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  302.342829][ T3374] keyspan 5-1:1.0: device disconnected
[  302.800607][T10044] Cannot find add_set index 32767 as target
[  302.823950][T10044] netlink: 'syz.1.1274': attribute type 1 has an invalid length.
[  302.954370][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'.
[  302.998782][T10050] bond10: entered promiscuous mode
[  303.099842][T10054] netlink: 'syz.3.1278': attribute type 1 has an invalid length.
[  303.183830][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'.
[  303.210979][T10056] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  303.241563][T10058] FAT-fs (nullb0): bogus number of reserved sectors
[  303.241581][T10058] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  303.243760][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1280'.
[  303.265782][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'.
[  303.317929][ T5741] Bluetooth: hci3: Unable to find connection for big 0x00
[  303.325002][ T6070] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  303.475543][ T6070] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  303.475586][ T6070] usb 6-1: too many configurations: 248, using maximum allowed: 8
[  303.476056][ T6070] usb 6-1: config 0 has no interfaces?
[  303.476488][ T6070] usb 6-1: config 0 has no interfaces?
[  303.476925][ T6070] usb 6-1: config 0 has no interfaces?
[  303.477351][ T6070] usb 6-1: config 0 has no interfaces?
[  303.477783][ T6070] usb 6-1: config 0 has no interfaces?
[  303.478206][ T6070] usb 6-1: config 0 has no interfaces?
[  303.478640][ T6070] usb 6-1: config 0 has no interfaces?
[  303.479273][ T6070] usb 6-1: config 0 has no interfaces?
[  303.479297][ T6070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.481263][ T6070] usb 6-1: config 0 descriptor??
[  303.684098][ T6070] usb 6-1: USB disconnect, device number 35
[  303.878724][T10069] FAT-fs (nullb0): bogus number of reserved sectors
[  303.878737][T10069] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  303.882197][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1283'.
[  304.094831][   T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  304.245473][   T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  304.246365][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.246387][   T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  304.246400][   T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  304.246411][   T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  304.246430][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.250097][T10068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  304.250176][T10068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  304.253172][   T10] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  304.254256][   T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  304.254290][   T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  304.256923][   T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  304.257922][   T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  304.257956][   T10] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  304.261896][   T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  304.436952][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'.
[  304.933553][   T42] usb 7-1: USB disconnect, device number 30
[  305.003516][T10077] Cannot find add_set index 32767 as target
[  305.024091][   T42] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  305.042192][   T42] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  305.042819][   T42] keyspan 7-1:1.0: device disconnected
[  305.079887][T10077] netlink: 'syz.3.1287': attribute type 1 has an invalid length.
[  305.240750][T10080] netlink: 'syz.0.1288': attribute type 1 has an invalid length.
[  305.438808][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'.
[  305.479249][T10083] Cannot find add_set index 32767 as target
[  305.496759][T10085] FAT-fs (nullb0): bogus number of reserved sectors
[  305.496774][T10085] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  305.502083][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'.
[  305.517193][T10083] netlink: 'syz.3.1289': attribute type 1 has an invalid length.
[  305.584609][ T5741] Bluetooth: hci3: Unable to find connection for big 0x00
[  306.171744][T10098] CIFS: Attempting to mount //127.0.0.1/share
[  306.174678][ T5546] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[  306.174696][ T5546] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[  306.208900][T10098] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV
[  306.233404][ T5546] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[  306.233423][ T5546] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[  306.254296][T10098] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV
[  306.254415][T10098] CIFS: VFS: cifs_mount failed w/return code = -2
[  306.300414][T10096] syzkaller1: entered promiscuous mode
[  306.300434][T10096] syzkaller1: entered allmulticast mode
[  306.474023][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  306.753398][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  306.754509][T10114] FAT-fs (nullb0): bogus number of reserved sectors
[  306.754525][T10114] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  306.756942][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1296'.
[  307.189290][ T5741] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  307.270984][T10124] FAT-fs (nullb0): bogus number of reserved sectors
[  307.270997][T10124] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  307.273721][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'.
[  307.535068][ T5883] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  307.695005][ T5883] usb 5-1: Using ep0 maxpacket: 32
[  307.696822][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short
[  307.696848][ T5883] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  307.698868][ T5883] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config
[  307.698881][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.700598][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.700610][ T5883] usb 5-1: Product: syz
[  307.700618][ T5883] usb 5-1: Manufacturer: syz
[  307.700625][ T5883] usb 5-1: SerialNumber: syz
[  307.933892][ T5883] usb 5-1: 0:1 : does not exist
[  307.933906][ T5883] usb 5-1: 0:2 : does not exist
[  307.959600][ T5883] usb 5-1: USB disconnect, device number 27
[  307.976701][ T3374] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  307.976923][ T9261] udevd[9261]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.081138][ T5741] Bluetooth: hci3: Unable to find connection for big 0x00
[  308.125666][ T3374] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  308.126504][ T3374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.126526][ T3374] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  308.126544][ T3374] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  308.126555][ T3374] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  308.126575][ T3374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.128274][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  308.128366][T10127] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  308.130727][ T3374] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  308.132673][ T3374] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  308.132708][ T3374] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  308.133469][ T3374] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  308.134679][ T3374] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  308.134713][ T3374] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  308.176678][ T3374] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  308.239358][ T5741] Bluetooth: hci0: Unable to find connection for big 0x00
[  308.445400][ T1416] usb 8-1: USB disconnect, device number 31
[  308.455173][ T1416] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  308.460163][ T1416] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  308.460555][ T1416] keyspan 8-1:1.0: device disconnected
[  308.830470][T10146] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  308.919276][T10145] __nla_validate_parse: 1 callbacks suppressed
[  308.919295][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'.
[  308.990840][T10148] Cannot find add_set index 32767 as target
[  309.027874][T10148] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  309.044692][T10150] CIFS: Attempting to mount //127.0.0.1/share
[  309.048792][   T13] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[  309.048815][   T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[  309.048890][T10150] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV
[  309.054263][   T13] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV
[  309.054285][   T13] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING
[  309.054359][T10150] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV
[  309.054468][T10150] CIFS: VFS: cifs_mount failed w/return code = -2
[  309.064180][T10150] syzkaller1: entered promiscuous mode
[  309.064192][T10150] syzkaller1: entered allmulticast mode
[  309.300464][T10154] Cannot find add_set index 32767 as target
[  309.326673][T10154] netlink: 'syz.3.1317': attribute type 1 has an invalid length.
[  309.383415][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'.
[  309.555753][ T1416] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  309.706518][ T1416] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  309.707998][ T1416] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.708021][ T1416] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  309.708034][ T1416] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  309.708045][ T1416] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  309.708064][ T1416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.758557][T10156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  309.758649][T10156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  309.759628][ T1416] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  309.763999][ T1416] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  309.764033][ T1416] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  309.778833][ T1416] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  309.782634][ T1416] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  309.782671][ T1416] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  309.791534][ T1416] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  309.926439][ T5741] Bluetooth: hci1: Unable to find connection for big 0x00
[  310.292429][ T1416] usb 7-1: USB disconnect, device number 31
[  310.303646][ T1416] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  310.319358][ T1416] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  310.319712][ T1416] keyspan 7-1:1.0: device disconnected
[  310.544142][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  310.673120][T10152] syz.1.1316: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1
[  310.673243][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.1316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.673269][T10152] Tainted: [L]=SOFTLOCKUP
[  310.673276][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  310.673287][T10152] Call Trace:
[  310.673294][T10152]  <TASK>
[  310.673301][T10152]  dump_stack_lvl+0x100/0x190
[  310.673332][T10152]  warn_alloc.cold+0x9e/0xb2
[  310.673354][T10152]  ? __pfx_warn_alloc+0x10/0x10
[  310.673385][T10152]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  310.673407][T10152]  ? __pfx_get_page_from_freelist+0x10/0x10
[  310.673439][T10152]  __alloc_frozen_pages_noprof+0xcb6/0x3300
[  310.673487][T10152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  310.673513][T10152]  ? __lock_acquire+0x5c0/0x1f40
[  310.673553][T10152]  ? lock_acquire+0x1d1/0x380
[  310.673580][T10152]  ? page_table_check_set+0x11d/0x580
[  310.673614][T10152]  ? page_table_check_set+0x30f/0x580
[  310.673658][T10152]  __folio_alloc_noprof+0x16/0x260
[  310.673683][T10152]  alloc_migration_target+0x1d7/0x6d0
[  310.673706][T10152]  migrate_pages_batch+0x5c4/0x4680
[  310.673729][T10152]  ? __pfx_alloc_migration_target+0x10/0x10
[  310.673755][T10152]  ? rcu_read_unlock+0x2d/0xb0
[  310.673778][T10152]  ? __pfx_migrate_pages_batch+0x10/0x10
[  310.673800][T10152]  ? finish_fault+0xaea/0x13e0
[  310.673839][T10152]  ? folio_unlock+0xf5/0x190
[  310.673868][T10152]  migrate_pages_sync+0x12c/0x880
[  310.673891][T10152]  ? rcu_read_unlock+0x2d/0xb0
[  310.673912][T10152]  ? __pfx_alloc_migration_target+0x10/0x10
[  310.673938][T10152]  ? __pfx_migrate_pages_sync+0x10/0x10
[  310.673962][T10152]  ? __lock_acquire+0x5c0/0x1f40
[  310.673988][T10152]  ? __css_rstat_updated+0x1ce/0x590
[  310.674011][T10152]  migrate_pages+0x1a83/0x2850
[  310.674035][T10152]  ? __pfx_alloc_migration_target+0x10/0x10
[  310.674061][T10152]  ? __pfx_migrate_pages+0x10/0x10
[  310.674088][T10152]  ? mtree_load+0x3a4/0xb50
[  310.674106][T10152]  move_pages_and_store_status+0xf1/0x230
[  310.674130][T10152]  ? __pfx_move_pages_and_store_status+0x10/0x10
[  310.674161][T10152]  kernel_move_pages+0xca4/0x14d0
[  310.674190][T10152]  ? __pfx_kernel_move_pages+0x10/0x10
[  310.674209][T10152]  ? __seccomp_filter+0x896/0x1130
[  310.674239][T10152]  ? __pfx___ia32_sys_futex_time32+0x10/0x10
[  310.674270][T10152]  __ia32_sys_move_pages+0xdd/0x1b0
[  310.674295][T10152]  __do_fast_syscall_32+0x13a/0x8b0
[  310.674316][T10152]  ? lockdep_hardirqs_on+0x7d/0x110
[  310.674333][T10152]  do_fast_syscall_32+0x32/0x70
[  310.674354][T10152]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  310.674378][T10152] RIP: 0023:0xf747efec
[  310.674392][T10152] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  310.674426][T10152] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d
[  310.674445][T10152] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0
[  310.674461][T10152] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000
[  310.674472][T10152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.674482][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.674493][T10152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  310.674519][T10152]  </TASK>
[  310.674526][T10152] Mem-Info:
[  310.674533][T10152] active_anon:6023 inactive_anon:499 isolated_anon:0
[  310.674533][T10152]  active_file:511 inactive_file:36803 isolated_file:0
[  310.674533][T10152]  unevictable:1000 dirty:552 writeback:0
[  310.674533][T10152]  slab_reclaimable:6123 slab_unreclaimable:57979
[  310.674533][T10152]  mapped:26402 shmem:1474 pagetables:1673
[  310.674533][T10152]  sec_pagetables:297 bounce:0
[  310.674533][T10152]  kernel_misc_reclaimable:0
[  310.674533][T10152]  free:39946 free_pcp:61 free_cma:0
[  310.674579][T10152] Node 0 active_anon:44kB inactive_anon:76kB active_file:0kB inactive_file:144kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8992kB pagetables:1316kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  310.674627][T10152] Node 1 active_anon:24048kB inactive_anon:1920kB active_file:2044kB inactive_file:147068kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:105580kB dirty:2208kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6056kB pagetables:5376kB sec_pagetables:48kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  310.674676][T10152] Node 0 DMA free:2564kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.674930][T10152] lowmem_reserve[]: 0 259 259 259 259
[  310.674963][T10152] Node 0 DMA32 free:16088kB boost:6144kB min:17848kB low:20772kB high:23696kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40kB inactive_anon:76kB active_file:0kB inactive_file:144kB unevictable:2000kB writepending:0kB zspages:0kB present:1032196kB managed:265352kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.675015][T10152] lowmem_reserve[]: 0 0 0 0 0
[  310.675045][T10152] Node 1 DMA32 free:141132kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24048kB inactive_anon:1920kB active_file:2044kB inactive_file:147068kB unevictable:2000kB writepending:2208kB zspages:2184kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB
[  310.675097][T10152] lowmem_reserve[]: 0 0 0 0 0
[  310.675126][T10152] Node 0 DMA: 33*4kB (UM) 28*8kB (UM) 8*16kB (UM) 13*32kB (UM) 10*64kB (UM) 0*128kB 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2564kB
[  310.675248][T10152] Node 0 DMA32: 94*4kB (UME) 48*8kB (UME) 36*16kB (UME) 138*32kB (UME) 26*64kB (UME) 14*128kB (UME) 5*256kB (UM) 9*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 16120kB
[  310.675380][T10152] Node 1 DMA32: 1716*4kB (UME) 2183*8kB (UME) 805*16kB (UME) 732*32kB (UME) 267*64kB (UME) 81*128kB (UME) 29*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 12*2048kB (UM) 2*4096kB (M) = 141080kB
[  310.675527][T10152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.675542][T10152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.675556][T10152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.675571][T10152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.675585][T10152] 39660 total pagecache pages
[  310.675592][T10152] 875 pages in swap cache
[  310.675598][T10152] Free swap  = 117096kB
[  310.675605][T10152] Total swap = 124996kB
[  310.675612][T10152] 524155 pages RAM
[  310.675617][T10152] 0 pages HighMem/MovableOnly
[  310.675623][T10152] 216925 pages reserved
[  310.675629][T10152] 0 pages cma reserved
[  311.242865][T10172] bond9: entered promiscuous mode
[  311.487889][ T1438] ieee802154 phy0 wpan0: encryption failed: -22
[  311.487919][ T1438] ieee802154 phy1 wpan1: encryption failed: -22
[  311.523513][T10182] bond15: entered promiscuous mode
[  311.526441][T10182] 9pnet_virtio: no channels available for device syz
[  311.684852][ T5883] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  311.804856][ T3374] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  311.835428][ T5883] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  311.835453][ T5883] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  311.835880][ T5883] usb 5-1: config 0 has no interfaces?
[  311.836274][ T5883] usb 5-1: config 0 has no interfaces?
[  311.836952][ T5883] usb 5-1: config 0 has no interfaces?
[  311.837358][ T5883] usb 5-1: config 0 has no interfaces?
[  311.837734][ T5883] usb 5-1: config 0 has no interfaces?
[  311.838104][ T5883] usb 5-1: config 0 has no interfaces?
[  311.838578][ T5883] usb 5-1: config 0 has no interfaces?
[  311.838953][ T5883] usb 5-1: config 0 has no interfaces?
[  311.838969][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.840225][ T5883] usb 5-1: config 0 descriptor??
[  311.955787][ T3374] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  311.955810][ T3374] usb 7-1: too many configurations: 248, using maximum allowed: 8
[  311.956239][ T3374] usb 7-1: config 0 has no interfaces?
[  311.956635][ T3374] usb 7-1: config 0 has no interfaces?
[  311.957062][ T3374] usb 7-1: config 0 has no interfaces?
[  311.957479][ T3374] usb 7-1: config 0 has no interfaces?
[  311.957907][ T3374] usb 7-1: config 0 has no interfaces?
[  311.958365][ T3374] usb 7-1: config 0 has no interfaces?
[  311.958753][ T3374] usb 7-1: config 0 has no interfaces?
[  311.959195][ T3374] usb 7-1: config 0 has no interfaces?
[  311.959210][ T3374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.961545][ T3374] usb 7-1: config 0 descriptor??
[  311.972169][T10185] bond11: entered promiscuous mode
[  311.984665][T10185] 9pnet_virtio: no channels available for device syz
[  312.067159][ T3374] usb 5-1: USB disconnect, device number 28
[  312.166415][ T5883] usb 7-1: USB disconnect, device number 32
[  312.260968][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  312.364893][   T10] usb 8-1: new full-speed USB device number 32 using dummy_hcd
[  312.526346][   T10] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  312.526370][   T10] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  312.527058][   T10] usb 8-1: config 0 has no interfaces?
[  312.528102][   T10] usb 8-1: config 0 has no interfaces?
[  312.528626][   T10] usb 8-1: config 0 has no interfaces?
[  312.529058][   T10] usb 8-1: config 0 has no interfaces?
[  312.529455][   T10] usb 8-1: config 0 has no interfaces?
[  312.529839][   T10] usb 8-1: config 0 has no interfaces?
[  312.530219][   T10] usb 8-1: config 0 has no interfaces?
[  312.530592][   T10] usb 8-1: config 0 has no interfaces?
[  312.530608][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.532281][   T10] usb 8-1: config 0 descriptor??
[  312.746222][   T10] usb 8-1: USB disconnect, device number 32
[  312.961686][T10208] netlink: 'syz.0.1332': attribute type 1 has an invalid length.
[  313.112595][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  313.124854][ T1416] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  313.275405][ T1416] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  313.276327][ T1416] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.276349][ T1416] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  313.276362][ T1416] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  313.276372][ T1416] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  313.276391][ T1416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.279964][T10204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  313.280024][T10204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  313.281929][ T1416] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  313.284455][ T1416] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  313.284491][ T1416] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  313.320563][ T1416] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  313.321837][ T1416] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  313.321873][ T1416] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  313.324636][ T1416] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  313.504845][   T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  313.619974][ T1416] usb 6-1: USB disconnect, device number 36
[  313.622489][ T1416] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  313.631518][ T1416] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  313.634382][ T1416] keyspan 6-1:1.0: device disconnected
[  313.634837][   T25] usb 5-1: device descriptor read/64, error -71
[  313.874895][   T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  314.014837][   T25] usb 5-1: device descriptor read/64, error -71
[  314.135509][   T25] usb usb5-port1: attempt power cycle
[  314.264467][T10216] FAULT_INJECTION: forcing a failure.
[  314.264467][T10216] name failslab, interval 1, probability 0, space 0, times 0
[  314.264489][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.1.1339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.264504][T10216] Tainted: [L]=SOFTLOCKUP
[  314.264508][T10216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  314.264515][T10216] Call Trace:
[  314.264519][T10216]  <TASK>
[  314.264523][T10216]  dump_stack_lvl+0x100/0x190
[  314.264542][T10216]  should_fail_ex.cold+0x5/0xa
[  314.264557][T10216]  should_failslab+0xc2/0x120
[  314.264575][T10216]  __kmalloc_noprof+0xfc/0x840
[  314.264603][T10216]  ? rcu_is_watching+0x13/0xc0
[  314.264617][T10216]  ? tomoyo_realpath_from_path+0xb6/0x690
[  314.264636][T10216]  tomoyo_realpath_from_path+0xb6/0x690
[  314.264656][T10216]  tomoyo_path_number_perm+0x23c/0x580
[  314.264669][T10216]  ? tomoyo_path_number_perm+0x22e/0x580
[  314.264683][T10216]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  314.264697][T10216]  ? get_pid_task+0x106/0x250
[  314.264713][T10216]  ? __lock_acquire+0x5c0/0x1f40
[  314.264736][T10216]  ? __fget_files+0x34/0x3d0
[  314.264751][T10216]  ? find_held_lock+0x2b/0x80
[  314.264764][T10216]  ? __fget_files+0x215/0x3d0
[  314.264778][T10216]  ? hook_file_ioctl_common+0x140/0x440
[  314.264792][T10216]  ? __fget_files+0x215/0x3d0
[  314.264809][T10216]  ? __fget_files+0x21f/0x3d0
[  314.264826][T10216]  security_file_ioctl_compat+0xd3/0x230
[  314.264842][T10216]  __ia32_compat_sys_ioctl+0xc2/0x360
[  314.264857][T10216]  __do_fast_syscall_32+0x13a/0x8b0
[  314.264870][T10216]  ? lockdep_hardirqs_on+0x7d/0x110
[  314.264882][T10216]  do_fast_syscall_32+0x32/0x70
[  314.264894][T10216]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  314.264908][T10216] RIP: 0023:0xf747efec
[  314.264921][T10216] Code: Unable to access opcode bytes at 0xf747efc2.
[  314.264926][T10216] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  314.264939][T10216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca
[  314.264949][T10216] RDX: 0000000080000700 RSI: 0000000000000000 RDI: 0000000000000000
[  314.264958][T10216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  314.264968][T10216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  314.264977][T10216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  314.265000][T10216]  </TASK>
[  314.308470][T10216] ERROR: Out of memory at tomoyo_realpath_from_path.
[  314.381336][T10220] bond11: entered promiscuous mode
[  314.474876][   T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  314.496171][   T25] usb 5-1: device descriptor read/8, error -71
[  314.724837][ T1416] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  314.744844][   T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  314.778186][   T25] usb 5-1: device descriptor read/8, error -71
[  314.875615][ T1416] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  314.875649][ T1416] usb 6-1: too many configurations: 248, using maximum allowed: 8
[  314.876137][ T1416] usb 6-1: config 0 has no interfaces?
[  314.876614][ T1416] usb 6-1: config 0 has no interfaces?
[  314.877054][ T1416] usb 6-1: config 0 has no interfaces?
[  314.877523][ T1416] usb 6-1: config 0 has no interfaces?
[  314.877968][ T1416] usb 6-1: config 0 has no interfaces?
[  314.878422][ T1416] usb 6-1: config 0 has no interfaces?
[  314.878882][ T1416] usb 6-1: config 0 has no interfaces?
[  314.879383][ T1416] usb 6-1: config 0 has no interfaces?
[  314.879407][ T1416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.881987][ T1416] usb 6-1: config 0 descriptor??
[  314.895133][   T25] usb usb5-port1: unable to enumerate USB device
[  315.090544][ T1416] usb 6-1: USB disconnect, device number 37
[  316.359726][T10248] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  316.361614][T10248] xt_MASQUERADE: bad rangesize 29
[  316.379741][T10248] netdevsim netdevsim3: Direct firmware load for .
[  316.379741][T10248]  failed with error -2
[  316.379758][T10248] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  316.379758][T10248] 
[  316.825551][ T1416] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  316.843992][T10262] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  316.900029][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'.
[  316.951776][T10265] Cannot find add_set index 32767 as target
[  316.967493][T10265] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  316.975444][ T1416] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  316.976252][ T1416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.976274][ T1416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.979354][ T1416] usb 6-1: config 0 descriptor??
[  317.189097][ T1416] usbhid 6-1:0.0: can't add hid device: -71
[  317.189148][ T1416] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  317.193912][ T1416] usb 6-1: USB disconnect, device number 38
[  317.419711][T10278] /dev/sr0: Can't open blockdev
[  317.465974][   T44] kauditd_printk_skb: 23 callbacks suppressed
[  317.465991][   T44] audit: type=1800 audit(1792223707.742:1472): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1361" name="/newroot/351" dev="tmpfs" ino=1970 res=0 errno=0
[  317.467926][T10275] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  317.491591][T10282] netlink: 'syz.0.1363': attribute type 10 has an invalid length.
[  317.491750][T10282] geneve1: entered promiscuous mode
[  317.502504][T10282] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  317.504729][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  317.510559][T10282] bond4: option mode: unable to set because the bond device has slaves
[  317.625320][ T3374] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  317.638168][T10288] FAULT_INJECTION: forcing a failure.
[  317.638168][T10288] name failslab, interval 1, probability 0, space 0, times 0
[  317.638188][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.0.1365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  317.638203][T10288] Tainted: [L]=SOFTLOCKUP
[  317.638207][T10288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  317.638213][T10288] Call Trace:
[  317.638217][T10288]  <TASK>
[  317.638222][T10288]  dump_stack_lvl+0x100/0x190
[  317.638240][T10288]  should_fail_ex.cold+0x5/0xa
[  317.638256][T10288]  should_failslab+0xc2/0x120
[  317.638273][T10288]  __kmalloc_noprof+0xfc/0x840
[  317.638289][T10288]  ? kernfs_fop_read_iter+0x447/0x610
[  317.638305][T10288]  kernfs_fop_read_iter+0x447/0x610
[  317.638319][T10288]  ? rw_verify_area+0xce/0x6d0
[  317.638331][T10288]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  317.638345][T10288]  vfs_read+0x82e/0xb40
[  317.638361][T10288]  ? __pfx_vfs_read+0x10/0x10
[  317.638373][T10288]  ? find_held_lock+0x2b/0x80
[  317.638402][T10288]  ksys_read+0x12a/0x250
[  317.638415][T10288]  ? __pfx_ksys_read+0x10/0x10
[  317.638433][T10288]  do_int80_emulation+0x166/0x650
[  317.638447][T10288]  asm_int80_emulation+0x1a/0x20
[  317.638458][T10288] RIP: 0023:0xf71a77eb
[  317.638468][T10288] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  317.638478][T10288] RSP: 002b:00000000f542441c EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  317.638489][T10288] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f75ec4e0
[  317.638496][T10288] RDX: 00000000009b7000 RSI: 0000000000000000 RDI: 0000000000000000
[  317.638503][T10288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  317.638509][T10288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  317.638515][T10288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  317.638546][T10288]  </TASK>
[  317.784909][ T3374] usb 6-1: Using ep0 maxpacket: 32
[  317.785549][ T3374] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  317.790829][ T3374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.790874][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.156049][ T3374] usb 6-1: config 0 descriptor??
[  318.172633][ T3374] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  318.191221][ T3374] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  318.232606][T10294] netlink: 'syz.2.1366': attribute type 1 has an invalid length.
[  318.306838][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'.
[  318.383634][   T44] audit: type=1326 audit(1792223708.662:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.2.1368" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25fec code=0x0
[  318.433911][T10298] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  318.564413][ T3374] usb 6-1: USB disconnect, device number 39
[  318.569908][ T3374] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  318.622589][T10302] FAT-fs (nullb0): bogus number of reserved sectors
[  318.622602][T10302] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  318.626840][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1369'.
[  318.999836][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  319.133778][T10308] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  319.236425][T10318] program syz.0.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.236487][T10318] ata1.00: invalid command format 31
[  319.236591][T10317] program syz.0.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.236619][T10317] ata1.00: invalid command format 31
[  319.288850][T10319] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  320.714203][T10358] warning: `syz.0.1380' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  320.753741][T10361] syzkaller0: entered promiscuous mode
[  320.753755][T10361] syzkaller0: entered allmulticast mode
[  320.921480][T10363] null_blk: disk rnullb0 created
[  320.951453][   T44] audit: type=1326 audit(1792223711.232:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.0.1383" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x0
[  321.187137][T10368] netlink: NAT attribute has 8 unknown bytes
[  321.187156][T10368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.188029][T10368] syzkaller0: entered promiscuous mode
[  321.188041][T10368] syzkaller0: entered allmulticast mode
[  321.206471][   T44] audit: type=1326 audit(1792223711.492:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fefec code=0x0
[  321.257788][   T44] audit: type=1326 audit(1792223711.542:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.257939][   T44] audit: type=1326 audit(1792223711.542:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.258742][   T44] audit: type=1326 audit(1792223711.542:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.258774][   T44] audit: type=1326 audit(1792223711.542:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.258949][   T44] audit: type=1326 audit(1792223711.542:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.259045][   T44] audit: type=1326 audit(1792223711.542:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.3.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefec code=0x7ffc0000
[  321.347308][T10375] bond12: entered promiscuous mode
[  321.350487][T10375] 9pnet_virtio: no channels available for device syz
[  321.510982][T10381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1388'.
[  321.515759][T10381] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1388'.
[  321.526172][T10381] syz.2.1388 (10381) used obsolete PPPIOCDETACH ioctl
[  321.656294][ T1416] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  321.805255][ T1416] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  321.805278][ T1416] usb 6-1: too many configurations: 248, using maximum allowed: 8
[  321.805690][ T1416] usb 6-1: config 0 has no interfaces?
[  321.806543][ T1416] usb 6-1: config 0 has no interfaces?
[  321.806939][ T1416] usb 6-1: config 0 has no interfaces?
[  321.807330][ T1416] usb 6-1: config 0 has no interfaces?
[  321.807733][ T1416] usb 6-1: config 0 has no interfaces?
[  321.809544][ T1416] usb 6-1: config 0 has no interfaces?
[  321.809942][ T1416] usb 6-1: config 0 has no interfaces?
[  321.810341][ T1416] usb 6-1: config 0 has no interfaces?
[  321.810357][ T1416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.812023][ T1416] usb 6-1: config 0 descriptor??
[  321.857376][T10390] /dev/sg0: Can't lookup blockdev
[  322.016236][ T3374] usb 6-1: USB disconnect, device number 40
[  322.172346][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1393'.
[  322.178035][T10399] pim6reg: entered allmulticast mode
[  322.258107][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258255][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258341][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258426][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258506][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258588][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.258671][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.260005][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.260105][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'.
[  322.760454][T10414] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint
[  322.780176][T10414] pci 0000:00:05.0: BAR 0 [io  0xc0c0-0xc0df]
[  322.780237][T10414] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff]
[  322.780415][T10414] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref]
[  322.814187][T10412] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown.
[  322.824523][T10414] pci 0000:00:05.0: Adding to iommu group 5
[  322.901462][T10414] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[  322.902142][T10418] netlink: 'syz.1.1399': attribute type 16 has an invalid length.
[  322.902160][T10418] veth0_macvtap: entered allmulticast mode
[  322.915900][T10414] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[  322.917588][T10418] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd29
[  322.933870][T10414] pci 0000:00:1f.0: Adding to iommu group 8
[  322.957292][T10414] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned
[  322.962586][T10414] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned
[  322.964088][T10414] pci 0000:00:05.0: BAR 0 [io  0x2020-0x203f]: assigned
[  323.156647][T10420] FAT-fs (nullb0): bogus number of reserved sectors
[  323.156660][T10420] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  323.172618][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  323.176697][T10414] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[  323.404125][T10439] FAULT_INJECTION: forcing a failure.
[  323.404125][T10439] name failslab, interval 1, probability 0, space 0, times 0
[  323.404148][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.0.1408 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  323.404164][T10439] Tainted: [L]=SOFTLOCKUP
[  323.404168][T10439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  323.404175][T10439] Call Trace:
[  323.404179][T10439]  <TASK>
[  323.404184][T10439]  dump_stack_lvl+0x100/0x190
[  323.404203][T10439]  should_fail_ex.cold+0x5/0xa
[  323.404218][T10439]  should_failslab+0xc2/0x120
[  323.404237][T10439]  __kmalloc_noprof+0xfc/0x840
[  323.404252][T10439]  ? lsm_blob_alloc+0x68/0x90
[  323.404271][T10439]  lsm_blob_alloc+0x68/0x90
[  323.404287][T10439]  security_task_alloc+0x2a/0x260
[  323.404302][T10439]  copy_process+0x2c19/0x8430
[  323.404313][T10439]  ? futex_unqueue+0x133/0x2c0
[  323.404332][T10439]  ? __pfx_copy_process+0x10/0x10
[  323.404346][T10439]  ? _copy_from_user+0x59/0xd0
[  323.404361][T10439]  kernel_clone+0x176/0x9d0
[  323.404373][T10439]  ? __pfx_kernel_clone+0x10/0x10
[  323.404391][T10439]  __do_sys_clone3+0x214/0x290
[  323.404402][T10439]  ? __pfx___do_sys_clone3+0x10/0x10
[  323.404430][T10439]  __do_fast_syscall_32+0x13a/0x8b0
[  323.404442][T10439]  ? lockdep_hardirqs_on+0x7d/0x110
[  323.404453][T10439]  do_fast_syscall_32+0x32/0x70
[  323.404465][T10439]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.404479][T10439] RIP: 0023:0xf744efec
[  323.404493][T10439] Code: Unable to access opcode bytes at 0xf744efc2.
[  323.404498][T10439] RSP: 002b:00000000f54663dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3
[  323.404509][T10439] RAX: ffffffffffffffda RBX: 00000000f5466410 RCX: 0000000000000058
[  323.404515][T10439] RDX: 0000000000000000 RSI: 0000000000801400 RDI: 0000000000000000
[  323.404522][T10439] RBP: 0000000080000140 R08: 0000000000000000 R09: 0000000000000000
[  323.404528][T10439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  323.404535][T10439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.404549][T10439]  </TASK>
[  323.826983][T10452] syzkaller0: entered promiscuous mode
[  323.826997][T10452] syzkaller0: entered allmulticast mode
[  323.979200][T10456] Cannot find add_set index 32767 as target
[  324.395850][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  324.396657][T10477] FAT-fs (nullb0): bogus number of reserved sectors
[  324.396667][T10477] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  324.761776][T10487] Cannot find add_set index 32767 as target
[  325.077584][T10498] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  325.149177][T10489] lo speed is unknown, defaulting to 1000
[  325.149211][T10489] lo speed is unknown, defaulting to 1000
[  325.149320][T10489] FAULT_INJECTION: forcing a failure.
[  325.149320][T10489] name failslab, interval 1, probability 0, space 0, times 0
[  325.149339][T10489] CPU: 2 UID: 0 PID: 10489 Comm: syz.3.1427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.149355][T10489] Tainted: [L]=SOFTLOCKUP
[  325.149359][T10489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  325.149366][T10489] Call Trace:
[  325.149370][T10489]  <TASK>
[  325.149375][T10489]  dump_stack_lvl+0x100/0x190
[  325.149395][T10489]  should_fail_ex.cold+0x5/0xa
[  325.149410][T10489]  should_failslab+0xc2/0x120
[  325.149428][T10489]  kmem_cache_alloc_noprof+0x92/0x6a0
[  325.149443][T10489]  ? kernfs_add_one+0x611/0xaa0
[  325.149472][T10489]  ? __kernfs_new_node+0xd2/0xa10
[  325.149488][T10489]  __kernfs_new_node+0xd2/0xa10
[  325.149500][T10489]  ? kernfs_add_one+0x214/0xaa0
[  325.149517][T10489]  ? __pfx___kernfs_new_node+0x10/0x10
[  325.149529][T10489]  ? lock_acquire+0x1d1/0x380
[  325.149546][T10489]  ? kernfs_root+0x23/0x2a0
[  325.149563][T10489]  ? find_held_lock+0x2b/0x80
[  325.149577][T10489]  ? kernfs_root+0xee/0x2a0
[  325.149592][T10489]  ? kernfs_root+0xee/0x2a0
[  325.149612][T10489]  kernfs_new_node+0x117/0x150
[  325.149626][T10489]  kernfs_create_link+0xcc/0x240
[  325.149641][T10489]  sysfs_do_create_link_sd+0x90/0x140
[  325.149659][T10489]  sysfs_create_link+0x61/0xc0
[  325.149676][T10489]  device_add+0x553/0x1970
[  325.149692][T10489]  ? __pfx_device_add+0x10/0x10
[  325.149706][T10489]  ? mutex_init_lockdep+0xf1/0x120
[  325.149723][T10489]  ? rdma_counter_init+0x209/0x400
[  325.149743][T10489]  ib_register_device+0x88c/0xdd0
[  325.149760][T10489]  siw_newlink+0xb44/0xe70
[  325.149774][T10489]  nldev_newlink+0x3b0/0x630
[  325.149786][T10489]  ? __pfx_nldev_newlink+0x10/0x10
[  325.149841][T10489]  ? lock_acquire+0x1d1/0x380
[  325.149856][T10489]  ? rdma_nl_rcv_msg+0x168/0x6f0
[  325.149867][T10489]  ? __pfx___might_resched+0x10/0x10
[  325.149887][T10489]  ? security_capable+0x80/0x260
[  325.149899][T10489]  ? ns_capable+0xd2/0xf0
[  325.149914][T10489]  ? __pfx_nldev_newlink+0x10/0x10
[  325.149926][T10489]  rdma_nl_rcv_msg+0x392/0x6f0
[  325.149938][T10489]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  325.149951][T10489]  ? __lock_acquire+0x5c0/0x1f40
[  325.149970][T10489]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410
[  325.149984][T10489]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  325.150002][T10489]  ? netlink_deliver_tap+0x1ae/0xcc0
[  325.150017][T10489]  netlink_unicast+0x65f/0x950
[  325.150031][T10489]  ? __pfx_netlink_unicast+0x10/0x10
[  325.150047][T10489]  netlink_sendmsg+0x8b0/0xda0
[  325.150061][T10489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.150075][T10489]  ? apparmor_socket_sendmsg+0x165/0x280
[  325.150089][T10489]  ____sys_sendmsg+0xa4d/0xbe0
[  325.150105][T10489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.150118][T10489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.150137][T10489]  ? plist_check_list+0x1b8/0x280
[  325.150152][T10489]  ? plist_del+0x308/0x510
[  325.150168][T10489]  ___sys_sendmsg+0x190/0x1e0
[  325.150265][T10489]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.150284][T10489]  ? futex_wake+0x220/0x5e0
[  325.150304][T10489]  ? find_held_lock+0x2b/0x80
[  325.150327][T10489]  __sys_sendmsg+0x160/0x210
[  325.150342][T10489]  ? __pfx___sys_sendmsg+0x10/0x10
[  325.150364][T10489]  __do_fast_syscall_32+0x13a/0x8b0
[  325.150376][T10489]  ? lockdep_hardirqs_on+0x7d/0x110
[  325.150388][T10489]  do_fast_syscall_32+0x32/0x70
[  325.150400][T10489]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  325.150414][T10489] RIP: 0023:0xf73fefec
[  325.150427][T10489] Code: Unable to access opcode bytes at 0xf73fefc2.
[  325.150432][T10489] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  325.150443][T10489] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080002e00
[  325.150450][T10489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.150456][T10489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.150462][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.150468][T10489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  325.150483][T10489]  </TASK>
[  325.152085][T10489] siw: device registration error -12
[  325.217214][T10503] netlink: 'syz.1.1433': attribute type 1 has an invalid length.
[  325.351083][T10511] Cannot find add_set index 32767 as target
[  325.435543][T10507] netlink: zone id is out of range
[  325.435552][T10507] netlink: zone id is out of range
[  325.435556][T10507] netlink: zone id is out of range
[  325.435560][T10507] netlink: zone id is out of range
[  325.435563][T10507] netlink: zone id is out of range
[  325.435567][T10507] netlink: zone id is out of range
[  325.435735][T10507] netlink: get zone limit has 4 unknown bytes
[  325.541833][T10517] FAT-fs (nullb0): bogus number of reserved sectors
[  325.541846][T10517] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  325.635457][ T3374] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  325.711602][T10520] i2c i2c-1: dtv_property_process_set: SET cmd 0x20203a64 undefined
[  325.759328][T10525] bond12: entered promiscuous mode
[  325.786743][ T3374] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.787627][ T3374] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  325.787644][ T3374] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  325.787656][ T3374] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  325.790046][ T3374] usb 5-1: string descriptor 0 read error: -22
[  325.790102][ T3374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.795093][T10513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  325.795146][T10513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  325.795207][T10513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  325.829179][ T3374] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  325.909119][T10529] netlink: 'syz.2.1441': attribute type 1 has an invalid length.
[  326.015701][ T3374] usb 5-1: USB disconnect, device number 33
[  326.057045][T10533] 9pnet_virtio: no channels available for device syz
[  326.117663][   T42] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[  326.163607][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  326.167333][T10540] FAT-fs (nullb0): bogus number of reserved sectors
[  326.167345][T10540] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  326.275731][   T42] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  326.275765][   T42] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  326.276247][   T42] usb 8-1: config 0 has no interfaces?
[  326.276672][   T42] usb 8-1: config 0 has no interfaces?
[  326.277102][   T42] usb 8-1: config 0 has no interfaces?
[  326.277530][   T42] usb 8-1: config 0 has no interfaces?
[  326.278056][   T42] usb 8-1: config 0 has no interfaces?
[  326.278492][   T42] usb 8-1: config 0 has no interfaces?
[  326.278937][   T42] usb 8-1: config 0 has no interfaces?
[  326.279377][   T42] usb 8-1: config 0 has no interfaces?
[  326.279400][   T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.282327][   T42] usb 8-1: config 0 descriptor??
[  326.424883][ T3374] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  326.485636][   T42] usb 8-1: USB disconnect, device number 33
[  326.575544][ T3374] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  326.576705][ T3374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  326.576743][ T3374] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  326.576765][ T3374] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  326.576785][ T3374] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  326.576817][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.586029][T10542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.586185][T10542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.589616][ T3374] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  326.593826][ T3374] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  326.593892][ T3374] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  326.599814][ T3374] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  326.604322][ T3374] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  326.604384][ T3374] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  326.613015][ T3374] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  326.622122][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  326.911527][ T3374] usb 6-1: USB disconnect, device number 41
[  326.929698][ T3374] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  326.934968][ T3374] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  326.935611][ T3374] keyspan 6-1:1.0: device disconnected
[  327.177944][ T5741] Bluetooth: hci2: Malformed Event: 0x13
[  327.414897][ T3374] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  327.521514][T10554] __nla_validate_parse: 70 callbacks suppressed
[  327.521533][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1450'.
[  327.522492][T10554] netlink: 'syz.2.1450': attribute type 1 has an invalid length.
[  327.526677][T10553] FAT-fs (nullb0): bogus number of reserved sectors
[  327.526693][T10553] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  327.529739][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1451'.
[  327.565300][ T3374] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  327.566126][ T3374] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.567797][ T3374] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  327.567816][ T3374] usb 5-1: Product: syz
[  327.567827][ T3374] usb 5-1: Manufacturer: syz
[  327.567839][ T3374] usb 5-1: SerialNumber: syz
[  327.569287][ T3374] usb 5-1: config 0 descriptor??
[  327.571178][ T3374] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected
[  327.571371][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  327.571401][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88
[  327.573660][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  327.575166][ T3374] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  327.576424][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  327.577215][ T3374] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  327.578380][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  327.579366][ T3374] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  327.581381][ T3374] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  327.582239][ T3374] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  327.630207][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'.
[  327.904854][ T3374] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  328.054840][ T3374] usb 7-1: Using ep0 maxpacket: 32
[  328.057520][ T3374] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  328.058326][ T3374] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.058341][ T3374] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.058352][ T3374] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  328.058375][ T3374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.059668][ T3374] usb 7-1: config 0 descriptor??
[  328.479017][ T3374] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input72
[  328.627569][ T3374] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0004/input/input73
[  328.676851][ T3374] kye 0003:0458:5011.0004: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  328.799800][T10557] 9pnet_fd: p9_fd_create_tcp (10557): problem connecting socket to 127.0.0.1
[  328.891790][T10576] bond13: entered promiscuous mode
[  329.060773][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  329.224821][ T3374] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[  329.375451][ T3374] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  329.375475][ T3374] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  329.375918][ T3374] usb 8-1: config 0 has no interfaces?
[  329.376295][ T3374] usb 8-1: config 0 has no interfaces?
[  329.376725][ T3374] usb 8-1: config 0 has no interfaces?
[  329.377120][ T3374] usb 8-1: config 0 has no interfaces?
[  329.377496][ T3374] usb 8-1: config 0 has no interfaces?
[  329.377923][ T3374] usb 8-1: config 0 has no interfaces?
[  329.378357][ T3374] usb 8-1: config 0 has no interfaces?
[  329.378728][ T3374] usb 8-1: config 0 has no interfaces?
[  329.378780][ T3374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.381024][ T3374] usb 8-1: config 0 descriptor??
[  329.588186][ T3374] usb 8-1: USB disconnect, device number 34
[  329.744927][   T42] usb 7-1: reset high-speed USB device number 33 using dummy_hcd
[  329.885806][   T42] usb 7-1: device descriptor read/64, error -32
[  330.136246][   T42] usb 7-1: reset high-speed USB device number 33 using dummy_hcd
[  330.187790][ T3374] usb 5-1: USB disconnect, device number 34
[  330.189965][ T3374] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  330.201150][ T3374] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  330.210650][ T3374] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  330.213321][ T3374] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  330.213636][ T3374] keyspan 5-1:0.0: device disconnected
[  330.243437][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'.
[  330.264868][   T42] usb 7-1: device descriptor read/64, error -32
[  330.352540][T10591] netlink: 'syz.3.1458': attribute type 1 has an invalid length.
[  330.415550][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'.
[  330.506142][   T42] usb 7-1: reset high-speed USB device number 33 using dummy_hcd
[  330.526390][T10595] bond14: entered promiscuous mode
[  330.529666][   T42] usb 7-1: device descriptor read/8, error -32
[  330.654870][ T3374] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  330.807523][ T3374] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  330.808367][ T3374] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.808389][ T3374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  330.808402][ T3374] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  330.808413][ T3374] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  330.808432][ T3374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.810014][T10590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  330.810066][T10590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  330.814189][ T3374] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected
[  330.846666][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  330.846703][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  330.859162][ T3374] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  330.859891][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[  330.859924][ T3374] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6
[  330.875630][ T3374] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  331.015011][ T5883] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[  331.166978][ T5883] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  331.167003][ T5883] usb 8-1: too many configurations: 248, using maximum allowed: 8
[  331.170636][ T5883] usb 8-1: config 0 has no interfaces?
[  331.171035][ T5883] usb 8-1: config 0 has no interfaces?
[  331.171427][ T5883] usb 8-1: config 0 has no interfaces?
[  331.171807][ T5883] usb 8-1: config 0 has no interfaces?
[  331.177716][ T5883] usb 8-1: config 0 has no interfaces?
[  331.194853][ T5883] usb 8-1: config 0 has no interfaces?
[  331.195758][ T5883] usb 8-1: config 0 has no interfaces?
[  331.196148][ T5883] usb 8-1: config 0 has no interfaces?
[  331.196164][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.202022][ T5883] usb 8-1: config 0 descriptor??
[  331.371898][ T5883] usb 5-1: USB disconnect, device number 35
[  331.390243][ T5883] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  331.401351][ T5883] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  331.401698][ T5883] keyspan 5-1:1.0: device disconnected
[  331.461077][ T3374] usb 8-1: USB disconnect, device number 35
[  331.635519][ T1416] usb 7-1: USB disconnect, device number 33
[  332.111925][T10603] FAT-fs (nullb0): bogus number of reserved sectors
[  332.111937][T10603] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  332.120556][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1462'.
[  332.385606][ T1416] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  332.515634][ T5804] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  332.535351][ T1416] usb 5-1: Using ep0 maxpacket: 8
[  332.535806][ T1416] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  332.537096][ T1416] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  332.537118][ T1416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  332.537132][ T1416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  332.537144][ T1416] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 2767, setting to 1024
[  332.537156][ T1416] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  332.537167][ T1416] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.537186][ T1416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.665678][ T5804] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00
[  332.666362][ T5804] usb 7-1: config 0 has no interfaces?
[  332.667725][ T5804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  332.667737][ T5804] usb 7-1: Product: syz
[  332.667745][ T5804] usb 7-1: Manufacturer: syz
[  332.669590][ T5804] usb 7-1: config 0 descriptor??
[  333.440634][T10621] Cannot find add_set index 32767 as target
[  333.463837][T10621] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  333.601410][   T44] kauditd_printk_skb: 546 callbacks suppressed
[  333.601423][   T44] audit: type=1326 audit(1792223723.882:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747efec code=0x0
[  333.653010][   T44] audit: type=1326 audit(1792223723.932:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.653046][   T44] audit: type=1326 audit(1792223723.932:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.654086][   T44] audit: type=1326 audit(1792223723.932:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662329][   T44] audit: type=1326 audit(1792223723.932:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662356][   T44] audit: type=1326 audit(1792223723.942:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662413][   T44] audit: type=1326 audit(1792223723.942:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662435][   T44] audit: type=1326 audit(1792223723.942:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662454][   T44] audit: type=1326 audit(1792223723.942:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.662473][   T44] audit: type=1326 audit(1792223723.942:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1469" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  333.776602][T10627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1470'.
[  333.848991][T10629] Cannot find add_set index 32767 as target
[  333.881998][T10629] netlink: 'syz.3.1471': attribute type 1 has an invalid length.
[  334.078387][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'.
[  334.080117][T10631] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  334.136653][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'.
[  334.206716][T10634] FAT-fs (nullb0): bogus number of reserved sectors
[  334.206729][T10634] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  334.213008][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'.
[  334.490377][T10636] FAT-fs (nullb0): bogus number of reserved sectors
[  334.490391][T10636] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  334.493865][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1474'.
[  334.761151][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'.
[  335.201634][ T1416] usb 5-1: string descriptor 0 read error: -71
[  335.202259][ T1416] usb 5-1: usb_control_msg returned -71
[  335.202279][ T1416] usbtmc 5-1:16.0: can't read capabilities
[  335.229640][ T1416] usb 5-1: USB disconnect, device number 36
[  335.256207][T10643] FAT-fs (nullb0): bogus number of reserved sectors
[  335.256221][T10643] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  335.287166][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'.
[  335.287571][ T3374] usb 7-1: USB disconnect, device number 34
[  335.310125][T10645] netlink: 'syz.0.1478': attribute type 1 has an invalid length.
[  335.364041][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  335.449580][T10652] FAT-fs (nullb0): bogus number of reserved sectors
[  335.449594][T10652] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  335.452086][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'.
[  335.855109][T10657] Cannot find add_set index 32767 as target
[  335.877388][T10657] netlink: 'syz.1.1481': attribute type 1 has an invalid length.
[  336.849965][T10673] FAT-fs (nullb0): bogus number of reserved sectors
[  336.849979][T10673] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  336.869153][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'.
[  337.246467][ T3374] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  337.405051][ T3374] usb 6-1: Using ep0 maxpacket: 32
[  337.405514][ T3374] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  337.406331][ T3374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.406347][ T3374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.406357][ T3374] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  337.406376][ T3374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.407655][ T3374] usb 6-1: config 0 descriptor??
[  337.450628][T10677] Cannot find add_set index 32767 as target
[  337.469973][T10677] netlink: 'syz.0.1488': attribute type 1 has an invalid length.
[  337.833170][ T3374] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0005/input/input77
[  337.910096][ T3374] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0005/input/input78
[  337.969412][ T3374] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[  338.106482][T10675] 9pnet_fd: p9_fd_create_tcp (10675): problem connecting socket to 127.0.0.1
[  338.141744][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  338.147122][T10686] FAT-fs (nullb0): bogus number of reserved sectors
[  338.147134][T10686] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  338.233380][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  338.789074][T10696] Cannot find add_set index 32767 as target
[  338.822816][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  338.828131][T10696] netlink: 'syz.3.1494': attribute type 1 has an invalid length.
[  338.829200][T10698] FAT-fs (nullb0): bogus number of reserved sectors
[  338.829211][T10698] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  338.846204][T10698] __nla_validate_parse: 2 callbacks suppressed
[  338.846215][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'.
[  339.084832][   T25] usb 6-1: reset high-speed USB device number 42 using dummy_hcd
[  339.256884][   T25] usb 6-1: device descriptor read/64, error -32
[  339.505284][   T25] usb 6-1: reset high-speed USB device number 42 using dummy_hcd
[  339.664899][   T25] usb 6-1: device descriptor read/64, error -32
[  339.904822][   T25] usb 6-1: reset high-speed USB device number 42 using dummy_hcd
[  339.925141][   T25] usb 6-1: device descriptor read/8, error -32
[  340.193273][ T5741] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  340.244421][T10728] Cannot find add_set index 32767 as target
[  340.317357][T10730] Cannot find add_set index 32767 as target
[  340.569266][T10736] syzkaller1: entered promiscuous mode
[  340.569281][T10736] syzkaller1: entered allmulticast mode
[  340.628569][ T5804] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  340.672354][T10741] bond10: entered promiscuous mode
[  340.682306][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  340.683590][T10744] FAT-fs (nullb0): bogus number of reserved sectors
[  340.683608][T10744] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  340.698237][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1510'.
[  340.775451][ T5804] usb 8-1: Using ep0 maxpacket: 8
[  340.776219][ T5804] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  340.777148][ T5804] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  340.777213][ T5804] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  340.777243][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  340.777265][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  340.777284][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  340.777305][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  340.777327][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  340.777348][ T5804] usb 8-1: config 168 interface 0 has no altsetting 0
[  340.778250][ T5804] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  340.778275][ T5804] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  340.778302][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  340.778325][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  340.778346][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  340.778366][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  340.778387][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  340.778409][ T5804] usb 8-1: config 168 interface 0 has no altsetting 0
[  340.780386][ T5804] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  340.780412][ T5804] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  340.780444][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  340.780465][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  340.780485][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  340.780505][ T5804] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  340.780526][ T5804] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  340.780546][ T5804] usb 8-1: config 168 interface 0 has no altsetting 0
[  340.783300][ T5804] usb 8-1: string descriptor 0 read error: -22
[  340.783404][ T5804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.804423][ T5804] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  340.810329][   T42] usb 6-1: USB disconnect, device number 42
[  340.882667][T10747] FAT-fs (nullb0): bogus number of reserved sectors
[  340.882688][T10747] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  340.932724][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1511'.
[  340.998680][   T25] usb 8-1: USB disconnect, device number 36
[  341.204723][T10734] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1506'.
[  341.204924][ T5883] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  341.259642][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'.
[  341.300273][T10752] netlink: 'syz.2.1513': attribute type 13 has an invalid length.
[  341.365432][ T5883] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  341.365467][ T5883] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  341.366074][ T5883] usb 5-1: config 0 has no interfaces?
[  341.366683][ T5883] usb 5-1: config 0 has no interfaces?
[  341.367139][ T5883] usb 5-1: config 0 has no interfaces?
[  341.367614][ T5883] usb 5-1: config 0 has no interfaces?
[  341.368048][ T5883] usb 5-1: config 0 has no interfaces?
[  341.368887][ T5883] usb 5-1: config 0 has no interfaces?
[  341.369321][ T5883] usb 5-1: config 0 has no interfaces?
[  341.369807][ T5883] usb 5-1: config 0 has no interfaces?
[  341.369832][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.373503][ T5883] usb 5-1: config 0 descriptor??
[  341.439685][T10758] Cannot find add_set index 32767 as target
[  341.463321][T10758] netlink: 'syz.2.1516': attribute type 1 has an invalid length.
[  341.581474][ T3374] usb 5-1: USB disconnect, device number 37
[  341.753426][T10762] Cannot find add_set index 32767 as target
[  341.895074][ T5883] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  341.953596][ T5741] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  342.055365][ T5883] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  342.056268][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.056290][ T5883] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  342.056303][ T5883] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  342.056314][ T5883] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  342.056333][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.058407][T10760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.058501][T10760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.059726][ T5883] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  342.061122][ T5883] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  342.061157][ T5883] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  342.062006][ T5883] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  342.062839][ T5883] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  342.062872][ T5883] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  342.063596][ T5883] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  342.239115][T10771] FAT-fs (nullb0): bogus number of reserved sectors
[  342.239129][T10771] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  342.243455][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'.
[  342.382858][ T5804] usb 7-1: USB disconnect, device number 35
[  342.409652][ T5804] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  342.412802][ T5804] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  342.421629][ T5804] keyspan 7-1:1.0: device disconnected
[  342.545691][T10789] Cannot find add_set index 32767 as target
[  342.685698][ T3374] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  342.772263][T10792] FAT-fs (nullb0): bogus number of reserved sectors
[  342.772282][T10792] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  342.781788][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1528'.
[  342.796601][T10794] bond13: entered promiscuous mode
[  342.835554][ T3374] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  342.836385][ T3374] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.836403][ T3374] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  342.836431][ T3374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.053975][ T3374] usb 5-1: USB disconnect, device number 38
[  343.214922][ T5883] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  343.375889][ T5883] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  343.375914][ T5883] usb 6-1: too many configurations: 248, using maximum allowed: 8
[  343.376320][ T5883] usb 6-1: config 0 has no interfaces?
[  343.376709][ T5883] usb 6-1: config 0 has no interfaces?
[  343.377095][ T5883] usb 6-1: config 0 has no interfaces?
[  343.377460][ T5883] usb 6-1: config 0 has no interfaces?
[  343.377851][ T5883] usb 6-1: config 0 has no interfaces?
[  343.378227][ T5883] usb 6-1: config 0 has no interfaces?
[  343.378592][ T5883] usb 6-1: config 0 has no interfaces?
[  343.378957][ T5883] usb 6-1: config 0 has no interfaces?
[  343.378971][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.380222][ T5883] usb 6-1: config 0 descriptor??
[  343.587342][ T5883] usb 6-1: USB disconnect, device number 43
[  343.692850][T10803] Cannot find add_set index 32767 as target
[  343.942918][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'.
[  343.986747][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  344.253082][T10815] Cannot find add_set index 32767 as target
[  344.685352][   T25] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  344.845418][   T25] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  344.846242][   T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.846264][   T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  344.846276][   T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  344.846288][   T25] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  344.846307][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.850158][T10819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  344.850305][T10819] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  344.886844][   T25] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  344.888888][   T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  344.888922][   T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  344.892030][   T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  344.892732][   T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  344.892769][   T25] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  344.918647][   T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  345.039413][T10826] bond16: entered promiscuous mode
[  345.109313][T10825] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[  345.125467][T10825] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[  345.170007][T10825] pci 0000:00:1f.0: Adding to iommu group 8
[  345.201613][T10825] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[  345.285823][   T25] usb 8-1: USB disconnect, device number 37
[  345.298924][   T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  345.309069][   T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  345.309429][   T25] keyspan 8-1:1.0: device disconnected
[  345.420059][T10831] bond11: entered promiscuous mode
[  345.434195][T10831] 9pnet_virtio: no channels available for device syz
[  345.624841][ T5804] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[  345.775617][ T5804] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  345.775652][ T5804] usb 7-1: too many configurations: 248, using maximum allowed: 8
[  345.776161][ T5804] usb 7-1: config 0 has no interfaces?
[  345.776614][ T5804] usb 7-1: config 0 has no interfaces?
[  345.777062][ T5804] usb 7-1: config 0 has no interfaces?
[  345.777525][ T5804] usb 7-1: config 0 has no interfaces?
[  345.777956][ T5804] usb 7-1: config 0 has no interfaces?
[  345.778390][ T5804] usb 7-1: config 0 has no interfaces?
[  345.778849][ T5804] usb 7-1: config 0 has no interfaces?
[  345.779412][ T5804] usb 7-1: config 0 has no interfaces?
[  345.779443][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.783165][ T5804] usb 7-1: config 0 descriptor??
[  345.794938][   T25] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  345.945827][   T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  345.945861][   T25] usb 5-1: too many configurations: 248, using maximum allowed: 8
[  345.946452][   T25] usb 5-1: config 0 has no interfaces?
[  345.946998][   T25] usb 5-1: config 0 has no interfaces?
[  345.947518][   T25] usb 5-1: config 0 has no interfaces?
[  345.948029][   T25] usb 5-1: config 0 has no interfaces?
[  345.948587][   T25] usb 5-1: config 0 has no interfaces?
[  345.949120][   T25] usb 5-1: config 0 has no interfaces?
[  345.949649][   T25] usb 5-1: config 0 has no interfaces?
[  345.950174][   T25] usb 5-1: config 0 has no interfaces?
[  345.950200][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.952863][   T25] usb 5-1: config 0 descriptor??
[  345.993846][   T25] usb 7-1: USB disconnect, device number 36
[  346.161228][   T25] usb 5-1: USB disconnect, device number 39
[  346.181902][T10841] FAT-fs (nullb0): bogus number of reserved sectors
[  346.181916][T10841] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  346.184100][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'.
[  346.231359][T10843] Cannot find add_set index 32767 as target
[  346.409204][T10845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1547'.
[  346.459090][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'.
[  346.898889][T10852] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint
[  346.902638][T10852] pci 0000:00:1f.0: quirk: [io  0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO
[  346.909470][T10852] pci 0000:00:1f.0: Adding to iommu group 8
[  346.927866][T10852] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized
[  347.122927][T10861] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[  347.177291][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'.
[  347.520978][   T44] kauditd_printk_skb: 519 callbacks suppressed
[  347.520997][   T44] audit: type=1326 audit(1792223737.802:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.0.1559" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x0
[  347.584373][T10873] syzkaller0: entered promiscuous mode
[  347.584388][T10873] syzkaller0: entered allmulticast mode
[  347.702560][T10883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  347.729549][T10883] team0: Mode changed to "loadbalance"
[  347.737208][T10883] vlan0: entered promiscuous mode
[  347.739874][T10883] tipc: Started in network mode
[  347.739890][T10883] tipc: Node identity aaaaaaaaaa1a, cluster identity 4369
[  347.739958][T10883] tipc: Enabled bearer <eth:team0>, priority 0
[  347.809858][   T44] audit: type=1326 audit(1792223738.092:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.809887][   T44] audit: type=1326 audit(1792223738.092:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.810131][   T44] audit: type=1326 audit(1792223738.092:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.810334][   T44] audit: type=1326 audit(1792223738.092:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.810418][   T44] audit: type=1326 audit(1792223738.092:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.810640][   T44] audit: type=1326 audit(1792223738.092:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.811417][   T44] audit: type=1326 audit(1792223738.092:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.811440][   T44] audit: type=1326 audit(1792223738.092:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.811460][   T44] audit: type=1326 audit(1792223738.092:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000
[  347.964639][T10895] FAT-fs (nullb0): bogus number of reserved sectors
[  347.964654][T10895] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  347.973353][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'.
[  348.254924][ T5804] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  348.415743][ T5804] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  348.417914][ T5804] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  348.417936][ T5804] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  348.417954][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.423542][ T5804] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  348.423633][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81
[  348.423660][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1
[  348.424197][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  348.424228][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  348.428429][ T5804] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  348.429091][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  348.429123][ T5804] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  348.432229][ T5804] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  348.726524][ T3374] usb 8-1: USB disconnect, device number 38
[  348.741759][ T3374] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  348.754232][ T3374] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  348.760751][ T3374] keyspan 8-1:1.0: device disconnected
[  348.785546][ T5804] tipc: Node number set to 11578026
[  348.888539][T10914] bridge_slave_0: left allmulticast mode
[  348.888681][T10914] bridge_slave_0: left promiscuous mode
[  348.888859][T10914] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.905545][T10914] bridge_slave_1: left allmulticast mode
[  348.905567][T10914] bridge_slave_1: left promiscuous mode
[  348.905719][T10914] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.924640][T10914] bond0: (slave bond_slave_0): Releasing backup interface
[  348.936950][T10914] bond0: (slave bond_slave_1): Releasing backup interface
[  348.950185][T10914] team0: Port device team_slave_0 removed
[  348.953969][T10914] team0: Port device team_slave_1 removed
[  348.954647][T10914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.954664][T10914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.969360][T10914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.969381][T10914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.974180][T10914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  349.039702][T10915] team0: Mode changed to "loadbalance"
[  349.075395][T10914] tipc: Enabled bearer <eth:team0>, priority 0
[  349.282109][T10920] bond17: entered promiscuous mode
[  349.321763][T10923] Cannot find add_set index 32767 as target
[  349.387505][T10925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1578'.
qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0)
[  349.548663][T10929] ------------[ cut here ]------------
[  349.548674][T10929] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport'
[  349.548683][T10929] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#0: syz.3.1579/10929
[  349.557903][T10929] Modules linked in:
[  349.560397][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.3.1579 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  349.563751][T10929] Tainted: [L]=SOFTLOCKUP
[  349.565341][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  349.568599][T10929] RIP: 0010:remove_proc_entry+0x4f5/0x610
[  349.570407][T10929] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d d9 e1 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 80 7c 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 4c ae 49 ff 48 8d 7d 18 48 b8 00
[  349.576630][T10929] RSP: 0000:ffffc900038f76a0 EFLAGS: 00010246
[  349.578690][T10929] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888071c1f75c
[  349.581258][T10929] RDX: ffff88801e3ee5dc RSI: ffffffff8c0b7c80 RDI: ffffffff924bd700
[  349.583685][T10929] RBP: ffff888071c1f738 R08: ffff888071c1ed5c R09: ffffed100e383ed3
[  349.586202][T10929] R10: ffff888071c1f69b R11: 0000000000000000 R12: ffff888071c1f680
[  349.588998][T10929] R13: ffff88801e3ee500 R14: ffff888071c1ed38 R15: dffffc0000000000
[  349.591525][T10929] FS:  0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f53f5b40
[  349.594323][T10929] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  349.596792][T10929] CR2: 00000000331d4ff8 CR3: 000000006f54d000 CR4: 0000000000352ef0
[  349.599597][T10929] Call Trace:
[  349.600928][T10929]  <TASK>
[  349.602053][T10929]  ? __pfx_remove_proc_entry+0x10/0x10
[  349.603831][T10929]  ? mtree_load+0x3a4/0xb50
[  349.605372][T10929]  ? __pfx_mtree_load+0x10/0x10
[  349.606976][T10929]  ? rcu_is_watching+0x13/0xc0
[  349.608534][T10929]  unregister_irq_proc+0x206/0x2a0
[  349.610197][T10929]  ? __pfx_unregister_irq_proc+0x10/0x10
[  349.612004][T10929]  free_desc+0x89/0x330
[  349.613369][T10929]  ? __pfx_free_desc+0x10/0x10
[  349.615008][T10929]  ? kasan_quarantine_put+0x104/0x240
[  349.616839][T10929]  ? lockdep_hardirqs_on+0x7d/0x110
[  349.618537][T10929]  ? irq_domain_free_irqs+0x3e0/0x5c0
[  349.619667][T10932] bond12: entered promiscuous mode
[  349.621919][T10929]  irq_free_descs+0x84/0xc0
[  349.623424][T10929]  irq_domain_free_irqs+0x46a/0x5c0
[  349.625252][T10929]  mp_unmap_irq+0xf8/0x130
[  349.626743][T10929]  ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10
[  349.628741][T10929]  acpi_unregister_gsi_ioapic+0x40/0x60
[  349.630519][T10929]  acpi_unregister_gsi+0x25/0x40
[  349.632134][T10929]  acpi_pci_irq_disable+0x275/0x360
[  349.633834][T10929]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  349.635783][T10929]  pcibios_disable_device+0x89/0xb0
[  349.637470][T10929]  do_pci_disable_device+0x9f/0x100
[  349.638667][T10932] 9pnet_virtio: no channels available for device syz
[  349.641263][T10929]  ? __pfx_do_pci_disable_device+0x10/0x10
[  349.643147][T10929]  pci_disable_device+0x130/0x270
[  349.646227][T10929]  pci_device_remove+0xb2/0x1d0
[  349.647916][T10929]  ? __pfx_pci_device_remove+0x10/0x10
[  349.649735][T10929]  device_remove+0xcb/0x180
[  349.651232][T10929]  device_release_driver_internal+0x44e/0x620
[  349.653185][T10929]  pci_stop_bus_device+0x120/0x160
[  349.654946][T10929]  pci_stop_and_remove_bus_device+0x58/0xa0
[  349.656857][T10929]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  349.658934][T10929]  remove_store+0x123/0x140
[  349.660410][T10929]  ? __pfx_remove_store+0x10/0x10
[  349.662039][T10929]  ? find_held_lock+0x2b/0x80
[  349.663582][T10929]  ? sysfs_file_kobj+0xe4/0x290
[  349.665225][T10929]  ? sysfs_file_kobj+0xe4/0x290
[  349.666825][T10929]  ? __pfx_remove_store+0x10/0x10
[  349.668447][T10929]  dev_attr_store+0x58/0x80
[  349.669930][T10929]  ? __pfx_dev_attr_store+0x10/0x10
[  349.671621][T10929]  sysfs_kf_write+0xf2/0x150
[  349.673090][T10929]  kernfs_fop_write_iter+0x3e0/0x5f0
[  349.674856][T10929]  ? __pfx_sysfs_kf_write+0x10/0x10
[  349.676530][T10929]  vfs_write+0x6af/0x1050
[  349.677922][T10929]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  349.679735][T10929]  ? __pfx_vfs_write+0x10/0x10
[  349.681251][T10929]  ? find_held_lock+0x2b/0x80
[  349.682738][T10929]  ksys_write+0x12a/0x250
[  349.684136][T10929]  ? __pfx_ksys_write+0x10/0x10
[  349.685782][T10929]  __do_fast_syscall_32+0x13a/0x8b0
[  349.687428][T10929]  do_fast_syscall_32+0x32/0x70
[  349.688950][T10929]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  349.690926][T10929] RIP: 0023:0xf73fefec
[  349.692261][T10929] Code: Unable to access opcode bytes at 0xf73fefc2.
[  349.694441][T10929] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  349.697156][T10929] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400
[  349.699990][T10929] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  349.702754][T10929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  349.705338][T10929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  349.707870][T10929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  349.711709][T10929]  </TASK>
[  349.712703][T10929] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  349.714983][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.3.1579 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  349.718337][T10929] Tainted: [L]=SOFTLOCKUP
[  349.719713][T10929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  349.722854][T10929] Call Trace:
[  349.723948][T10929]  <TASK>
[  349.724918][T10929]  dump_stack_lvl+0x100/0x190
[  349.726729][T10929]  vpanic+0x553/0x970
[  349.728208][T10929]  ? __pfx_vpanic+0x10/0x10
[  349.730175][T10929]  panic+0xd1/0xe0
[  349.731649][T10929]  ? __pfx_panic+0x10/0x10
[  349.733088][T10929]  check_panic_on_warn.cold+0x19/0x34
[  349.734835][T10929]  ? remove_proc_entry+0x4e7/0x610
[  349.736462][T10929]  __warn.cold+0x191/0x318
[  349.737905][T10929]  __report_bug+0x30f/0x440
[  349.739344][T10929]  ? remove_proc_entry+0x4e7/0x610
[  349.740951][T10929]  ? __pfx___report_bug+0x10/0x10
[  349.742537][T10929]  ? __do_fast_syscall_32+0x13a/0x8b0
[  349.744269][T10929]  ? do_raw_spin_lock+0x128/0x260
[  349.745866][T10929]  ? find_held_lock+0x2b/0x80
[  349.747358][T10929]  ? proc_entry_rundown+0x158/0x1e0
[  349.748984][T10929]  ? proc_entry_rundown+0x158/0x1e0
[  349.750614][T10929]  report_bug_entry+0xe2/0x290
[  349.752123][T10929]  ? remove_proc_entry+0x4f5/0x610
[  349.753743][T10929]  handle_bug+0x1cd/0x2a0
[  349.755144][T10929]  exc_invalid_op+0x17/0x50
[  349.756589][T10929]  asm_exc_invalid_op+0x1a/0x20
[  349.758216][T10929] RIP: 0010:remove_proc_entry+0x4f5/0x610
[  349.760006][T10929] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d d9 e1 89 0f 49 8b 95 d0 00 00 00 48 c7 c6 80 7c 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 4c ae 49 ff 48 8d 7d 18 48 b8 00
[  349.766003][T10929] RSP: 0000:ffffc900038f76a0 EFLAGS: 00010246
[  349.767920][T10929] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888071c1f75c
[  349.770388][T10929] RDX: ffff88801e3ee5dc RSI: ffffffff8c0b7c80 RDI: ffffffff924bd700
[  349.772856][T10929] RBP: ffff888071c1f738 R08: ffff888071c1ed5c R09: ffffed100e383ed3
[  349.775363][T10929] R10: ffff888071c1f69b R11: 0000000000000000 R12: ffff888071c1f680
[  349.777834][T10929] R13: ffff88801e3ee500 R14: ffff888071c1ed38 R15: dffffc0000000000
[  349.780322][T10929]  ? __pfx_remove_proc_entry+0x10/0x10
[  349.782037][T10929]  ? mtree_load+0x3a4/0xb50
[  349.783505][T10929]  ? __pfx_mtree_load+0x10/0x10
[  349.785058][T10929]  ? rcu_is_watching+0x13/0xc0
[  349.786591][T10929]  unregister_irq_proc+0x206/0x2a0
[  349.788228][T10929]  ? __pfx_unregister_irq_proc+0x10/0x10
[  349.789995][T10929]  free_desc+0x89/0x330
[  349.791316][T10929]  ? __pfx_free_desc+0x10/0x10
[  349.792818][T10929]  ? kasan_quarantine_put+0x104/0x240
[  349.794539][T10929]  ? lockdep_hardirqs_on+0x7d/0x110
[  349.796185][T10929]  ? irq_domain_free_irqs+0x3e0/0x5c0
[  349.797873][T10929]  irq_free_descs+0x84/0xc0
[  349.799345][T10929]  irq_domain_free_irqs+0x46a/0x5c0
[  349.800981][T10929]  mp_unmap_irq+0xf8/0x130
[  349.802360][T10929]  ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10
[  349.804255][T10929]  acpi_unregister_gsi_ioapic+0x40/0x60
[  349.805913][T10929]  acpi_unregister_gsi+0x25/0x40
[  349.807377][T10929]  acpi_pci_irq_disable+0x275/0x360
[  349.808951][T10929]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[  349.810641][T10929]  pcibios_disable_device+0x89/0xb0
[  349.812197][T10929]  do_pci_disable_device+0x9f/0x100
[  349.813841][T10929]  ? __pfx_do_pci_disable_device+0x10/0x10
[  349.815709][T10929]  pci_disable_device+0x130/0x270
[  349.817294][T10929]  pci_device_remove+0xb2/0x1d0
[  349.818847][T10929]  ? __pfx_pci_device_remove+0x10/0x10
[  349.820639][T10929]  device_remove+0xcb/0x180
[  349.822069][T10929]  device_release_driver_internal+0x44e/0x620
[  349.823977][T10929]  pci_stop_bus_device+0x120/0x160
[  349.825592][T10929]  pci_stop_and_remove_bus_device+0x58/0xa0
[  349.827456][T10929]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[  349.829504][T10929]  remove_store+0x123/0x140
[  349.830938][T10929]  ? __pfx_remove_store+0x10/0x10
[  349.832516][T10929]  ? find_held_lock+0x2b/0x80
[  349.834001][T10929]  ? sysfs_file_kobj+0xe4/0x290
[  349.835555][T10929]  ? sysfs_file_kobj+0xe4/0x290
[  349.837101][T10929]  ? __pfx_remove_store+0x10/0x10
[  349.838684][T10929]  dev_attr_store+0x58/0x80
[  349.840137][T10929]  ? __pfx_dev_attr_store+0x10/0x10
[  349.841775][T10929]  sysfs_kf_write+0xf2/0x150
[  349.843245][T10929]  kernfs_fop_write_iter+0x3e0/0x5f0
[  349.844903][T10929]  ? __pfx_sysfs_kf_write+0x10/0x10
[  349.846560][T10929]  vfs_write+0x6af/0x1050
[  349.847940][T10929]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  349.849689][T10929]  ? __pfx_vfs_write+0x10/0x10
[  349.851212][T10929]  ? find_held_lock+0x2b/0x80
[  349.852657][T10929]  ksys_write+0x12a/0x250
[  349.854035][T10929]  ? __pfx_ksys_write+0x10/0x10
[  349.855628][T10929]  __do_fast_syscall_32+0x13a/0x8b0
[  349.857276][T10929]  do_fast_syscall_32+0x32/0x70
[  349.858823][T10929]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  349.860822][T10929] RIP: 0023:0xf73fefec
[  349.862126][T10929] Code: Unable to access opcode bytes at 0xf73fefc2.
[  349.864233][T10929] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  349.866862][T10929] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400
[  349.869586][T10929] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  349.872124][T10929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  349.874625][T10929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  349.877125][T10929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  349.879612][T10929]  </TASK>
[  349.881304][T10929] Kernel Offset: disabled
[  349.882672][T10929] Rebooting in 86400 seconds..