last executing test programs:

8m54.568307712s ago: executing program 3 (id=1761):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000200))
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x88c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x443}], 0x1}}], 0x2, 0x2090)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

8m51.992103782s ago: executing program 3 (id=1766):
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x568, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x534, 0x2, [@TCA_BPF_ACT={0x530, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xee, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b254"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1e4, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0x51, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad033"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x108, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x2d, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e927785322"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}]}, 0x568}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000300)=0xe11d)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x7, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x700, 0x886, 0x3}})
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x12, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x2f, 0x6f, 0x80, 0x0, 0x24, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x3}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a40)={@multicast2, @private}, &(0x7f0000000a80)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x10, 0x20, 0x1000, 0x96, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x67, 0x0, 0x1a, 0x29, 0x0, @multicast2, @local, {[@generic={0x94, 0x7, "9fcbf2577a"}, @timestamp_prespec={0x44, 0x14, 0x4e, 0x3, 0x3, [{@broadcast, 0xa}, {@broadcast, 0x5}]}]}}}}})
getsockname$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000bc0)=0x14)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

8m51.488474897s ago: executing program 3 (id=1769):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x546b, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0)

8m49.746521088s ago: executing program 3 (id=1774):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x9, 0x80809, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r6 = dup(r4)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
mprotect(&(0x7f00003ab000/0x4000)=nil, 0x4000, 0x6)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
writev(r8, &(0x7f0000000180)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}], 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2400)
ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0xc, 0x10022, 0x3, 0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130005002cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0a01000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

8m48.644291391s ago: executing program 3 (id=1777):
r0 = socket(0x1, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xa0c, 0x4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f00000000c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x1, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6a062, 0x41c23}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1a7b383a, 0x1, 0x1ff}}]}]}]}, 0x4c}}, 0x0)

8m48.266888118s ago: executing program 3 (id=1778):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x848, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x818, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xd82, 0x80000000, 0x3, 0x1, 0xe4, 0x8, 0x8, 0x1, 0x7, 0x6, 0xc0000, 0x7, 0x4, 0x2f9, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x0, 0xfffffffb, 0x5, 0x1, 0x380000, 0x3, 0x9, 0x9, 0x1ff, 0x400, 0x3, 0x3, 0x10, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4, 0x81, 0x80000000, 0x0, 0x5, 0xf, 0x0, 0x1000, 0x10000, 0x0, 0x4, 0x4, 0x6, 0x0, 0xfffffffb, 0x1, 0x0, 0x73ee, 0x7ff, 0x4, 0x800, 0x200, 0x3, 0x4, 0x2, 0x6, 0x5, 0xe, 0x9, 0x4, 0x2, 0x3, 0x4, 0x6, 0x6, 0x80, 0xa, 0xa, 0x1da, 0x1, 0x5, 0x7, 0x3, 0x0, 0x1, 0x6, 0x8000, 0xbcca, 0x7e5, 0x3, 0xf, 0x1, 0x5, 0x7, 0xfff, 0x8, 0x1, 0x8001, 0xe, 0xd, 0x645, 0x0, 0x7, 0x6, 0x7f, 0xffffff81, 0x401, 0x401, 0x3, 0xd3, 0x100, 0x5, 0x7, 0x10000, 0x7, 0x800, 0x5240, 0x1000, 0x0, 0x5e, 0x8000, 0xda289fc, 0x1, 0x1, 0x80000001, 0x4, 0x5be, 0x3, 0x5, 0x0, 0x3f, 0x2, 0x5, 0xa, 0x100, 0x3, 0x9, 0x401, 0xe4b, 0x6, 0x3, 0x4, 0x8, 0x1, 0x9, 0xc, 0x8, 0xfffffffe, 0x0, 0x9, 0x9, 0x1, 0xffffffff, 0x7, 0x800, 0x3, 0x0, 0x1, 0x9, 0xd3fb, 0x5, 0xffffffff, 0x400, 0x2, 0x200, 0x3e1e, 0x10000, 0x81, 0x4, 0x9, 0x5, 0x8, 0xffff, 0x1, 0x0, 0x7, 0x71, 0x6, 0x2, 0x9, 0x9, 0xb, 0xfffffffe, 0x200, 0x8, 0x6, 0xee7a, 0x7c61c8d9, 0x7, 0x7ff, 0x6, 0x7, 0x401, 0x4a3f, 0x2, 0x7, 0x7, 0x2, 0x1, 0x9, 0x9, 0x3, 0x7, 0xe, 0x2, 0x0, 0x7, 0x9, 0x4, 0x200, 0x1, 0x0, 0x2, 0x8, 0x6, 0xc34de82, 0xd, 0x0, 0x0, 0x0, 0x8, 0x6, 0x6b6f, 0xfffeffff, 0x0, 0xc, 0x65, 0x0, 0x40, 0x4, 0x4, 0x9, 0x4, 0x80000001, 0x35, 0x4, 0x3bf, 0xe90, 0x5, 0x7, 0x95d, 0x4, 0x2, 0x0, 0x3, 0x212, 0x1, 0x2, 0x1, 0x80, 0x6, 0x8, 0x80000001, 0x4, 0x7, 0x5, 0xb, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x0, 0x48bc, 0x9, 0x5, 0x101, 0x40, 0x1, 0x7, 0x100, 0x8, 0xa76a, 0x4, 0xe2, 0x0, 0x6, 0x83f4, 0x20, 0xaa, 0x7, 0x0, 0x7, 0x7, 0x20a, 0x86e, 0x2, 0x50, 0x0, 0xff, 0x8, 0x3, 0x3, 0x100, 0x7, 0x85b, 0x4, 0x8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x401, 0x0, 0x7, 0x1, 0xd, 0x8, 0xfffeffff, 0x0, 0x1, 0xe16, 0x101, 0x4, 0x8, 0x9, 0x8, 0x0, 0x90, 0x3, 0x1, 0x7344, 0x6, 0xfff, 0xed38, 0xb0f9, 0x8, 0x400, 0x879, 0x2, 0x4, 0x8b8, 0x2, 0x1, 0xffffff7f, 0xffff8001, 0xa605, 0x4fa9, 0x4859, 0x8, 0xfffffffc, 0x6, 0x7fffffff, 0x84ee, 0xf, 0x2, 0xb, 0x4, 0xffff, 0x4, 0x10001, 0x5, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x1, 0x4, 0x3, 0x4, 0xd4c5, 0xa, 0x7, 0x2, 0x2, 0x2fd4e867, 0x4, 0xe, 0x9, 0x8, 0x3, 0x0, 0x7d, 0x9, 0x8, 0x5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x6, 0x0, 0xc4, 0xfffffff8, 0x5, 0x4, 0x86b978a9, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x5, 0x4, 0xb9, 0x0, 0x5e4, 0xffffffff, 0x3a39de97, 0x3, 0x3ff, 0x4d, 0x7, 0x3, 0xa, 0x80, 0x1, 0x2e5c912e, 0x900000, 0xc73d, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x7fff, 0x1d6, 0x0, 0x100, 0x4, 0x1, 0x6, 0x7, 0x40, 0x5, 0x3, 0x0, 0x2ced, 0xa7a, 0x8, 0x75c, 0x93ca, 0x8, 0x9, 0x10, 0x7, 0x82f9, 0x7, 0x1000, 0xa8e, 0xfff, 0x5, 0xfff, 0x262, 0x81, 0x4, 0x2, 0xff, 0xfffffffb, 0xffff, 0xb36, 0x5, 0x8, 0x10000, 0xda, 0x428, 0xd, 0x1, 0xb0e, 0x2, 0x4, 0x4000, 0x7, 0xfff, 0xf, 0x56, 0x800, 0x401, 0xfff, 0x3, 0x1, 0x6, 0x0, 0xf0, 0x3, 0x5, 0x7dae8f6b, 0xffffffff, 0x3, 0x5, 0x5, 0xf7, 0xfffffff7, 0x6, 0x80, 0x4c6, 0x70d, 0x101, 0x40, 0x4, 0x3, 0x5, 0x2, 0x5, 0x2, 0x0, 0x9, 0x8, 0x7, 0x13050aa4, 0x8000, 0x1ff, 0x7, 0xfff, 0xfaa, 0x0, 0x6, 0x8, 0x40, 0x7, 0x1, 0x8]}]}]}}]}, 0x848}}, 0x800)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x222, 0x0)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000200)) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async)
r4 = getpid() (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_generic(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x17c, 0x2c, 0x200, 0x70bd25, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid=r4}, @nested={0xfd, 0x83, 0x0, 0x1, [@generic="c529e4f2001c05b0e066504adf15fc2c27e9659f085178ba081a1584015cbb8ec9e992ae21b83287fb24858b705327671e808e446b21e09bb7f1a00df3623d72932084411f64e47d690bb4cb29fb021ca6ef96c18de9b04f553c0aee0d9839a6296f4da5aad588eb2e62bf898de4f31850a13d1053ece7c6eff3ec7dfbf604134a4176e33914d655017529485ad7b70662014205e05192291ac6afd74c0d0d860d7b31db5910a840a5c4719cb44197e62849b30747c336758a382fa10f6fdc276f3732d4ecbf4a8d344c45ccc06c992d0ef8ad1dd1408d7f05", @typed={0x8, 0xa3, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x13c}, @typed={0xa, 0x7, 0x0, 0x0, @str='{-,[,\x00'}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x3}]}, @generic="30e6956279bfa3ada621a2cfc20eddcc664dc44045317b6bdff12d3b632596e3b522689b1beb09ab7b6de362f35c8e7220fd57e265f26394a3fb81e1b68774ce223400710fe09df1008fe5df217dc8812a804c9b78a09405713d3c90a7a7b1cb"]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040010)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x900) (async)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)

8m32.959375545s ago: executing program 32 (id=1778):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x848, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x818, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xd82, 0x80000000, 0x3, 0x1, 0xe4, 0x8, 0x8, 0x1, 0x7, 0x6, 0xc0000, 0x7, 0x4, 0x2f9, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x0, 0xfffffffb, 0x5, 0x1, 0x380000, 0x3, 0x9, 0x9, 0x1ff, 0x400, 0x3, 0x3, 0x10, 0x7, 0x3, 0x0, 0x3, 0x9, 0x4, 0x81, 0x80000000, 0x0, 0x5, 0xf, 0x0, 0x1000, 0x10000, 0x0, 0x4, 0x4, 0x6, 0x0, 0xfffffffb, 0x1, 0x0, 0x73ee, 0x7ff, 0x4, 0x800, 0x200, 0x3, 0x4, 0x2, 0x6, 0x5, 0xe, 0x9, 0x4, 0x2, 0x3, 0x4, 0x6, 0x6, 0x80, 0xa, 0xa, 0x1da, 0x1, 0x5, 0x7, 0x3, 0x0, 0x1, 0x6, 0x8000, 0xbcca, 0x7e5, 0x3, 0xf, 0x1, 0x5, 0x7, 0xfff, 0x8, 0x1, 0x8001, 0xe, 0xd, 0x645, 0x0, 0x7, 0x6, 0x7f, 0xffffff81, 0x401, 0x401, 0x3, 0xd3, 0x100, 0x5, 0x7, 0x10000, 0x7, 0x800, 0x5240, 0x1000, 0x0, 0x5e, 0x8000, 0xda289fc, 0x1, 0x1, 0x80000001, 0x4, 0x5be, 0x3, 0x5, 0x0, 0x3f, 0x2, 0x5, 0xa, 0x100, 0x3, 0x9, 0x401, 0xe4b, 0x6, 0x3, 0x4, 0x8, 0x1, 0x9, 0xc, 0x8, 0xfffffffe, 0x0, 0x9, 0x9, 0x1, 0xffffffff, 0x7, 0x800, 0x3, 0x0, 0x1, 0x9, 0xd3fb, 0x5, 0xffffffff, 0x400, 0x2, 0x200, 0x3e1e, 0x10000, 0x81, 0x4, 0x9, 0x5, 0x8, 0xffff, 0x1, 0x0, 0x7, 0x71, 0x6, 0x2, 0x9, 0x9, 0xb, 0xfffffffe, 0x200, 0x8, 0x6, 0xee7a, 0x7c61c8d9, 0x7, 0x7ff, 0x6, 0x7, 0x401, 0x4a3f, 0x2, 0x7, 0x7, 0x2, 0x1, 0x9, 0x9, 0x3, 0x7, 0xe, 0x2, 0x0, 0x7, 0x9, 0x4, 0x200, 0x1, 0x0, 0x2, 0x8, 0x6, 0xc34de82, 0xd, 0x0, 0x0, 0x0, 0x8, 0x6, 0x6b6f, 0xfffeffff, 0x0, 0xc, 0x65, 0x0, 0x40, 0x4, 0x4, 0x9, 0x4, 0x80000001, 0x35, 0x4, 0x3bf, 0xe90, 0x5, 0x7, 0x95d, 0x4, 0x2, 0x0, 0x3, 0x212, 0x1, 0x2, 0x1, 0x80, 0x6, 0x8, 0x80000001, 0x4, 0x7, 0x5, 0xb, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x0, 0x48bc, 0x9, 0x5, 0x101, 0x40, 0x1, 0x7, 0x100, 0x8, 0xa76a, 0x4, 0xe2, 0x0, 0x6, 0x83f4, 0x20, 0xaa, 0x7, 0x0, 0x7, 0x7, 0x20a, 0x86e, 0x2, 0x50, 0x0, 0xff, 0x8, 0x3, 0x3, 0x100, 0x7, 0x85b, 0x4, 0x8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x401, 0x0, 0x7, 0x1, 0xd, 0x8, 0xfffeffff, 0x0, 0x1, 0xe16, 0x101, 0x4, 0x8, 0x9, 0x8, 0x0, 0x90, 0x3, 0x1, 0x7344, 0x6, 0xfff, 0xed38, 0xb0f9, 0x8, 0x400, 0x879, 0x2, 0x4, 0x8b8, 0x2, 0x1, 0xffffff7f, 0xffff8001, 0xa605, 0x4fa9, 0x4859, 0x8, 0xfffffffc, 0x6, 0x7fffffff, 0x84ee, 0xf, 0x2, 0xb, 0x4, 0xffff, 0x4, 0x10001, 0x5, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x1, 0x4, 0x3, 0x4, 0xd4c5, 0xa, 0x7, 0x2, 0x2, 0x2fd4e867, 0x4, 0xe, 0x9, 0x8, 0x3, 0x0, 0x7d, 0x9, 0x8, 0x5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x6, 0x0, 0xc4, 0xfffffff8, 0x5, 0x4, 0x86b978a9, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x5, 0x4, 0xb9, 0x0, 0x5e4, 0xffffffff, 0x3a39de97, 0x3, 0x3ff, 0x4d, 0x7, 0x3, 0xa, 0x80, 0x1, 0x2e5c912e, 0x900000, 0xc73d, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x7fff, 0x1d6, 0x0, 0x100, 0x4, 0x1, 0x6, 0x7, 0x40, 0x5, 0x3, 0x0, 0x2ced, 0xa7a, 0x8, 0x75c, 0x93ca, 0x8, 0x9, 0x10, 0x7, 0x82f9, 0x7, 0x1000, 0xa8e, 0xfff, 0x5, 0xfff, 0x262, 0x81, 0x4, 0x2, 0xff, 0xfffffffb, 0xffff, 0xb36, 0x5, 0x8, 0x10000, 0xda, 0x428, 0xd, 0x1, 0xb0e, 0x2, 0x4, 0x4000, 0x7, 0xfff, 0xf, 0x56, 0x800, 0x401, 0xfff, 0x3, 0x1, 0x6, 0x0, 0xf0, 0x3, 0x5, 0x7dae8f6b, 0xffffffff, 0x3, 0x5, 0x5, 0xf7, 0xfffffff7, 0x6, 0x80, 0x4c6, 0x70d, 0x101, 0x40, 0x4, 0x3, 0x5, 0x2, 0x5, 0x2, 0x0, 0x9, 0x8, 0x7, 0x13050aa4, 0x8000, 0x1ff, 0x7, 0xfff, 0xfaa, 0x0, 0x6, 0x8, 0x40, 0x7, 0x1, 0x8]}]}]}}]}, 0x848}}, 0x800)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x222, 0x0)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000200)) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async)
r4 = getpid() (async)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_generic(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x17c, 0x2c, 0x200, 0x70bd25, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid=r4}, @nested={0xfd, 0x83, 0x0, 0x1, [@generic="c529e4f2001c05b0e066504adf15fc2c27e9659f085178ba081a1584015cbb8ec9e992ae21b83287fb24858b705327671e808e446b21e09bb7f1a00df3623d72932084411f64e47d690bb4cb29fb021ca6ef96c18de9b04f553c0aee0d9839a6296f4da5aad588eb2e62bf898de4f31850a13d1053ece7c6eff3ec7dfbf604134a4176e33914d655017529485ad7b70662014205e05192291ac6afd74c0d0d860d7b31db5910a840a5c4719cb44197e62849b30747c336758a382fa10f6fdc276f3732d4ecbf4a8d344c45ccc06c992d0ef8ad1dd1408d7f05", @typed={0x8, 0xa3, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x13c}, @typed={0xa, 0x7, 0x0, 0x0, @str='{-,[,\x00'}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x3}]}, @generic="30e6956279bfa3ada621a2cfc20eddcc664dc44045317b6bdff12d3b632596e3b522689b1beb09ab7b6de362f35c8e7220fd57e265f26394a3fb81e1b68774ce223400710fe09df1008fe5df217dc8812a804c9b78a09405713d3c90a7a7b1cb"]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040010)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x900) (async)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)

2m30.551317167s ago: executing program 0 (id=3216):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'tunl0\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0xb, 0x2, 0x38}, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0xd001}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xffffff00], 'wg2\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4fb, 0x5], 0x8, 0x2, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x54000, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x37, 0x4, 0x54f8084f, 0x8, 0x1, 0x10, 0xcd, 0xb, 0x40, 0x6, 0x7, 0x9, 0x4, 0xc3, 0xdb, 0x3, [0x4, 0xff]}})
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r3=>0x0, 0xa}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r3, 0x9, 0x3d, 0x3, 0x8000, 0x9, 0x0, 0x4, {0x0, @in={{0x2, 0x4e20, @local}}, 0x5, 0x5, 0x6, 0xb7f, 0xffffffff}}, &(0x7f0000000180)=0xb0)

2m30.334054287s ago: executing program 0 (id=3218):
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a78314"], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3) (async)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x110, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x110, 0xd}}], 0x30}, 0x84) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1, 0x0, 0x11}, 0x21) (async)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r5})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0xa, 0x0, &(0x7f0000000280)=0xfffffffffffffe70) (async)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xd, 0x9, 0x8, 0x3, 0x6, 0x4, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0xe, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
syz_open_dev$evdev(&(0x7f00000003c0), 0x100000000, 0x400980) (async)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async)
syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000006020600000b24"], 0x0)

2m29.878611871s ago: executing program 0 (id=3220):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r1}, 0x18)
io_setup(0x3ff, &(0x7f0000000500)) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x1002, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1, 0x2}])
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x40)

2m29.61509061s ago: executing program 0 (id=3222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x14}}, 0x4008800)
recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x2000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
ioctl$RTC_VL_CLR(r2, 0x7014)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x264c00, 0x0)
syz_usb_connect(0x3, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="120101021e436d105e04f800e5e00102030109022c00012a09207f0904b270000e01002f08240201800296080924020101020806f709240202030006000891949a3f52dd10e5dd1409cb2e1b14fec696f41e7731a5"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m26.500427644s ago: executing program 0 (id=3228):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201100100000008ef17a4600000000000010902240001000000090904001009030003000921fcff0001222900201ceaad00000009fc"], 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x46, {0x46, 0x10, "17deeb290a0b03ca9aefae161757f109660492c8f12003af0d8944b1c21d6f3769be68781eb5305e9bce40688b2cc119d16ffc5e50e9c5ada540af96edd6d26f90dab61c"}}, 0x0}, 0x0)

2m25.931630035s ago: executing program 0 (id=3231):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
mremap(&(0x7f0000161000/0x400000)=nil, 0x400000, 0x4000, 0x0, &(0x7f000063a000/0x4000)=nil)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', <r6=>0x0})
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x250, 0x12, 0xb02, 0x70bd2d, 0x25dfdbfb, {0x2a, 0x5, 0xb, 0x17, {0x4e23, 0x4e24, [0x6, 0x10000, 0x0, 0x8001], [0x9, 0x8001, 0x5, 0x3], r6, [0xffffff7f]}, 0x3, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "db55661cf2bc5aac3c36822ad6b058553259bc5c296bcd6df613398ec4b662a7d57ba11a25b6d65f69361c1cb83c3c572621c11c46f2ab985e41747a92934c56527d95341d57317a5821523dc554ddc7294c2da42fa8cff80ab42be775474e07564542552a433ee83084431ca443b52d1555c2bca3091c71a76917fcfe118d14afbc83da78e147f263bac73be1a4b3e8b4d2"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "8ce3359fd0d76d7711cba1cf9f0b131fb5385f3e33082ff9ccc58f917ffe26a696fe3cb83221211ce2da7afc083bf1ea332f587740adfcd5262745e6a41d72166290070b333ce097cf769603d2224aad49e29a8b05378728fc530c32edccd3a0f96c7e0fc2ab09f211d20268502816cfd6dc436a87b1ce2600a315e362569d3b18210443b71647dadf88332aa428c4c7d1b1dd6d276657213dbaa590844c9483e515a62fc237acdd285630d28830436bcc5b1ddfb84cf2566dbd8f392e6cbbe26b4f3ec2b0307bf5c3b495d8d64f30dca092de45a6c6e44439a1d4f402697979a24a2a6602b424d9b8931a2865060642"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "9891b85f8f2786f33bafbcb701709764ae06311142358de5714c86f82ccae17642c6ca09a011c1db0ea1229639ce7b93914f1c35482535115f9a6ebd638b25ba2f0d0635af5b9049526f0541ed1e882e53774880a1dc43cec1b3f2552a6ceaf41f34deaaca2750fad492692048f7b8015e"}]}, 0x250}, 0x1, 0x0, 0x0, 0xc010}, 0x81)
io_uring_enter(r2, 0x2319, 0x43fb, 0x16, 0x0, 0x0)

2m25.085992303s ago: executing program 33 (id=3231):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
mremap(&(0x7f0000161000/0x400000)=nil, 0x400000, 0x4000, 0x0, &(0x7f000063a000/0x4000)=nil)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', <r6=>0x0})
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f00000022c0)={0x250, 0x12, 0xb02, 0x70bd2d, 0x25dfdbfb, {0x2a, 0x5, 0xb, 0x17, {0x4e23, 0x4e24, [0x6, 0x10000, 0x0, 0x8001], [0x9, 0x8001, 0x5, 0x3], r6, [0xffffff7f]}, 0x3, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "db55661cf2bc5aac3c36822ad6b058553259bc5c296bcd6df613398ec4b662a7d57ba11a25b6d65f69361c1cb83c3c572621c11c46f2ab985e41747a92934c56527d95341d57317a5821523dc554ddc7294c2da42fa8cff80ab42be775474e07564542552a433ee83084431ca443b52d1555c2bca3091c71a76917fcfe118d14afbc83da78e147f263bac73be1a4b3e8b4d2"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "8ce3359fd0d76d7711cba1cf9f0b131fb5385f3e33082ff9ccc58f917ffe26a696fe3cb83221211ce2da7afc083bf1ea332f587740adfcd5262745e6a41d72166290070b333ce097cf769603d2224aad49e29a8b05378728fc530c32edccd3a0f96c7e0fc2ab09f211d20268502816cfd6dc436a87b1ce2600a315e362569d3b18210443b71647dadf88332aa428c4c7d1b1dd6d276657213dbaa590844c9483e515a62fc237acdd285630d28830436bcc5b1ddfb84cf2566dbd8f392e6cbbe26b4f3ec2b0307bf5c3b495d8d64f30dca092de45a6c6e44439a1d4f402697979a24a2a6602b424d9b8931a2865060642"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "9891b85f8f2786f33bafbcb701709764ae06311142358de5714c86f82ccae17642c6ca09a011c1db0ea1229639ce7b93914f1c35482535115f9a6ebd638b25ba2f0d0635af5b9049526f0541ed1e882e53774880a1dc43cec1b3f2552a6ceaf41f34deaaca2750fad492692048f7b8015e"}]}, 0x250}, 0x1, 0x0, 0x0, 0xc010}, 0x81)
io_uring_enter(r2, 0x2319, 0x43fb, 0x16, 0x0, 0x0)

8.568067047s ago: executing program 6 (id=3891):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028008001f0004"], 0x44}, 0x1, 0x0, 0x0, 0x20040861}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028008001f0004"], 0x44}, 0x1, 0x0, 0x0, 0x20040861}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) (async)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044011}, 0x4) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044011}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000050)
ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x17f)

6.119490058s ago: executing program 1 (id=3906):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="0010e60000000000a900000000000000000000000000000000000000000000ffffffffffffff000000000000000000eeff00000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000080000000000003c"], 0xfc}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r2, 0x400, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0)

6.100625252s ago: executing program 1 (id=3907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000880)={0xc0, 0x9}, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b03, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2a10018, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@flag='nomand'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}})

5.876152492s ago: executing program 5 (id=3908):
syz_usb_connect$midi(0x4, 0x35, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x9b, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x0, 0x4, 0x80, {0x8, 0x25, 0x1, 0x4, "4d05f45e"}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x83e}}, {0xfffffffffffffdfa, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40e}}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/mdstat\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f00000030c0)=""/4110, 0x100e)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000007bc0)="f78d9ca38fff48f3be5216344841265365", 0x11}], 0x1, 0x0, 0x0, 0x4000814}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.472669672s ago: executing program 6 (id=3911):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x1, 0x3, 0x6})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xfffff014}, {0x6}]}, 0x10)

5.375827162s ago: executing program 6 (id=3912):
openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbb87a0e6519f5964df9937f561de9b944d1e381fed329743cf2af711d48d2f1413118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e00000000", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000d00)}, {&(0x7f0000000680)="58d17a9d27049368247c2cdbc7cbb6b3386ec1d7e727fc0645aca37f010014175facd2f7a353179a380236a9bce2ee436a9c230ebe1a58846b79cff0eb8d807ff7cf21f0a778a872fc45e78164bf40651ff87c7de83b898e024b178c92716c5660c6b7a3b2214ecbb9", 0x69}], 0x3, &(0x7f0000000740), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="fb0e075d9290a3cd8fe2abb9228b04ae7b56495c44cfcca66de5197e40d8c39e441bd96b8619d71f087eb67c8175ee9ddac35131b66230b361e860e5b67e", 0x3e}, {&(0x7f00000008c0)="d3780dbea2efe9d3e5990147e73b2934603581d15f604d94e08f56c43c66ec4e1334e30930f9932281e478eb37a512cf80346f34a70f8bc03bfffad133182728b58138b38dd5eba0aaeab2b725adb2959bd2d35f780c2b60d71a7be603e87ff1ce1035cfac9600287b1a3b187909f3b48edb91889026c73facf2b642606872d3a64a097767bde00f293841b98c6c544e7120815e1baf38cc95f836a59e88f925cd676e390652b31c448414b9596445d2b2de34a7d389fd4a4ea71fc356", 0xbd}], 0x2, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x67}], 0x30, 0x400c804}, {0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="280000000000000017010000020000000d0000001af8e1667fa091006cf493ab4300000000000000180000000000000017010000040000000c00000000000000f0000000000000001701000002000000d600000030f9a1ab739a44e8317b430d87de97fad5b8e475ea74f76cf512c118dc5a02592bad41c1796003fd90dcb01e59e5fe9bb5454e63bb728c0af3a1c2a40089a7f322bab5bb15419d64fec7dfb8a78820843360b9f0296ce0f9d181eba16f6b18a5a318db5fa633921c4d23033113899573700e31e732b44b00a405829cf8358c42839cb0a67d3bcd6d493272eb5a342e6c92f485ba73820962c72b8baaf85a7f3449d6cd6986758297ee64acff23ab5ed39e088bc1c30ef24eb4f31fe64157a2c2ca3451633d450b79f78bfa9b3ed4871e03f2633f9541daaeb01e2aba46000000000000c418b24777f362fd7e51bcf23474928290c64359f84bdc35acb25714282d7fd88a44026e3c1e1c1c36d83442f7d4a8e9ec6c5f4c369672e9cf7a845abaae6a1851479580e114b4c40551eb4302336ee041822553cac42efe4e197bf60e478147f698321db1e48c502b22067796cdfe367c3c3cf01688d05089074475a8677d09c228e53054b4ce79bd0a63727b0f93ad512886e319bd30b7743dc6451dcfc3fd"], 0x130, 0x20048415}], 0x4, 0x45)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
socket$rxrpc(0x21, 0x2, 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
r7 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x20016}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000400)='hostfs\x00', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)

4.203387768s ago: executing program 1 (id=3916):
r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c2403020703000400070081090401000001022000090401010101022000090501090002030b040825010000400400090402000001022000090402010101021900092402020400cc1c051024010201000400000008b8000000030905820908"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="54567b59ef5d", 0x0, 0x800, 0x10064, 0xffffffffffffffff, 0x0})
r4 = openat$cgroup_int(r2, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x9, 0x1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x50)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(r4, &(0x7f0000000640)=[{&(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}], 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x3, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
r7 = socket(0x2, 0x5, 0x6)
symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
truncate(&(0x7f0000000080)='./file0\x00', 0x1)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0xa)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)

4.120963429s ago: executing program 4 (id=3917):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
pipe(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fanotify_init(0x200, 0x48801)
fanotify_mark(r6, 0x1, 0x1001, r4, 0x0)
write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48)
syz_open_procfs$namespace(0x0, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff})
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e300250002", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c032abd7000fedbdf250b000000080006000000ffff0800070000000000", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000000000ffff7f00000108000200050000000800030005000000080003000400000005000500ff00000008000200030000000800020005000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.035501038s ago: executing program 6 (id=3918):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x21c5d715, r2, 0x80000})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0xef7})
unshare(0x22020400)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2004004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x8, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240))
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000340)={{<r5=>r1, &(0x7f0000000080)='/dev/kvm\x00', 0x80100, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x100]}, {0x0, 0x5, 0x238d10a1, 0x3}}, 0x3d3, &(0x7f00000001c0), &(0x7f0000000240)=0x480000}, {[0xed, 0x1, 0xc]}, 0x2b, 0x40, &(0x7f0000000280)=""/64})
recvmmsg(r5, &(0x7f0000002c40)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/61, 0x3d}], 0x4, &(0x7f0000000840)=""/4, 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/20, 0x14}, {&(0x7f00000008c0)=""/192, 0xc0}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000000a40)=""/114, 0x72}], 0x4, &(0x7f0000000b00)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, &(0x7f0000002bc0)=""/73, 0x49}, 0x8001}], 0x3, 0x42, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r4, 0x0)
unshare(0x48020f80)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x2000000, 0x0, 0xfffffffe}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.934976099s ago: executing program 2 (id=3919):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
close(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48)
sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc)
splice(r2, 0x0, r4, 0x0, 0x714f, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0xfff6, 0x2001, 0x642, 0x5}, 'syz0\x00', 0x4e})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz1\x00', {0x9, 0x4, 0x6, 0x4b9c}, 0x40, [0x8, 0x6, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0xc, 0xfff, 0x80000000, 0x48000, 0x5, 0x2, 0x8, 0x4, 0xa, 0x8, 0xfffffffd, 0xd37, 0x2, 0xfdd, 0x9, 0x7, 0x400, 0x2, 0xe, 0xa3, 0x4, 0x2, 0x8, 0x1ff, 0x80000000, 0x8, 0x5, 0x5, 0x2, 0x1, 0x8000, 0x3, 0x9, 0xfffffffe, 0x5, 0xa80, 0x101, 0x6, 0xfffff800, 0xa, 0xfffffffe, 0x9, 0x80000000, 0x119, 0x1, 0x8a, 0x9, 0x2d12, 0x3ff, 0x80000001, 0x9, 0x200, 0x6, 0x80000001, 0x4, 0x81], [0x9, 0x0, 0x9, 0xc, 0x9, 0x5, 0xe48b, 0x5, 0x4, 0x1, 0x400, 0x0, 0x7, 0x2800, 0x3, 0x5, 0x3, 0x4ef, 0x9, 0x10001, 0xa, 0x2, 0x2, 0x3, 0x2, 0x200, 0x81, 0x6, 0x3, 0x5, 0x9, 0x0, 0x8000000, 0x9, 0xa6, 0x7, 0x285d, 0x5, 0x4, 0x2, 0xfffffffe, 0x6, 0x2, 0x7, 0x4, 0x1, 0x1, 0x0, 0x6, 0xfffffffd, 0x8001, 0x326f, 0x0, 0xf61, 0x6, 0x1, 0x9, 0x3, 0x8, 0x9, 0x8, 0x7f, 0x3, 0x4], [0x2, 0x1, 0x7, 0x80000000, 0x2, 0x635102d9, 0x4, 0x62, 0xfffffff8, 0x1, 0x7, 0x40, 0x0, 0x8, 0x5, 0x1, 0x80000001, 0x4, 0x80000001, 0x6, 0x1, 0x7, 0xea, 0x80, 0x5e98, 0x5, 0xe9b3, 0x4, 0x5, 0x0, 0xffc0, 0x6, 0x0, 0x7, 0x81, 0x1ff, 0x7fff, 0x4, 0x80000001, 0x3ff, 0x6, 0x738a, 0x8953, 0x100000, 0x6, 0x2, 0x9, 0x8, 0x1, 0xc0000, 0x2, 0x8, 0x101, 0x2, 0x80, 0xdf, 0x7, 0xd, 0x6, 0x7, 0x6290, 0x2, 0x60a69cfe, 0x404], [0xc447, 0x2, 0x3, 0xc6, 0x5, 0x6, 0xff, 0xc0d, 0x9, 0x9a6, 0x3, 0x5, 0x3, 0x4a9, 0x5, 0x7, 0x100000, 0x9e2e, 0xb634, 0x80000000, 0x0, 0x4, 0x5, 0x10001, 0xff, 0x3, 0xfc000000, 0x0, 0x1, 0xb, 0x3, 0x1, 0x5, 0x2, 0x6, 0x8, 0x3, 0x5, 0x2, 0x8, 0x402, 0xc4d, 0x2, 0x400, 0x81, 0x4a0, 0x9, 0x81, 0x101, 0x4, 0xfffffff9, 0xf7e, 0x8, 0x5b9a, 0x3, 0x3, 0x7fffffff, 0xb1c1, 0xa9, 0xff, 0xfffffffe, 0x7f, 0x7, 0x5]}, 0x45c)

3.767202677s ago: executing program 6 (id=3920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x40000063, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r6 = accept4(r3, 0x0, 0x0, 0x800)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdc03, {0x0, 0x0, 0x0, 0x0, 0x4200a, 0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d04070a00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00Gn'], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r10 = eventfd2(0x4, 0x0)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000040)={0x2, r10})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2.827470231s ago: executing program 5 (id=3921):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x50}}, 0x40020)
r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f00000028c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003400000004000000000000002400000000000000290000003200000000000000000000000000ffff00000000e7"], 0x40}}], 0x1, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000030c0)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x40, 0x21, 0xd8, {0xd8, 0x23, "653a9592873ad0226ab71c9728a66f7127804f0f6663b9bf125e1057551da15489286ca4dd5c5a11eaad4628c0d868c9f5887ecfd5e2205eed92bbd5b7f17087e7256b3de84ec0d579f4022caaf6762700b9c3aa7aaa03147be99683251426eb97ccfc6e525a19e22987203641fb6bf4b79391711cb7c8a254c82a6fbe91582b87c3da338fa23868605bc7538f4c500ae2035fb46deb1e6d2aa8702bf2c86b2ad46c978a3acd8aa983426b2463e1617bb7e87f054756cfebf09cf81e96a172b49f47b77c97b83042adf2058162612da8d4c864be1355"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0xe, 0x2b, "025d50e09e111b7b9452bde42c70ae81e0573021d44434b994e664ccbf7f29150634aa12bbcd3c2c5b9dc4"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0), &(0x7f0000000700)={0x40, 0x5, 0x6, "c51464297284"}})
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000000)={0x5, 0x4, 0x1, 0x0, '\x00', 0x109a7})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000"/130], 0x148}}, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x18)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x0, 0x0, 0x2004000], [0x81, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x400000], [0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x2}, {0x63f}, {0xffffffe, 0xfffffff, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0xc, 0x4}, {0x1ff, 0x7f}, {0x7}, {0x0, 0x1}, {0x401}], '\x00', 0x1, 0x0, 0x0, 0xf8})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000080)="116b41319ef13386d7fd40ac")

2.722314437s ago: executing program 2 (id=3922):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4201, 0x10) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
r1 = eventfd2(0x1020006, 0x800) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0) (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x80000000}) (async, rerun: 32)
io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x0, 0x0, 0x4, 0x0, 0x1, r1}]) (async, rerun: 32)
futex_waitv(&(0x7f0000000940)=[{0x4e7, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000b80)={0x77359400}, 0x1)
tee(r0, r0, 0x6, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ppoll(&(0x7f0000000280)=[{r4, 0x8100}, {r3, 0x40}, {r1, 0x8000}], 0x3, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0xad1]}, 0x8) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x38, r6, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r6, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="e6c6e824d07acc27baf9dd93220593d338699a01fb6a1f"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000005240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x800)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)

2.579272823s ago: executing program 2 (id=3923):
r0 = socket$inet6(0xa, 0x80002, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async, rerun: 32)
r3 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1014, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x304}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040) (async)
write$binfmt_aout(r2, 0x0, 0xffffffdb) (async, rerun: 64)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (rerun: 64)
fadvise64(r5, 0x18, 0x0, 0x4) (async, rerun: 64)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (rerun: 64)

2.551298472s ago: executing program 2 (id=3924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xa, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x7c}}, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)={0x20179e01})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x90, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x8003, 0x4)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b)
ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000080)={0x9, 0x8, 0x0, 0x7fffffff, 0x4})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x2, 0xd3, 0x1, 0x8001}, {0x1, 0x5, 0x0, 0x2}, {0x9, 0xff, 0x7, 0x5542f95c}, {0x4, 0x5, 0x9, 0x3}, {0x2, 0x5, 0x1, 0x921}]}, 0x10)

2.499779392s ago: executing program 1 (id=3925):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xa}, {0xfff1, 0xfff3}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016800800", @ANYRES32=r2], 0x38}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004003}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a00)={'gre0\x00', <r10=>0x0, 0x8, 0x8080, 0x6, 0xa, {{0xa, 0x4, 0x1, 0x2e, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@generic={0x44, 0x5, "b9a34a"}, @ssrr={0x89, 0xb, 0xc7, [@rand_addr=0x64010102, @remote]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', <r11=>0x0, 0x29, 0x7, 0x0, 0x9, 0x28, @mcast1, @loopback, 0x8000, 0x700, 0x3, 0x401}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmmsg$inet(r6, &(0x7f0000000d40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000180)="d2e9d3a0b683e40284a6d00edaec75fb0d989ddd6c82a56617bfeabd82aee3347f66ea9ce16184206b1178100215a0cdeb25bc5d2425ea89d024abb6133e03e2729215c3b85949808adffbd43670696867b37c654bef7cd3af1b80b7beb9516cc5f5cb73edfdd0802c5bdab9f672e35e8bb37fbb3df510527dd2", 0x7a}, {&(0x7f0000000200)="40c0d124a4c609228ba654", 0xb}, {&(0x7f0000000340)="747e7bf48d4fc37e86b39d4d792db330ce55946c4e881130a640b40c193099aa501d578a3ee722ab0fd42de2393fbd3c1267507748dd9bba7f0cdcf1f2b08be30d", 0x41}, {&(0x7f00000003c0)="9fc99819bf6d4544af1786204210ae725fcd72a749378f392a230dcc5105833c24710f1491ad8edd40311cfb21ae56d71e1f450ab793902358a28aaf63e3563f6a4b8d168941a74c5f6b9b91fe6b75132ca0609bc6c92a62cabb83b3a0748fb4390b4f28f4516eede37bc3dec949b9c74123db43d9749b8c56086626cdac8e3d3bd2df02b9afc99986173d3b344f04a8", 0x90}, {&(0x7f0000000540)="a1e429f905b4cf2e2ac76aaca75bf438c1aeb52bff1cb5b995559aeb181fb92e9a7509d4e9a9fd573a2d9c0a22b6b2665d4ac4691693464675846fd3214b084fc4dcc604b5d1328458696039126b3fd915afea9aebf09f382d7a55cb57b94720d08086a763fd213e9e13223e76412679a4a9de250f8ad10a4a54b1f461a550ab7bcaedd7861590af932389e4040a17ab1843dcf743f9eb0b8d12554ed8ab141b2d4f9dc59f5219b6116be7dc2e", 0xad}, {&(0x7f00000006c0)="10193e2b97abe33b6b05fd6cdf57091bb80f05eed4700f43e81dab1ce74894024d1094c1340c318cc486cc071533855cbc22a0ab78d8060b2f6c510d1eef73c3486c1d7dc55441bd41f57dd0080f24a580b93d93cc1e2de84c1621c4ffb6c6a28b0d67ce601d74baebac764de026c1ded4a2103a4c6b2d2dc9986b3ab80344768cbe9bf35eb9cda90e4d6ba0ed9449c72916a40ee9a073411bacf5d93c88fe84b410cb43d765edb33c1622b2a6d7610a4d03adba1b184c79f224ec392ae36dc6db0d7697fae0d0ac1faa54e30f9ae6ed83c734847a68b4137fc8d0a581b069ce312f683b", 0xe4}, {&(0x7f00000007c0)="c07ee9b8f6338d1c475259f7e9107493965cab69df8cc0cdbf2a017c7fffde1056c978bb5f240bfb42641cf52f1e4736c6494f068d0ca8f023da2655499decf72f86f8cb1e7bb4ba3c4c84a0ceec581afddec909092c86439aed69b17deca9f4012ddec3282c3e357e7bdcfc40d667dff121244cbd3b549c3b2fc26189f337b9bfe6b88b34f19f1661685538c9991ba1275a603c2a87eb76e9d32611fe1ec72e0cf71352327cdbdf884f005a274a6620f376bbdba9dbbf744c81d9df3d9500deae766bb09d0741369f", 0xc9}, {&(0x7f00000008c0)="d1f8a693177aa6c2ca0e", 0xa}, {&(0x7f0000000900)="b9032eadd6d0d1e1ce8c0f0458e312073be5e26040f8380adabbb5769ac20043374831", 0x23}], 0x9, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x9, [{@broadcast, 0x7fffffff}]}, @generic={0x86, 0x5, "8c2461"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x487}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x76, [@rand_addr=0x64010102, @empty, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0xa0, [@rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @private=0xa010100]}, @rr={0x7, 0x13, 0x9, [@private=0xa010102, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x2, [{@remote, 0x10}, {@loopback, 0x80000000}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x401}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f90}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x516}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @broadcast}}}], 0x1a0}}], 0x1, 0x14)

2.475034012s ago: executing program 2 (id=3926):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4c22, 0xfffffffc, @local, 0x85}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4c22, 0xfffffffc, @local, 0x85}, 0x1c)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @private2, 0x6}, 0x1c)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x656603)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000483a01fe802000000000000000000000000000000000000104009078000000066cf6cd53ffff3c01fe800000000000000040000000000035fe8000000000000000000000000000aa2f010000000000000100040107c2040000000e0000000000"], 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004) (async)
socket$netlink(0x10, 0x3, 0x400000000000004)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
r3 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000200)={0x277fffffffd, 0x6000, 0x0, r3, 0x8})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x1, r3, 0x1})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20008809}, 0x2000c015)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.377908087s ago: executing program 1 (id=3927):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c00)=ANY=[@ANYBLOB="003000000000856ec07ae7ad4e9a33da90720745fa1787baf70718a83de07552995de5f6654ab1040c57ae215c3c0db8562a2fba20de584d1216da0128d256ce020cd37d06fdf1d830eff0278a36eba74975cdd34dadf71ee4ec4f81f6ef188b9a21505c4e4a251aa7784e0bc14da39aa6758d5211d1f7392df5a5becf1502343eee40fb6a95593696da0eb729ee08dca17f9f21255060eee6b088efb3efcb70242a446bf522d9330bc443b1dc2d6f43c8b3a0099f26c3550443e7643fb05f0e328c79bb32d48f67548803d5f182326b9070c4"], 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f00000006c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x12, 0x0, &(0x7f0000000300)='syzkaller\x00', 0xfffffffb, 0xc8, &(0x7f0000000a00)=""/200, 0x41000, 0x10, '\x00', 0x0, @fallback=0xa5c9b20a8baea142, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x4005}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x6, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000d00)=[{0x3, 0x5, 0x10, 0xb}, {0x3, 0x5, 0xe, 0x2}], 0x10, 0xa0000000}, 0x94)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x6f, 0x0, 0xfffffeb0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x2, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffff30ffff65701282f5a0d22915ff6eddb10000800400", [0x10]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x1c0}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x4, @mcast1, 0x8}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000580)="defd18c3cbc7bb355453878edab03ed0d6b7605caa9de840055671916a8e58b92173d34aa7077f6db2c3208ec2bc82f5e41020", 0x33}, {&(0x7f0000000780)}, {&(0x7f0000002840)="1f86226180a456a3c243640d2c7dc05dd9fbe3ea2841f37b3a1b73cd991dca5be95c1f08e1bd4b479005341e0b226e86099b8e0d3c9c177db41a43bb933107a1412a2364f1b928909e80da2fc3e95a3b809fc8a16d0238f615a03fb669291d2cf87bd8a919439f2ae45f529384d70aee6ea27cce61bcadaa3c9d23ca2f124c4bc27e96f49d006cc1e82ec52d39a3bbf6a1ba119dcc6d583148ced079130fa994927a89a554740d1b7c22c76c9f3bb3e80e6edd63b70e110dfdcf24a3fce33b8d52d1a07de43eb7421b74684083ee8e6f9fbc994096f5eba14ced88df52b07e7c9b65a8533ddd6edb7db7f37356890717dbd38625fa2ffa92b552b24d9e794e2735a58edb10fba95d51fcd2191e60f658af00b5378e3598680694ea78eeb003d7ae3dba8b3723ef6c6677897b6651b729aaed1a90da0f7090f6743a08d2a7b084721bafdbf639a6e65e1137f16c188ba8e6c98f0eb9be950241b791b01ce9efce94ac16124ee5a048bef95870a7704fed2139ab5a28b26883de145e1529d5dfc2d91a713e8e50715b7e77dc8c7905949643f85bdfc3e01fba7e43163b7b88d37bf6a94eebd234766bc4732e14f47ff03fc87178a1691f3bc850d1754efa7aebf2b9e5263dbf62acf94e0325963566719447744473c78b4637afce3888cf45ab116583ccba26356b6f26c1b12029766326e3166f75851dcffc0839de5061f147fca01625a92017980191394da4750143649d24d601ca4fa03495cd14830348bf3d4c43649e5c95a90a8e94807e0b3fd7020e04b377a5d5569b233af8d141a16788742df1f55d5b39d9ccd7547b48bb33b4232f5e6769f2706964e73c4bad5e92ab2f082b10b210615845a6c5be2ddd46c9ca77963e534261da6431c7f18d71cc384a40428d1773faf98813326937985ce95d6828aedaa6ce2576c23370bd81a7d6c1675d4d99ec70bd3a5873da24d6c4531bbe4abbee0b2b8c0b0329973e11ace9baa01b91e508491f27a364fa250568599536b488f96d0ce99772cd54a882b23412dd69e274344d2e6675fb712c8a3c4ccb762099287f66b33df73ac42fd20af6a16cbbc3e992394c1ed0a57d8b15d9556b7d7adcb8312596d1b6dd4a88b18f96353ea1bb408292bca9fd0e977192b75ef9e684fb944836f5f71774d22e89bb7268b757f15514b0d45216ad4e5b48b8435bfa52eb2458edef2b7e24f3f497e3695ab10a6e631250c16537015baca4b741abe440b9464b7868ed2f1eb36e31b4f4068403cd6243aec752eeac2e43459a762664d11d9c8804f06dc31c0411e81dcf050d441ee7818c2c36adb39f8849298da05175160b2eeeb275cc088fc314a5590031d199a18e53ea856374d1088dffcd2365fa43444d8b283386b88ecf05c74274067442d86ac88b6074fe475a3d19f62d6ebc2dc293eecb717cb177faff0632f51962f3ce9eea2b276b0b2e442011d368190e24e3245b891d941fa0f77607933b91bb3a3e652b7399f64c13b0f946d60b7ab1684786ba418ae185dddd1ca31ce2c6a0aa30ffb75db7a8379d4892b09f89d72cdc0f2410b90d30660f3fa245595980a47202bd5a7f2879239af538fb808d31b3d5be0346e58f7aba05a36be2038510839d4eef5507fc6dae29f24533c2f9bafca8a3b9dfd2014abfeecfabcd0ea317592e78d561d0c8c23e64c0449c41fe6475ad1157eaf11473f861fe1af55996cb6128276d8634583a8a366c09dd6fd1977024db0268b71b4d550242d4c6490e65f312b73e46143c65f0f0272bef25aa9db44fe9a6903e4d94e4bcc80113da5d8abb551933512924e556d64dbe5321f140d550fff92bf52e50034a40f009cc7483abf32d2d44832c828e44a660d09dc9ef1ab4a74b4ec2e5674bf595632e58b3745c269d94b420b78553b26819696e93025fc82997b3f454f16d666f5388520b449b166f48712f89b2aef22419f8b0d7d35d5ca327532b3506c3ab4c84ce31be2eecf35850bff0e29d112b975bcadce9090b17e585e54d1e703fdcb3aeb89b7950ac51bd538d31e8ae981b3688ee2909f6027e8766c48d4fedb532fba3adf6f309d3d8c061194f2816cea406b55ca13ed684a874a0d5736376edf86720fee3f4d465d3688ac9baa5c87c9847dd4bedaddf828f9bbb2fb4d7596a01d844fbf433eebc9cd075d2c6eb01336c05f28fb42bd3a1c68408e6c7f52c7419eaf3175453c2d976de52e3b159a3220cd83fbe2c326fc7ef40b9567809e5115e4a6ea245a33e32f21f6fd6af36e4aea533ae595cc770a11fba8b5f269c69fd4db16f4c5f88f5f62d6714c2da606020b1868126f06c1a697f3bcad28ec3a853a6682cac3342920d9bc2ce9bed21821a74a5925ad9ab7097337913924ad2687bef483a78aca28ab43c179ce29cf5560d876e644d4173a62dbb76ce0c9a624fbed7bd7be148aaad69043be1e5ed067388aa6af7233b27a6df91db0746a8c9e21b7110e8b9e2b1c173d397c9a8d2e011a0e03e9be3f79ef07c088c485ccb0565b64c4315ecef04070efb64fc8cf77715bd2a457485fa58a89ccdf4ba67e73ae4633287fb4b257f8dfcc8340a3c3e017f63e123c762e8ebc3e7b578470afffeafa564e09f88cd9225817e2e87cd92ddf9d5388a39934de2588e1b98afae24431aa077a74689b7e682c6bb530bb4830cf33f4b0c05913d9f5e45f527920af12b63aa61a2904d9a74170d97ad804efe1152edf90639c976225c47b5e7109180546c77afd7d4eb0e4e089734c72e3349d0251ae309b1a90baf0153ded4cb91378e62bc7ddbf7b659860fbd9d03e7fd964d1141e3f1b62cb81b070a0c2c8f0c1bf4c91ed42f3929e269139a38e19bf72946db0eb3cddbc4a3ebbdd959587d16c74220ee538ef7375d", 0x800}, {0x0}, {&(0x7f0000000800)="e456", 0x2}, {&(0x7f0000003840)="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", 0x1000}, {&(0x7f0000000880)="ef1754f6f70c916134adac8216d5fa4728ab42bd3c3c28846e4aed4591f52e688eb7038ad85f0606026df05a9675ddeb528151d2e9cf2ac54376475c670d5bbda8c58c7d40e53488d30b1beaa5258cfeff9571cedc9eacda", 0x58}, {0x0}], 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="140000000000000029000000080000000600000000000000140000290000003e0068244627d3f9fe1f02182000000000"], 0x30}}], 0x2, 0x73e96176e974cbc7)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c693766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xc6}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)

2.373379573s ago: executing program 4 (id=3928):
openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbb87a0e6519f5964df9937f561de9b944d1e381fed329743cf2af711d48d2f1413118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e00000000", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="91d2f35c3f7738ffdc6a4eb78bf37e68a6647431651f9eb5c139d3125f99ba69d9007835b5da22aab3fc96b8285fa4eb1866ca23fb10e0572cb65f713dd30f6081b7493c814f796024b0d012101f9e923f270f899edd528d9db0e016ebe5dc28d1a5ae40a5eedd827fc429f59bc48d15f1fefa087052b5c0bbe73a42432a4cba387ff7c8f527c5e6d4a6b117ea078c489e0d94ba5d35145cb1f5e9df95963ad58353bdbf178585560cd49d22125b090aafa97181e3f842313f2f404119bed0a3bf1667f49527bd6ce1b1fb65198aaacd9690e9d75f976fbf75a3becc63ce6e462147bbcfa1f38a55a974809a26767f6b0a2d0e858422dfb28328126c1f5d7d", 0xff}, {&(0x7f0000000d00)}, {&(0x7f0000000680)="58d17a9d27049368247c2cdbc7cbb6b3386ec1d7e727fc0645aca37f010014175facd2f7a353179a380236a9bce2ee436a9c230ebe1a58846b79cff0eb8d807ff7cf21f0a778a872fc45e78164bf40651ff87c7de83b898e024b178c92716c5660c6b7a3b2214ecbb9", 0x69}], 0x3, &(0x7f0000000740), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="fb0e075d9290a3cd8fe2abb9228b04ae7b56495c44cfcca66de5197e40d8c39e441bd96b8619d71f087eb67c8175ee9ddac35131b66230b361e860e5b67e", 0x3e}, {&(0x7f00000008c0)="d3780dbea2efe9d3e5990147e73b2934603581d15f604d94e08f56c43c66ec4e1334e30930f9932281e478eb37a512cf80346f34a70f8bc03bfffad133182728b58138b38dd5eba0aaeab2b725adb2959bd2d35f780c2b60d71a7be603e87ff1ce1035cfac9600287b1a3b187909f3b48edb91889026c73facf2b642606872d3a64a097767bde00f293841b98c6c544e7120815e1baf38cc95f836a59e88f925cd676e390652b31c448414b9596445d2b2de34a7d389fd4a4ea71fc356", 0xbd}], 0x2, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x67}], 0x30, 0x400c804}, {0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x130, 0x20048415}], 0x4, 0x45)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00')
socket$rxrpc(0x21, 0x2, 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
r7 = fsopen(&(0x7f0000000280)='ufs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x1, 0x20016}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000400)='hostfs\x00', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)

2.150398846s ago: executing program 5 (id=3929):
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
r1 = socket(0x21, 0x2, 0x6)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640))
fsetxattr(r0, &(0x7f0000000100)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000008c0)={r3, @in6={{0xa, 0x4e24, 0xe, @empty, 0x6}}, 0x5, 0x8000}, 0x90)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r3, 0x8001, 0x865, 0x7}, &(0x7f0000000040)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fsetxattr$security_capability(r0, &(0x7f0000000100), 0x0, 0x0, 0x0)

2.117933945s ago: executing program 5 (id=3930):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x5, 0x20)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="18430000060000000000000000000000186b000004000000000000000100000018370000050000000000000000000000850000009000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000060000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b9040000010000008500000082000000852000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185700000500"/80], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x3f, &(0x7f0000000480)=""/63, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xe, 0x1ff}, 0x10, 0x1e6d1, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x5, 0x2, 0xb, 0x6}], 0x10, 0x7f}, 0x94)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x2010, r2, 0xe8ea8000)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000001a00)=ANY=[], 0xfdef)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r8, r9, 0x0, 0x2000fb)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000300)=0x3)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000040ffff03feffffff"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
fcntl$getflags(r10, 0x3)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x9, 0x6})

1.095000614s ago: executing program 5 (id=3931):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df9", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

997.595279ms ago: executing program 5 (id=3932):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
listen(0xffffffffffffffff, 0x20)
shutdown(0xffffffffffffffff, 0x0)
io_uring_setup(0x7, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x200000)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_ethernet(0x107, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000200)='vfat\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000001180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r7, 0x5b14, 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000180)='7\xc0\xd2\xb5\xd3\x1c\x99\x16\x8f\xb6;\xd3$\x12\x96\\_.\xc5\vR\xa5\xe7\xf5n=^\v\x7f\x14.\xe7\x8c\xb3\xb7\xdc\xe1\b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xc5', 0x0)
r8 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420df2fdf)
socket$nl_generic(0x10, 0x3, 0x10)

915.735523ms ago: executing program 4 (id=3933):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x80000080)
close(r1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffffa}, 0x2)
sendfile(r1, r0, 0x0, 0xf03a0005)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="3f84c2888e9be458d85b9786296b2a915f22dfc2136dbf1d4dfa30043379c33f1c1186c9f6927615d124ea97f654173716f1e88b8fb588cc4af8385b99208badaa393cf6735bed281d9a81258496b2ffd5be428730c519d8b11eed"], &(0x7f0000000040)='GPL\x00', 0x405, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)

697.944418ms ago: executing program 4 (id=3934):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) (async)
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x8000) (async, rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x20000005}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x101040)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064d0, &(0x7f0000000140)={0x0}) (async, rerun: 64)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (rerun: 64)

638.478817ms ago: executing program 6 (id=3935):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x546b, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0xf0)

531.599676ms ago: executing program 1 (id=3936):
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) (rerun: 64)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x1000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4532, 0x10100, 0xfffffffd, 0x24c, 0x0, r1}, &(0x7f0000000680), &(0x7f0000000280), &(0x7f0000000000)=<r3=>0x0)
io_uring_enter(r2, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async, rerun: 32)
syz_clone3(&(0x7f0000000600)={0x44000080, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)=<r5=>0x0, {0x34}, &(0x7f00000004c0)=""/54, 0x36, &(0x7f0000000500)=""/142, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r1}}, 0x58) (rerun: 32)
fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x3, r5}) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) (async)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000006c0)={0xaa, 0x8}) (async)
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16=r3, @ANYRESOCT, @ANYRESOCT=r4], 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async, rerun: 64)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async, rerun: 64)
r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10)
ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f00000000c0)) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) (rerun: 64)

407.820681ms ago: executing program 4 (id=3937):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xa}, {0xfff1, 0xfff3}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00"/28, @ANYRES32=r3, @ANYBLOB="06001500070000000c0016800800", @ANYRES32=r2], 0x38}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004003}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a00)={'gre0\x00', <r10=>0x0, 0x8, 0x8080, 0x6, 0xa, {{0xa, 0x4, 0x1, 0x2e, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@generic={0x44, 0x5, "b9a34a"}, @ssrr={0x89, 0xb, 0xc7, [@rand_addr=0x64010102, @remote]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', <r11=>0x0, 0x29, 0x7, 0x0, 0x9, 0x28, @mcast1, @loopback, 0x8000, 0x700, 0x3, 0x401}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmmsg$inet(r6, &(0x7f0000000d40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000180)="d2e9d3a0b683e40284a6d00edaec75fb0d989ddd6c82a56617bfeabd82aee3347f66ea9ce16184206b1178100215a0cdeb25bc5d2425ea89d024abb6133e03e2729215c3b85949808adffbd43670696867b37c654bef7cd3af1b80b7beb9516cc5f5cb73edfdd0802c5bdab9f672e35e8bb37fbb3df510527dd2", 0x7a}, {&(0x7f0000000200)="40c0d124a4c609228ba654", 0xb}, {&(0x7f0000000340)="747e7bf48d4fc37e86b39d4d792db330ce55946c4e881130a640b40c193099aa501d578a3ee722ab0fd42de2393fbd3c1267507748dd9bba7f0cdcf1f2b08be30d", 0x41}, {&(0x7f00000003c0)="9fc99819bf6d4544af1786204210ae725fcd72a749378f392a230dcc5105833c24710f1491ad8edd40311cfb21ae56d71e1f450ab793902358a28aaf63e3563f6a4b8d168941a74c5f6b9b91fe6b75132ca0609bc6c92a62cabb83b3a0748fb4390b4f28f4516eede37bc3dec949b9c74123db43d9749b8c56086626cdac8e3d3bd2df02b9afc99986173d3b344f04a8", 0x90}, {&(0x7f0000000540)="a1e429f905b4cf2e2ac76aaca75bf438c1aeb52bff1cb5b995559aeb181fb92e9a7509d4e9a9fd573a2d9c0a22b6b2665d4ac4691693464675846fd3214b084fc4dcc604b5d1328458696039126b3fd915afea9aebf09f382d7a55cb57b94720d08086a763fd213e9e13223e76412679a4a9de250f8ad10a4a54b1f461a550ab7bcaedd7861590af932389e4040a17ab1843dcf743f9eb0b8d12554ed8ab141b2d4f9dc59f5219b6116be7dc2e", 0xad}, {&(0x7f00000006c0)="10193e2b97abe33b6b05fd6cdf57091bb80f05eed4700f43e81dab1ce74894024d1094c1340c318cc486cc071533855cbc22a0ab78d8060b2f6c510d1eef73c3486c1d7dc55441bd41f57dd0080f24a580b93d93cc1e2de84c1621c4ffb6c6a28b0d67ce601d74baebac764de026c1ded4a2103a4c6b2d2dc9986b3ab80344768cbe9bf35eb9cda90e4d6ba0ed9449c72916a40ee9a073411bacf5d93c88fe84b410cb43d765edb33c1622b2a6d7610a4d03adba1b184c79f224ec392ae36dc6db0d7697fae0d0ac1faa54e30f9ae6ed83c734847a68b4137fc8d0a581b069ce312f683b", 0xe4}, {&(0x7f00000007c0)="c07ee9b8f6338d1c475259f7e9107493965cab69df8cc0cdbf2a017c7fffde1056c978bb5f240bfb42641cf52f1e4736c6494f068d0ca8f023da2655499decf72f86f8cb1e7bb4ba3c4c84a0ceec581afddec909092c86439aed69b17deca9f4012ddec3282c3e357e7bdcfc40d667dff121244cbd3b549c3b2fc26189f337b9bfe6b88b34f19f1661685538c9991ba1275a603c2a87eb76e9d32611fe1ec72e0cf71352327cdbdf884f005a274a6620f376bbdba9dbbf744c81d9df3d9500deae766bb09d0741369f", 0xc9}, {&(0x7f00000008c0)="d1f8a693177aa6c2ca0e", 0xa}, {&(0x7f0000000900)="b9032eadd6d0d1e1ce8c0f0458e312073be5e26040f8380adabbb5769ac20043374831", 0x23}], 0x9, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xcc, 0x1, 0x9, [{@broadcast, 0x7fffffff}]}, @generic={0x86, 0x5, "8c2461"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x487}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x76, [@rand_addr=0x64010102, @empty, @private=0xa010100]}, @lsrr={0x83, 0x1b, 0xa0, [@rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @private=0xa010100]}, @rr={0x7, 0x13, 0x9, [@private=0xa010102, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x2, [{@remote, 0x10}, {@loopback, 0x80000000}, {@multicast2, 0x8}, {@rand_addr=0x64010100, 0x401}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f90}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x516}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @broadcast}}}], 0x1a0}}], 0x1, 0x14)

282.980009ms ago: executing program 2 (id=3938):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
pipe(&(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fanotify_init(0x200, 0x48801)
fanotify_mark(r6, 0x1, 0x1001, r4, 0x0)
write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48)
syz_open_procfs$namespace(0x0, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff})
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e300250002", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c032abd7000fedbdf250b000000080006000000ffff0800070000000000", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000000000ffff7f00000108000200050000000800030005000000080003000400000005000500ff00000008000200030000000800020005000000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 4 (id=3939):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x2a, '\x00', @st={0x4, [{0x3, @uvalue=0xafa}, {0x1, @uvalue=0x8000000000000000}, {0x2, @uvalue=0xff}, {0x2, @uvalue=0x401}]}, 0x4}, {0x5, '\x00', @buffer={"15607420b94f2a1ade3e311b88351c3481518fff000000000200", 0x20}, 0xd}, {0x19, '\x00', @st={0x4, [{0x2, @uvalue=0x80000003}, {0x0, @svalue}, {0x2, @uvalue=0x3}, {0x1, @uvalue=0x1ff}]}, 0xe6}]})

kernel console output (not intermixed with test programs):

 891.061270][T18356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.084063][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.108459][T18356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.135176][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.173350][T18356] dummy0: entered promiscuous mode
[  891.199437][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.231307][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.262531][ T5628] hid-generic 0000:0000:0000.002F: item fetching failed at offset 0/2
[  891.272655][ T5628] hid-generic 0000:0000:0000.002F: probe with driver hid-generic failed with error -22
[  891.608434][ T5712] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  891.681627][T18370] syzkaller1: entered promiscuous mode
[  891.701114][T18370] syzkaller1: entered allmulticast mode
[  892.182794][T18375] binder: BINDER_SET_CONTEXT_MGR already set
[  892.201910][T18375] binder: 18372:18375 ioctl 4018620d 2000000004c0 returned -16
[  892.434385][T11066] usb 3-1: USB disconnect, device number 81
[  892.678954][T18392] binder_alloc: 18388: binder_alloc_buf, no vma
[  893.319110][T18404] loop9: detected capacity change from 0 to 7
[  893.334975][T18404] Dev loop9: unable to read RDB block 7
[  893.349886][T18404]  loop9: AHDI p1 p2 p3
[  893.363304][T18404] loop9: partition table partially beyond EOD, truncated
[  893.382042][T18404] loop9: p1 start 1920169572 is beyond EOD, truncated
[  893.395909][T18404] loop9: p2 start 1851744889 is beyond EOD, truncated
[  893.826766][ T5628] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  893.998288][ T5628] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  894.018755][ T5628] usb 2-1: config 0 has no interface number 0
[  894.031990][ T5628] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  894.057155][ T5628] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  894.086920][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.096441][T14038] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  894.096789][T18356] dummy0: left promiscuous mode
[  894.124953][ T5628] usb 2-1: Product: syz
[  894.130730][ T5628] usb 2-1: Manufacturer: syz
[  894.135375][ T5628] usb 2-1: SerialNumber: syz
[  894.152474][ T5628] usb 2-1: config 0 descriptor??
[  894.175221][ T5628] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  894.248756][T14038] usb 3-1: Using ep0 maxpacket: 16
[  894.265428][T14038] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  894.278560][T14038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  894.310039][T14038] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  894.340862][T14038] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  894.361198][T14038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.384905][    C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  894.409496][T14038] usb 3-1: Product: syz
[  894.434677][T14038] usb 3-1: Manufacturer: syz
[  894.453579][T14038] usb 3-1: SerialNumber: syz
[  894.487854][T14038] usb 3-1: 0:2 : does not exist
[  894.562729][T18427] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  894.752033][T18427] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  894.778195][T18427] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3416'.
[  894.817703][T18427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  895.100271][T18413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.110771][T18413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.152924][T18434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  895.311924][T18439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.320860][T18439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.360403][T14038] usb 3-1: USB disconnect, device number 82
[  895.706577][ T5693] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[  895.869541][ T5693] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[  895.882851][ T5693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.912810][ T5693] usb 5-1: config 0 has no interface number 0
[  895.935698][ T5693] usb 5-1: config 0 interface 205 has no altsetting 0
[  895.973550][ T5693] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  895.992743][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.020772][ T5693] usb 5-1: Product: syz
[  896.047877][ T5693] usb 5-1: Manufacturer: syz
[  896.078449][ T5693] usb 5-1: SerialNumber: syz
[  896.105183][ T5693] usb 5-1: config 0 descriptor??
[  896.131940][ T5693] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  896.157788][ T5693] dvb-usb: bulk message failed: -22 (3/0)
[  896.210163][ T5693] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  896.243402][ T5693] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  896.271617][ T5693] usb 5-1: media controller created
[  896.282390][T18454] binder: BINDER_SET_CONTEXT_MGR already set
[  896.294025][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  896.310163][T18454] binder: 18448:18454 ioctl 4018620d 2000000004c0 returned -16
[  896.358287][ T5693] dvb-usb: bulk message failed: -22 (6/0)
[  896.374968][ T5693] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  896.428630][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input90
[  896.480005][ T5693] dvb-usb: schedule remote query interval to 150 msecs.
[  896.512059][ T5693] dvb-usb: bulk message failed: -22 (3/0)
[  896.546539][ T5693] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  896.668230][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  896.700321][ T5693] dvb-usb: error while querying for an remote control event.
[  896.727589][ T5628] usb 2-1: USB disconnect, device number 69
[  896.777470][ T5628] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  896.896797][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  896.918752][ T5693] dvb-usb: error while querying for an remote control event.
[  896.919208][T18462] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  896.973095][T18462] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.3424'.
[  897.156572][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  897.190540][ T5693] dvb-usb: error while querying for an remote control event.
[  897.386059][T18469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3426'.
[  897.407854][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  897.425420][ T5693] dvb-usb: error while querying for an remote control event.
[  897.546728][ T5628] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  897.618294][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  897.642503][ T5693] dvb-usb: error while querying for an remote control event.
[  897.717717][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3428'.
[  897.736787][ T5628] usb 2-1: Using ep0 maxpacket: 8
[  897.752861][ T5628] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  897.773363][T18477] tmpfs: Unknown parameter '��������r%�Ҵ\wӠR(4��;��a;�
[  897.773363][T18477] �	MU��g�6��
&x@2<��5ʍ���2T�����Z5��w�V���U���]����T�
��m������P�Z��<
M;���xY9]gŞ���n�����;O�����훌u
[  897.773363][T18477] ~^�>Ƥ���r&�����D�q�.;��쀯<2�A���U'
[  897.811465][ T5628] usb 2-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config
[  897.826425][ T5712] dvb-usb: bulk message failed: -22 (1/0)
[  897.838615][ T5712] dvb-usb: error while querying for an remote control event.
[  897.848152][ T5628] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  897.879256][ T5628] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  897.937283][ T5628] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  897.969231][ T5628] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  897.991856][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.030478][ T5628] usbtmc 2-1:16.0: bulk endpoints not found
[  898.056427][ T5712] dvb-usb: bulk message failed: -22 (1/0)
[  898.064540][ T5712] dvb-usb: error while querying for an remote control event.
[  898.240255][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.267559][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  898.278172][ T5693] dvb-usb: error while querying for an remote control event.
[  898.287350][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.309567][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  898.373472][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  898.466778][ T5693] dvb-usb: bulk message failed: -22 (1/0)
[  898.482856][ T5693] dvb-usb: error while querying for an remote control event.
[  898.547794][ T5628] usb 5-1: USB disconnect, device number 124
[  898.642703][ T5628] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  899.058159][ T5628] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  899.092408][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.114134][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  899.259249][ T5628] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  899.268760][ T5628] usb 5-1: config 0 has no interface number 0
[  899.281248][ T5628] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  899.307439][ T5628] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  899.317200][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.330485][ T5628] usb 5-1: Product: syz
[  899.339489][ T5628] usb 5-1: Manufacturer: syz
[  899.348675][ T5628] usb 5-1: SerialNumber: syz
[  899.366131][ T5628] usb 5-1: config 0 descriptor??
[  899.398520][ T5628] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  899.611599][    C0] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  899.939123][T18500] syzkaller0: entered promiscuous mode
[  899.964536][T18500] syzkaller0: entered allmulticast mode
[  900.262741][ T5693] usb 2-1: USB disconnect, device number 70
[  900.813470][T18512] binder: BINDER_SET_CONTEXT_MGR already set
[  900.822423][T18512] binder: 18509:18512 ioctl 4018620d 2000000004c0 returned -16
[  901.306975][ T5693] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  901.470549][ T5693] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  901.494113][ T5693] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  901.527263][ T5693] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  901.557694][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.593633][T18515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  901.610905][ T5693] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  901.724309][T18531] input: syz1 as /devices/virtual/input/input91
[  901.857297][ T5712] usb 5-1: USB disconnect, device number 125
[  901.868243][   T29] audit: type=1326 audit(1779306722.301:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18530 comm="syz.1.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ea399ce59 code=0x0
[  901.894725][ T5712] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  901.902049][T18515] fuse: Bad value for 'user_id'
[  901.931357][T18533] fuse: Bad value for 'user_id'
[  901.968199][T18515] fuse: Bad value for 'user_id'
[  901.986488][T18533] fuse: Bad value for 'user_id'
[  902.155804][T14038] usb 3-1: USB disconnect, device number 83
[  902.344980][T18546] loop6: detected capacity change from 0 to 2640
[  902.347522][ T5712] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  902.382532][T18546] buffer_io_error: 320 callbacks suppressed
[  902.382545][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.413885][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.458095][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.488846][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.524065][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.533449][ T5712] usb 5-1: Using ep0 maxpacket: 32
[  902.564761][ T5712] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  902.581699][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.602881][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.620677][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.635656][ T5712] usb 5-1: config 0 has no interface number 0
[  902.654132][ T5712] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  902.658305][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.682861][T18546] ldm_validate_partition_table(): Disk read failed.
[  902.700364][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.716796][ T5712] usb 5-1: Product: syz
[  902.737717][ T5712] usb 5-1: Manufacturer: syz
[  902.746148][ T5712] usb 5-1: SerialNumber: syz
[  902.769724][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.788665][ T5712] usb 5-1: config 0 descriptor??
[  902.801818][T18546] Buffer I/O error on dev loop6, logical block 0, async page read
[  902.815629][ T5712] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  902.833566][ T5712] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  902.858684][T18546] Dev loop6: unable to read RDB block 0
[  902.875852][T18546]  loop6: unable to read partition table
[  902.898327][T18546] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  903.058154][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'.
[  903.111690][   T29] audit: type=1326 audit(1779306723.551:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.152413][T18555] syzkaller1: entered promiscuous mode
[  903.162416][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3451'.
[  903.181267][   T29] audit: type=1326 audit(1779306723.551:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.211881][T18555] syzkaller1: entered allmulticast mode
[  903.285091][   T29] audit: type=1326 audit(1779306723.581:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.424186][   T29] audit: type=1326 audit(1779306723.581:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.514223][T18564] xt_SECMARK: invalid mode: 2
[  903.527477][   T29] audit: type=1326 audit(1779306723.581:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.617989][T18566] netlink: 'syz.5.3455': attribute type 1 has an invalid length.
[  903.619216][   T29] audit: type=1326 audit(1779306723.581:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.742565][   T29] audit: type=1326 audit(1779306723.581:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.775045][   T29] audit: type=1326 audit(1779306723.581:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  903.815619][   T29] audit: type=1326 audit(1779306723.581:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.5.3451" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb63039ce59 code=0x7ffc0000
[  904.392446][T18582] binder: BINDER_SET_CONTEXT_MGR already set
[  904.448840][T18582] binder: 18579:18582 ioctl 4018620d 2000000004c0 returned -16
[  905.109270][ T5725] usb 5-1: USB disconnect, device number 126
[  905.177165][T18591] input: syz1 as /devices/virtual/input/input92
[  905.977742][T18606] xt_SECMARK: invalid mode: 2
[  906.348745][T18622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.371195][T18622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.686526][ T5725] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  906.735043][T18640] binder: BINDER_SET_CONTEXT_MGR already set
[  906.742109][T18640] binder: 18637:18640 ioctl 4018620d 2000000004c0 returned -16
[  906.846492][ T5725] usb 3-1: Using ep0 maxpacket: 16
[  906.857517][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  906.881229][ T5725] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  906.891706][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.901455][ T5725] usb 3-1: Product: syz
[  906.908402][ T5725] usb 3-1: Manufacturer: syz
[  906.917543][ T5725] usb 3-1: SerialNumber: syz
[  906.934168][ T5725] usb 3-1: config 0 descriptor??
[  906.958446][ T5725] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  906.979234][ T5725] usb 3-1: Detected FT232R
[  907.162913][T18629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  907.176961][T18629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  907.530801][T18629] syzkaller1: entered promiscuous mode
[  907.546537][T18629] syzkaller1: entered allmulticast mode
[  907.577727][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  907.608503][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  907.632981][ T5725] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  907.846524][ T5628] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  907.989206][T18648] input: syz1 as /devices/virtual/input/input93
[  908.010678][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.028006][   T29] kauditd_printk_skb: 45 callbacks suppressed
[  908.028023][   T29] audit: type=1326 audit(1779306728.471:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18647 comm="syz.1.3479" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ea399ce59 code=0x0
[  908.063728][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.094608][ T5628] usb 5-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[  908.141043][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.178179][ T5628] usb 5-1: config 0 descriptor??
[  908.450146][T18660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  908.462822][T18660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  908.799155][ T5628] usbhid 5-1:0.0: can't add hid device: -71
[  908.812544][ T5628] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  908.838972][ T5628] usb 5-1: USB disconnect, device number 127
[  908.948544][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3484'.
[  909.207736][ T5712] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  909.366683][ T5712] usb 2-1: device descriptor read/64, error -71
[  909.589956][ T5725] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  909.598100][ T5725] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  909.612647][ T5725] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  909.629667][ T5725] usb 3-1: USB disconnect, device number 84
[  909.647235][ T5712] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  909.671615][ T5725] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  909.704735][ T5725] ftdi_sio 3-1:0.0: device disconnected
[  909.718649][T14038] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  909.748598][T18679] binder: BINDER_SET_CONTEXT_MGR already set
[  909.754637][T18679] binder: 18674:18679 ioctl 4018620d 2000000004c0 returned -16
[  909.796546][ T5712] usb 2-1: device descriptor read/64, error -71
[  909.898510][T14038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.929956][ T5712] usb usb2-port1: attempt power cycle
[  909.941024][T14038] usb 5-1: config 0 has no interfaces?
[  909.953454][T14038] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  909.964299][T14038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.974578][T14038] usb 5-1: Product: syz
[  909.980735][T14038] usb 5-1: Manufacturer: syz
[  909.988413][T14038] usb 5-1: SerialNumber: syz
[  909.999866][T14038] usb 5-1: config 0 descriptor??
[  910.222911][   T29] audit: type=1326 audit(1779306730.661:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.257465][ T5693] usb 5-1: USB disconnect, device number 2
[  910.288009][   T29] audit: type=1326 audit(1779306730.691:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.329734][ T5712] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  910.343255][   T29] audit: type=1326 audit(1779306730.691:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.385480][ T5712] usb 2-1: device descriptor read/8, error -71
[  910.411894][   T29] audit: type=1326 audit(1779306730.691:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.477869][   T29] audit: type=1326 audit(1779306730.691:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.538211][   T29] audit: type=1326 audit(1779306730.691:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.601480][   T29] audit: type=1326 audit(1779306730.691:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  910.650599][ T5712] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  910.669762][   T29] audit: type=1326 audit(1779306730.691:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6ab5d68e code=0x7ffc0000
[  910.706366][ T5712] usb 2-1: device descriptor read/8, error -71
[  910.735022][   T29] audit: type=1326 audit(1779306730.811:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18670 comm="syz.4.3487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc6ab5d68e code=0x7ffc0000
[  910.816786][ T5712] usb usb2-port1: unable to enumerate USB device
[  911.251412][T18697] IPVS: Unknown mcast interface: vlan1
[  912.056938][   T24] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  912.248917][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  912.271144][   T24] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  912.310856][   T24] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  912.347532][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[  912.392597][   T24] usb 3-1: language id specifier not provided by device, defaulting to English
[  912.427835][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  912.450881][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.483801][   T24] usb 3-1: Product: 䢋歊纕念ᦁ陞镁䚹٩㨹Ｃꦦ䟸㼫⏅엏絛旬鲤㎮㤜︢䩸Ꙛ䈾鳑—呺䋧㢭顃僷㼕뺫苢뜎ᶳ⮳ᾰ켏὿칸瘞⢣汄맢຅練뾕㤗崎ㅁ蚚䔶糮ཞ荫Ⅿῒ闛坼牠庰숖튱苬摿ⳁ᯶賀꣪ᢗ滢쭂᳟짳焼槬痢뇒Ὺഏ還᳅묞붒嶅䭋Ե㭛鎯닷꧝鬽ኊ掠蟭쬀퓩䯐韕線ⷄ吙
[  912.602892][   T24] usb 3-1: Manufacturer: ꣫샂﬊玷௎썎鼎醊饤㻗⪹έ쫍눱落涎ꪲ꿞滹옦ﰿ덴카⼅㈘项夌㱅ᄰ㋰띙⻰떡艜툨⺣挳讍׺䦽金䗇錮ꗻ厹숪ᆋⵦ旙镟Ⱘ俻ᗅᛞ퉵籭쟜ꁶ肒糂ៃﺪ닝홲袱렢⡜᳈읬᲍ᆫ燢綀ፑ柎๼␁ࡄ
[  912.751376][   T24] usb 3-1: SerialNumber: syz
[  912.768240][T18723] binder: BINDER_SET_CONTEXT_MGR already set
[  912.781012][T18723] binder: 18720:18723 ioctl 4018620d 2000000004c0 returned -16
[  912.797057][T18714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  913.546571][T18730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.634286][T18730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  914.317012][ T5628] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  914.486442][ T5628] usb 5-1: Using ep0 maxpacket: 8
[  914.495687][ T5628] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  914.532853][ T5628] usb 5-1: config 0 has no interface number 0
[  914.548978][ T5628] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  914.562797][ T5628] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  914.576859][ T5628] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  914.589301][ T5628] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  914.603052][ T5628] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  914.613493][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.669974][ T5628] usb 5-1: config 0 descriptor??
[  914.725214][ T5628] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  914.776558][ T5693] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  914.853612][   T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  914.889460][   T24] usb 3-1: USB disconnect, device number 85
[  914.909490][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'.
[  914.983115][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short
[  915.005275][ T5693] usb 2-1: not running at top speed; connect to a high speed hub
[  915.018140][ T5725] usb 5-1: USB disconnect, device number 3
[  915.023730][ T5693] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping
[  915.050297][ T5725] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  915.066842][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  915.114480][ T5693] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  915.181032][ T5693] usb 2-1: string descriptor 0 read error: -22
[  915.190157][ T5693] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  915.217923][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.744086][ T5693] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  915.785364][ T5693] usb 2-1: USB disconnect, device number 75
[  916.080666][T18773] binder: BINDER_SET_CONTEXT_MGR already set
[  916.136844][T18773] binder: 18766:18773 ioctl 4018620d 2000000004c0 returned -16
[  916.336112][T18783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.346751][ T5725] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  916.395329][T18783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.517211][ T5725] usb 2-1: Using ep0 maxpacket: 16
[  916.528123][ T5725] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  916.537466][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  916.557868][ T5725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  916.584469][ T5725] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  916.611086][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.629301][ T5725] usb 2-1: Product: syz
[  916.639020][ T5725] usb 2-1: Manufacturer: syz
[  916.648195][ T5725] usb 2-1: SerialNumber: syz
[  916.674184][ T5725] usb 2-1: 0:2 : does not exist
[  916.736571][ T5712] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  916.918546][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  916.937243][ T5712] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  916.965531][ T5712] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  917.019644][ T5712] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  917.054257][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.090479][ T5712] usb 5-1: Product: syz
[  917.102246][ T5712] usb 5-1: Manufacturer: syz
[  917.118117][ T5712] usb 5-1: SerialNumber: syz
[  917.313994][T18788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.333919][T18788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.351621][ T5712] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  917.361912][ T5712] cdc_ncm 5-1:1.0: bind() failure
[  917.487416][ T5725] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  917.574038][ T5638] Bluetooth: hci1: unexpected event for opcode 0x1009
[  917.588149][ T5725] usb 2-1: USB disconnect, device number 76
[  917.662804][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  917.764102][T11066] usb 5-1: USB disconnect, device number 4
[  917.996628][ T5751] usb 3-1: new low-speed USB device number 86 using dummy_hcd
[  918.148684][ T5751] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  918.169717][ T5751] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  918.181385][ T5751] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  918.195156][ T5751] usb 3-1: config 0 interface 0 has no altsetting 0
[  918.203202][ T5751] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00
[  918.214247][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.226777][ T5751] usb 3-1: config 0 descriptor??
[  918.232688][T18800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  918.376727][T11066] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  918.516622][T11066] usb 2-1: device descriptor read/64, error -71
[  918.656626][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  918.777078][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.784118][T11066] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  918.796715][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.807154][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.816676][   T24] usb 5-1: device descriptor read/64, error -71
[  918.817040][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.830322][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.841971][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.852517][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.861460][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.873154][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.885207][ T5751] topre 0003:0853:0146.0030: unknown main item tag 0x0
[  918.905360][ T5751] topre 0003:0853:0146.0030: hidraw0: USB HID v0.01 Device [HID 0853:0146] on usb-dummy_hcd.2-1/input0
[  918.936786][T11066] usb 2-1: device descriptor read/64, error -71
[  919.028876][ T5712] usb 3-1: USB disconnect, device number 86
[  919.047178][T11066] usb usb2-port1: attempt power cycle
[  919.096662][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  919.246607][   T24] usb 5-1: device descriptor read/64, error -71
[  919.356668][   T24] usb usb5-port1: attempt power cycle
[  919.406419][T11066] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  919.426901][T11066] usb 2-1: device descriptor read/8, error -71
[  919.666436][T11066] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  919.707369][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  919.715488][T11066] usb 2-1: device descriptor read/8, error -71
[  919.737171][   T24] usb 5-1: device descriptor read/8, error -71
[  919.826673][T11066] usb usb2-port1: unable to enumerate USB device
[  919.908996][T18823] syzkaller0: entered promiscuous mode
[  919.914496][T18823] syzkaller0: entered allmulticast mode
[  919.976616][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  919.997054][   T24] usb 5-1: device descriptor read/8, error -71
[  920.117373][   T24] usb usb5-port1: unable to enumerate USB device
[  920.302374][T18832] fuse: Bad value for 'user_id'
[  920.307907][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  920.307922][   T29] audit: type=1326 audit(1779306740.751:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.343335][T18832] fuse: Bad value for 'user_id'
[  920.360356][   T29] audit: type=1326 audit(1779306740.781:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.385706][   T29] audit: type=1326 audit(1779306740.781:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.412084][   T29] audit: type=1326 audit(1779306740.781:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.441662][   T29] audit: type=1326 audit(1779306740.791:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.478164][   T29] audit: type=1326 audit(1779306740.791:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.522724][   T29] audit: type=1326 audit(1779306740.791:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.555310][   T29] audit: type=1326 audit(1779306740.991:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.605243][   T29] audit: type=1326 audit(1779306740.991:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.645333][   T29] audit: type=1326 audit(1779306741.071:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18825 comm="syz.2.3532" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  920.673645][T18830] fuse: Bad value for 'user_id'
[  920.678645][T18830] fuse: Bad value for 'user_id'
[  921.183113][T18839] pim6reg: entered allmulticast mode
[  921.193546][T18839] team0: entered allmulticast mode
[  921.202623][T18839] team_slave_0: entered allmulticast mode
[  921.216727][T18839] team_slave_1: entered allmulticast mode
[  921.586933][ T5751] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  921.768629][ T5751] usb 2-1: device descriptor read/64, error -71
[  921.915975][T18865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.927097][T18867] syzkaller0: entered promiscuous mode
[  921.955619][T18867] syzkaller0: entered allmulticast mode
[  921.970067][T18865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.027549][ T5751] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  922.176868][ T5751] usb 2-1: device descriptor read/64, error -71
[  922.202974][T18868] netlink: 'syz.2.3541': attribute type 12 has an invalid length.
[  922.305882][ T5751] usb usb2-port1: attempt power cycle
[  922.652577][   T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  922.680838][   T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  922.694588][ T5751] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  922.707731][   T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  922.744128][ T5751] usb 2-1: device descriptor read/8, error -71
[  922.745230][   T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  922.997388][ T5751] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  923.018800][ T5751] usb 2-1: device descriptor read/8, error -71
[  923.066816][ T5712] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  923.126797][ T5751] usb usb2-port1: unable to enumerate USB device
[  923.228363][ T5712] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  923.247310][ T5712] usb 5-1: config 0 interface 0 has no altsetting 0
[  923.264751][ T5712] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  923.281971][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.301709][ T5712] usb 5-1: config 0 descriptor??
[  923.750203][ T5712] lua 0003:1E7D:2C2E.0031: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0
[  924.856607][ T5712] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  925.030277][ T5712] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  925.044571][ T5712] usb 3-1: config 0 has no interface number 0
[  925.055761][ T5712] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  925.071238][ T5712] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  925.087129][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.103283][ T5712] usb 3-1: Product: syz
[  925.114985][ T5712] usb 3-1: Manufacturer: syz
[  925.135979][ T5712] usb 3-1: SerialNumber: syz
[  925.150774][ T5712] usb 3-1: config 0 descriptor??
[  925.175988][ T5712] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  925.411707][    C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  925.564425][T18906] geneve0: entered allmulticast mode
[  925.884668][ T5628] usb 5-1: USB disconnect, device number 9
[  926.396703][ T5628] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  926.543142][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  926.543157][   T29] audit: type=1326 audit(1779306746.981:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.591204][   T29] audit: type=1326 audit(1779306747.021:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.593821][ T5628] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  926.619345][   T29] audit: type=1326 audit(1779306747.031:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.677503][ T5628] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  926.721622][ T5628] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  926.816049][   T29] audit: type=1326 audit(1779306747.031:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea395d68e code=0x7ffc0000
[  926.855782][ T5628] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  926.868283][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.880929][   T29] audit: type=1326 audit(1779306747.031:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.910983][   T29] audit: type=1326 audit(1779306747.031:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.939634][   T29] audit: type=1326 audit(1779306747.031:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.966575][ T5628] usb 5-1: Product: syz
[  926.972989][   T29] audit: type=1326 audit(1779306747.031:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  926.978266][ T5628] usb 5-1: Manufacturer: syz
[  927.027253][ T5628] usb 5-1: SerialNumber: syz
[  927.032216][   T29] audit: type=1326 audit(1779306747.031:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  927.063724][   T29] audit: type=1326 audit(1779306747.031:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18922 comm="syz.1.3562" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4ea399ce59 code=0x7ffc0000
[  927.211073][ T8603] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  927.269140][ T5628] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  927.281100][ T5628] cdc_ncm 5-1:1.0: bind() failure
[  927.408905][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'.
[  927.493559][ T5638] Bluetooth: hci1: unexpected event for opcode 0x1009
[  927.695863][T11066] usb 5-1: USB disconnect, device number 10
[  927.698717][   T24] usb 3-1: USB disconnect, device number 87
[  927.747380][   T24] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  928.060595][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3585'.
[  928.074408][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'.
[  928.305079][T19005] binder: BINDER_SET_CONTEXT_MGR already set
[  928.332874][T19005] binder: 18996:19005 ioctl 4018620d 2000000004c0 returned -16
[  928.627540][T19018] binder: BINDER_SET_CONTEXT_MGR already set
[  928.640158][T19018] binder: 19009:19018 ioctl 4018620d 2000000004c0 returned -16
[  928.736823][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  928.908161][   T24] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  928.933503][   T24] usb 5-1: config 0 has no interface number 0
[  928.950358][   T24] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  928.986910][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  929.005266][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.025126][   T24] usb 5-1: Product: syz
[  929.035887][   T24] usb 5-1: Manufacturer: syz
[  929.048507][   T24] usb 5-1: SerialNumber: syz
[  929.075130][   T24] usb 5-1: config 0 descriptor??
[  929.101007][   T24] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  929.303933][    C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  929.680333][T19038] xt_SECMARK: invalid mode: 2
[  930.058612][T19042] loop9: detected capacity change from 0 to 7
[  930.098664][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.113082][T19042] Dev loop9: unable to read RDB block 7
[  930.122515][T19042]  loop9: AHDI p1 p2 p3
[  930.124274][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.127622][T19042] loop9: partition table partially beyond EOD, truncated
[  930.144841][T19042] loop9: p1 start 1920169572 is beyond EOD, truncated
[  930.151748][T19042] loop9: p2 start 1851744889 is beyond EOD, truncated
[  930.180307][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.219053][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.476512][   T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  930.636608][   T24] usb 2-1: Using ep0 maxpacket: 16
[  930.643159][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024
[  930.656970][   T24] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  930.672026][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.688891][   T24] usb 2-1: Product: syz
[  930.696603][   T24] usb 2-1: Manufacturer: syz
[  930.701423][   T24] usb 2-1: SerialNumber: syz
[  930.916727][ T5751] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  930.982061][   T24] usb 2-1: unknown interface protocol 0x28, assuming v1
[  931.008756][   T24] usb 2-1: skipping empty audio interface (v1)
[  931.100505][ T5751] usb 3-1: Using ep0 maxpacket: 16
[  931.118369][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.158932][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  931.196731][ T5751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  931.253442][   T24] usb 2-1: USB disconnect, device number 85
[  931.268095][ T5751] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  931.318689][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  931.374173][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.418919][ T5751] usb 3-1: Product: syz
[  931.462090][ T5751] usb 3-1: Manufacturer: syz
[  931.505551][ T5751] usb 3-1: SerialNumber: syz
[  931.562748][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  931.562765][   T29] audit: type=1326 audit(1779306752.001:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa682b9caeb code=0x7ffc0000
[  931.641112][   T29] audit: type=1326 audit(1779306752.001:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa682b9caeb code=0x7ffc0000
[  931.676650][T11066] usb 5-1: USB disconnect, device number 11
[  931.688157][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  931.702528][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  931.724659][T11066] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  931.772940][   T29] audit: type=1326 audit(1779306752.001:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa682b9caeb code=0x7ffc0000
[  931.810854][T19061] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3606'.
[  931.830370][   T29] audit: type=1326 audit(1779306752.031:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa682b5d68e code=0x7ffc0000
[  931.941008][   T29] audit: type=1326 audit(1779306752.241:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  932.027534][T19082] binder: BINDER_SET_CONTEXT_MGR already set
[  932.048306][T19082] binder: 19079:19082 ioctl 4018620d 2000000004c0 returned -16
[  932.082608][   T29] audit: type=1326 audit(1779306752.241:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  932.235932][   T29] audit: type=1326 audit(1779306752.251:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  932.312473][   T29] audit: type=1326 audit(1779306752.251:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  932.431972][   T29] audit: type=1326 audit(1779306752.251:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  932.543476][   T29] audit: type=1326 audit(1779306752.251:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19058 comm="syz.2.3606" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa682b9ce59 code=0x7ffc0000
[  933.782688][ T5751] usb 3-1: USB disconnect, device number 88
[  933.806839][   T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  933.981716][   T24] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  934.027750][   T24] usb 2-1: config 0 has no interface number 0
[  934.055212][   T24] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  934.103047][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  934.152191][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.183788][   T24] usb 2-1: Product: syz
[  934.199520][   T24] usb 2-1: Manufacturer: syz
[  934.216428][   T24] usb 2-1: SerialNumber: syz
[  934.242500][   T24] usb 2-1: config 0 descriptor??
[  934.257361][T11066] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  934.271425][   T24] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  934.429882][T11066] usb 5-1: Using ep0 maxpacket: 16
[  934.452557][T11066] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  934.472591][T11066] usb 5-1: config 0 has no interface number 0
[  934.484881][    C1] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  934.508493][T11066] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  934.518855][T11066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.527172][T11066] usb 5-1: Product: syz
[  934.533737][T11066] usb 5-1: Manufacturer: syz
[  934.543227][T11066] usb 5-1: SerialNumber: syz
[  934.560233][T11066] usb 5-1: config 0 descriptor??
[  934.588544][T11066] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  934.621373][T19135] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  934.631874][T19135] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  935.068334][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3630'.
[  935.391360][T11066] gspca_spca1528: reg_w err -71
[  935.427065][T11066] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  935.479531][T11066] usb 5-1: USB disconnect, device number 12
[  935.576876][T19152] mac80211_hwsim hwsim53 wlan1: Caught tx_queue_len zero misconfig
[  935.600519][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.653166][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.739047][T19154] binder: BINDER_SET_CONTEXT_MGR already set
[  935.766477][T19154] binder: 19149:19154 ioctl 4018620d 2000000004c0 returned -16
[  935.813643][T19160] bond1: option packets_per_slave: invalid value (18446744073709551615)
[  935.827051][T19160] bond1: option packets_per_slave: allowed values 0 - 65535
[  935.870491][T19160] bond1 (unregistering): Released all slaves
[  936.486918][T11066] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  936.505814][T19176] kvm: kvm [19174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffea00008810
[  936.525335][T19176] kvm: kvm [19174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff8d0000b8d9
[  936.635035][ T5751] usb 2-1: USB disconnect, device number 86
[  936.668311][ T5751] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  936.676370][T11066] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  936.726419][T11066] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  936.754857][T11066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  936.778261][T11066] usb 3-1: Product: syz
[  936.790401][T11066] usb 3-1: Manufacturer: syz
[  936.812459][T11066] usb 3-1: SerialNumber: syz
[  937.109431][T11066] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  937.197116][ T5751] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  937.385554][ T5751] usb 2-1: unable to get BOS descriptor or descriptor too short
[  937.412068][ T5751] usb 2-1: language id specifier not provided by device, defaulting to English
[  937.432565][ T5751] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[  937.438412][    C1] usblp0: nonzero write bulk status received: -71
[  937.442590][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.451118][   T24] usb 3-1: USB disconnect, device number 89
[  937.461003][ T5751] usb 2-1: Product: 梱ꡦ旤㲚뿈쨈祄ﻓ葲枺匾섊鞇杚⊚伏棻킷逸녺ㅐ篩믄懯铺込⽪噍皲탟捅褈嗍ᬫ⬦璁뉋㥡➬⩽ൔ䁇촍淡ᰤ⨧﷜ꣳﳏ
[  937.507893][T19169] usblp0: removed
[  937.571378][ T5751] usb 2-1: Manufacturer: ы
[  937.593907][ T5751] usb 2-1: SerialNumber: syz
[  937.845792][T19200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  937.900973][ T5751] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  937.933398][ T5751] usb 2-1: MIDIStreaming interface descriptor not found
[  938.106988][ T5712] usb 3-1: new full-speed USB device number 90 using dummy_hcd
[  938.139254][ T5751] usb 2-1: USB disconnect, device number 87
[  938.235819][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  938.269995][ T5712] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  938.316169][ T5712] usb 3-1: config 1 interface 0 has no altsetting 0
[  938.350912][ T5712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  938.373551][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.398647][ T5712] usb 3-1: Product: syz
[  938.413650][ T5712] usb 3-1: Manufacturer: syz
[  938.437752][ T5712] usb 3-1: SerialNumber: syz
[  938.463095][T19203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  938.702163][ T5712] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  938.755422][ T5712] usb 3-1: USB disconnect, device number 90
[  939.061389][T19217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  939.098592][T19217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.118005][ T5751] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  939.274270][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'.
[  939.326589][ T5751] usb 2-1: Using ep0 maxpacket: 8
[  939.391677][ T5751] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  939.446843][ T5751] usb 2-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config
[  939.515664][ T5751] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  939.658387][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  939.668364][ T5751] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  939.681781][ T5751] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  939.691398][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.777626][ T5751] usbtmc 2-1:16.0: bulk endpoints not found
[  939.926377][T19239] binder: BINDER_SET_CONTEXT_MGR already set
[  939.959712][T19239] binder: 19234:19239 ioctl 4018620d 2000000004c0 returned -16
[  940.070270][ T5693] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  940.237782][ T5693] usb 5-1: Using ep0 maxpacket: 16
[  940.254451][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  940.270265][ T5693] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  940.298164][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.327292][ T5693] usb 5-1: config 0 descriptor??
[  940.456404][ T5693] rc_core: IR keymap rc-xbox-dvd not found
[  940.469026][ T5693] Registered IR keymap rc-empty
[  940.486246][ T5693] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  940.529063][ T5693] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input94
[  940.644798][ T5693] usb 5-1: USB disconnect, device number 13
[  940.651191][    C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  941.549233][T19257] syzkaller0: entered promiscuous mode
[  941.562000][T19257] syzkaller0: entered allmulticast mode
[  941.588564][T19256] tipc: Started in network mode
[  941.607592][T19256] tipc: Node identity e69ebd09a271, cluster identity 4711
[  941.629475][T19256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  941.671915][T19256] tipc: Resetting bearer <eth:syzkaller0>
[  941.716974][ T5628] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  941.727242][T19256] tipc: Disabling bearer <eth:syzkaller0>
[  941.828788][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3663'.
[  941.846662][ T5712] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  941.877026][ T5628] usb 5-1: Using ep0 maxpacket: 32
[  941.884182][ T5628] usb 5-1: config 139 has an invalid interface number: 49 but max is 0
[  941.893408][ T5628] usb 5-1: config 139 has no interface number 0
[  941.908109][ T5628] usb 5-1: config 139 interface 49 has no altsetting 0
[  941.918173][ T5628] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[  941.928703][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.936990][ T5628] usb 5-1: Product: syz
[  941.942352][ T5628] usb 5-1: Manufacturer: syz
[  941.970573][ T5628] usb 5-1: SerialNumber: syz
[  942.018185][ T5712] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  942.031823][ T5712] usb 3-1: config 2 has no interface number 0
[  942.052113][ T5712] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  942.080708][ T5712] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  942.109740][ T5712] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103
[  942.140118][ T5712] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  942.161637][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.184711][ T5712] usb 3-1: Product: syz
[  942.200389][ T5712] usb 3-1: Manufacturer: syz
[  942.207673][T19252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  942.237500][ T5712] usb 3-1: SerialNumber: syz
[  942.247611][T19252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.269240][T19259] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  942.286831][T19259] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  942.375420][ T5628] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244)
[  942.431288][ T5628] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71
[  942.454262][T19273] fuse: Unknown parameter 'use00000000000000000000'
[  942.487004][ T5628] usbhid 5-1:139.49: couldn't find an input interrupt endpoint
[  942.515687][T19259] netlink: 'syz.2.3662': attribute type 89 has an invalid length.
[  942.556963][ T5628] usb 5-1: USB disconnect, device number 14
[  942.580820][T19259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  942.630244][T19259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.731717][ T5751] usb 2-1: USB disconnect, device number 88
[  943.274482][T19297] binder: BINDER_SET_CONTEXT_MGR already set
[  943.291385][T19297] binder: 19294:19297 ioctl 4018620d 2000000004c0 returned -16
[  943.372961][T19287] syzkaller0: entered promiscuous mode
[  943.396494][T19287] syzkaller0: entered allmulticast mode
[  943.726501][ T5693] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  943.886531][ T5693] usb 5-1: Using ep0 maxpacket: 32
[  943.894527][ T5693] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  943.913411][ T5693] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  943.951889][ T5693] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  943.982292][ T5693] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  944.006828][T19266] Bluetooth: hci2: command 0x0406 tx timeout
[  944.048745][ T5693] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  944.062269][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.076797][ T5693] usb 5-1: Product: syz
[  944.082502][ T5693] usb 5-1: Manufacturer: syz
[  944.088402][ T5693] usb 5-1: SerialNumber: syz
[  944.115068][    C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  944.139116][ T5693] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input95
[  944.326616][ T5693] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  944.337267][ T5693]  (id 0x00)
[  944.450394][ T5693] rc_core: IR keymap rc-imon-pad not found
[  944.456461][ T5693] Registered IR keymap rc-empty
[  944.473378][ T5693] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  944.516375][ T5693] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  944.533491][ T5712] usb 3-1: probing VID:PID(0424:012C)   
[  944.568598][ T5712] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E
[  944.578662][ T5693] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  944.599758][ T5712] usb 3-1: vub300 testing BULK IN EndPoint(1) 82
[  944.617546][ T5712] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  944.626020][ T5693] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input96
[  944.656845][ T5712] vub300 3-1:2.174: probe with driver vub300 failed with error -22
[  944.673348][ T5693] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:15> initialized
[  944.692099][ T5712] usb 3-1: USB disconnect, device number 91
[  945.068890][ T5712] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  945.228907][ T5712] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  945.244551][ T5712] usb 3-1: config 0 has no interface number 0
[  945.259750][ T5712] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  945.266768][ T5751] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  945.292729][ T5712] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  945.312608][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.331047][ T5712] usb 3-1: Product: syz
[  945.342183][ T5712] usb 3-1: Manufacturer: syz
[  945.354415][ T5712] usb 3-1: SerialNumber: syz
[  945.378946][ T5712] usb 3-1: config 0 descriptor??
[  945.403540][ T5712] yurex 3-1:0.50: USB YUREX device now attached to Yurex #1
[  945.447568][ T5751] usb 2-1: Using ep0 maxpacket: 8
[  945.457513][ T5751] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  945.483898][ T5751] usb 2-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config
[  945.513548][ T5751] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  945.530718][T19304] imon:send_packet: task interrupted
[  945.537383][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  945.547979][T19304] imon:send_packet: packet tx failed (-512)
[  945.563440][ T5751] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  945.563758][T19304] imon:vfd_write: send packet #2 failed
[  945.605244][    C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  945.617937][ T5751] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  945.639783][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.677584][ T5751] usbtmc 2-1:16.0: bulk endpoints not found
[  945.757758][   T24] usb 5-1: USB disconnect, device number 15
[  946.012808][T19326] xt_SECMARK: invalid mode: 2
[  946.419147][ T5693] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  946.580757][ T5693] usb 5-1: Using ep0 maxpacket: 32
[  946.588565][ T5693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.615985][ T5693] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  946.654593][ T5693] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  946.666561][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  946.676068][ T5693] usb 5-1: Product: syz
[  946.695191][ T5693] usb 5-1: Manufacturer: syz
[  946.712612][ T5693] usb 5-1: SerialNumber: syz
[  946.763863][ T5693] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input97
[  946.956178][T19332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.983753][T19332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.812929][ T5751] usb 3-1: USB disconnect, device number 92
[  947.831711][ T5751] yurex 3-1:0.50: USB YUREX #1 now disconnected
[  947.848141][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  947.848157][   T29] audit: type=1326 audit(1779306768.301:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19357 comm="syz.5.3686" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63039ce59 code=0x0
[  947.934718][T19360] netlink: 'syz.5.3686': attribute type 1 has an invalid length.
[  947.969796][T19361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3824447974 (30595583792 ns) > initial count (28799461256 ns). Using initial count to start timer.
[  948.003506][T19360] netlink: 'syz.5.3686': attribute type 1 has an invalid length.
[  948.041027][T19360] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3686'.
[  948.081581][T19362] kvm: vcpu 0: requested 13312 ns lapic timer period limited to 200000 ns
[  948.095370][T19362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer.
[  948.824183][ T5732] usb 2-1: USB disconnect, device number 89
[  948.963700][T19372] sch_tbf: peakrate 3 is lower than or equals to rate 3 !
[  948.981899][T19372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  948.994892][T19372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  949.175275][ T5628] usb 5-1: USB disconnect, device number 16
[  949.228641][ T5628] appletouch 5-1:1.0: input: appletouch disconnected
[  949.240713][ T5732] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  949.384471][   T29] audit: type=1326 audit(1779306769.821:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.426093][   T29] audit: type=1326 audit(1779306769.851:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.459967][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.471973][   T29] audit: type=1326 audit(1779306769.851:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.497134][ T5732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  949.507008][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  949.523242][   T29] audit: type=1326 audit(1779306769.861:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.560328][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  949.574552][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.592818][ T5732] usb 2-1: Product: syz
[  949.600658][   T29] audit: type=1326 audit(1779306769.861:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.628374][ T5732] usb 2-1: Manufacturer: syz
[  949.636018][ T5732] usb 2-1: SerialNumber: syz
[  949.726595][   T29] audit: type=1326 audit(1779306769.861:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.768629][   T29] audit: type=1326 audit(1779306769.861:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.795249][   T29] audit: type=1326 audit(1779306769.861:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.822755][   T29] audit: type=1326 audit(1779306769.861:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.3691" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6ab9ce59 code=0x7ffc0000
[  949.918436][ T5732] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  949.925458][ T5732] cdc_ncm 2-1:1.0: bind() failure
[  950.123344][ T5638] Bluetooth: hci2: unexpected event for opcode 0x1009
[  950.346221][T19397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.354793][ T5693] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  950.370944][ T5712] usb 2-1: USB disconnect, device number 90
[  950.379842][T19397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.486483][ T5693] usb 3-1: device descriptor read/64, error -71
[  950.727516][ T5693] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  950.868517][ T5693] usb 3-1: device descriptor read/64, error -71
[  950.887256][ T5751] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  950.949520][T19406] fuse: Unknown parameter '0x0000000000000006'
[  950.976781][ T5693] usb usb3-port1: attempt power cycle
[  951.057270][ T5751] usb 5-1: device descriptor read/64, error -71
[  951.306691][ T5751] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  951.316878][ T5693] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  951.337902][ T5693] usb 3-1: device descriptor read/8, error -71
[  951.456654][ T5751] usb 5-1: device descriptor read/64, error -71
[  951.566957][ T5751] usb usb5-port1: attempt power cycle
[  951.576668][ T5693] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  951.597534][ T5693] usb 3-1: device descriptor read/8, error -71
[  951.707995][ T5693] usb usb3-port1: unable to enumerate USB device
[  951.906834][ T5751] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  951.928888][ T5751] usb 5-1: device descriptor read/8, error -71
[  952.178742][ T5751] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  952.217702][ T5751] usb 5-1: device descriptor read/8, error -71
[  952.328313][ T5751] usb usb5-port1: unable to enumerate USB device
[  952.616116][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'.
[  952.617048][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'.
[  952.831981][T19439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3707'.
[  953.314612][T19451] binder: 19450:19451 ioctl c018620c 2000000002c0 returned -22
[  953.420398][T19451] hma��224)
: entered promiscuous mode
[  953.507248][T19455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  953.530901][T19455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.140678][ T5732] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  954.243707][T19480] netlink: 45 bytes leftover after parsing attributes in process `syz.6.3718'.
[  954.289837][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  954.289854][   T29] audit: type=1326 audit(1779306774.731:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.6.3718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd95399ce59 code=0x0
[  954.329263][ T5732] usb 5-1: device descriptor read/64, error -71
[  954.476165][T19481] Cannot find add_set index 4 as target
[  954.502147][T19487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.555375][T19487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.588261][ T5732] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  954.656231][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3718'.
[  954.798368][ T5732] usb 5-1: device descriptor read/64, error -71
[  954.947265][ T5732] usb usb5-port1: attempt power cycle
[  955.206744][ T5712] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  955.221416][T19500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.236153][T19500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  955.316822][ T5732] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  955.357289][ T5732] usb 5-1: device descriptor read/8, error -71
[  955.379457][ T5712] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  955.388106][ T5712] usb 3-1: config 0 has no interface number 0
[  955.400785][ T5712] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  955.423361][ T5712] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  955.432913][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.443167][ T5712] usb 3-1: Product: syz
[  955.466589][ T5712] usb 3-1: Manufacturer: syz
[  955.476532][ T5712] usb 3-1: SerialNumber: syz
[  955.490562][ T5712] usb 3-1: config 0 descriptor??
[  955.514799][T19504] netlink: 'syz.1.3725': attribute type 1 has an invalid length.
[  955.519924][ T5712] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  955.531173][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'.
[  955.596034][T19505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'.
[  955.608379][ T5732] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  955.647159][ T5732] usb 5-1: device descriptor read/8, error -71
[  955.736361][    C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  955.757311][ T5732] usb usb5-port1: unable to enumerate USB device
[  955.940106][T19522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.960416][T19522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.072986][T19529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.083247][T19529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.306686][ T5751] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  957.130560][T19546] netlink: 'syz.4.3734': attribute type 12 has an invalid length.
[  957.308113][   T12] bridge_slave_1: left allmulticast mode
[  957.322915][   T12] bridge_slave_1: left promiscuous mode
[  957.340604][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.361007][   T12] bridge_slave_0: left allmulticast mode
[  957.373996][   T12] bridge_slave_0: left promiscuous mode
[  957.381416][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.478226][   T12] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[  957.489734][   T12] ip6gre1 (unregistering): left promiscuous mode
[  957.832779][   T12] bond0 (unregistering): Released all slaves
[  957.852005][   T12] bond1 (unregistering): Released all slaves
[  957.963710][   T12] tipc: Disabling bearer <udp:s>
[  957.975457][   T12] tipc: Left network mode
[  958.076947][T14038] usb 3-1: USB disconnect, device number 97
[  958.117783][T14038] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  958.575920][T14038] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  958.738376][T14038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  958.782941][T14038] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  958.803975][T14038] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  958.848462][T14038] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  958.866510][T14038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.927905][T14038] usb 3-1: Product: syz
[  958.957356][T14038] usb 3-1: Manufacturer: syz
[  958.970894][T14038] usb 3-1: SerialNumber: syz
[  959.134557][   T12] hsr_slave_0: left promiscuous mode
[  959.169647][   T12] hsr_slave_1: left promiscuous mode
[  959.219778][T14038] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  959.235000][T14038] cdc_ncm 3-1:1.0: bind() failure
[  959.576461][T14038] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  959.654113][ T5732] usb 3-1: USB disconnect, device number 98
[  959.746469][T14038] usb 5-1: Using ep0 maxpacket: 32
[  959.759774][T14038] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  959.781216][T14038] usb 5-1: config 0 has no interface number 0
[  959.829729][T14038] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  959.842449][T14038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.858386][T14038] usb 5-1: Product: syz
[  959.866490][T14038] usb 5-1: Manufacturer: syz
[  959.873960][T14038] usb 5-1: SerialNumber: syz
[  959.889634][T14038] usb 5-1: config 0 descriptor??
[  960.247207][T19591] netlink: 'syz.4.3746': attribute type 3 has an invalid length.
[  960.310697][   T12] IPVS: stop unused estimator thread 0...
[  960.321066][T19591] netlink: 'syz.4.3746': attribute type 3 has an invalid length.
[  960.412145][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'.
[  960.487096][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.567762][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.677704][ T5693] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  960.838674][ T5693] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  960.847408][ T5693] usb 3-1: config 0 has no interface number 0
[  960.873073][ T5693] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  960.908449][ T5693] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  960.925655][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.937619][ T5693] usb 3-1: Product: syz
[  960.956190][ T5693] usb 3-1: Manufacturer: syz
[  960.967140][ T5693] usb 3-1: SerialNumber: syz
[  960.983060][ T5693] usb 3-1: config 0 descriptor??
[  961.001749][T14038] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  961.017491][ T5693] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  961.028301][T14038] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  961.056844][T14038] usb 5-1: USB disconnect, device number 25
[  961.217266][    C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  961.727407][T19608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.760076][T19608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.998558][T19611] netlink: 'syz.1.3754': attribute type 12 has an invalid length.
[  962.010931][T19611] netlink: 'syz.1.3754': attribute type 29 has an invalid length.
[  962.036802][T19611] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3754'.
[  963.102153][T19639] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3760'.
[  963.504147][ T5732] usb 3-1: USB disconnect, device number 99
[  963.544699][ T5732] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  963.870727][T19649] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3764'.
[  963.951215][ T5638] Bluetooth: hci0: Malformed Event: 0x13
[  964.289424][   T29] audit: type=1326 audit(1779306784.731:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19660 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc6ab9ce59 code=0x0
[  964.356444][T14038] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  964.367659][ T5693] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  964.545045][ T5693] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  964.554580][T14038] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  964.574361][ T5693] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  964.586460][T14038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  964.601475][ T5693] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  964.616605][T14038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  964.631483][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  964.644075][T14038] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  964.666899][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  964.681105][T14038] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  964.692156][T14038] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  964.701422][ T5693] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  964.711312][T14038] usb 3-1: Manufacturer: syz
[  964.715990][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  964.726945][T14038] usb 3-1: config 0 descriptor??
[  964.734823][ T5693] usb 2-1: Product: syz
[  964.744976][ T5693] usb 2-1: Manufacturer: syz
[  964.760868][ T5693] cdc_wdm 2-1:1.0: skipping garbage
[  964.766199][ T5693] cdc_wdm 2-1:1.0: skipping garbage
[  964.786565][ T5693] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  964.795117][ T5693] cdc_wdm 2-1:1.0: Unknown control protocol
[  965.155627][T19658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.173599][T19658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.190249][T14038] usbhid 3-1:0.0: can't add hid device: -71
[  965.206935][T14038] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  965.226525][ T5693] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  965.239764][T14038] usb 3-1: USB disconnect, device number 100
[  965.396540][ T5693] usb 5-1: Using ep0 maxpacket: 32
[  965.412444][ T5693] usb 5-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config
[  965.433070][ T5693] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  965.449825][T14038] usb 2-1: USB disconnect, device number 92
[  965.476218][ T5693] usb 5-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  965.492345][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.511027][ T5693] usb 5-1: Product: 䫮ℏ㤾앷塋ቊꬨ↍芇薋ꭨ悉꥚⽫粁㑶᧿䑁콀⵺㦧癩蹄囬宓Ꮠⷖ儲祍뿈⃥丏똕ⱋ奎匘骞蔦䳊銻煯鎹텘꾄ᕶ磁ᔺ䍆㦀ꤗ컁ᷳࣖṈ㈜⎼喭⌷䄴֘绺憖貨阔﷠ᱼ⨵ׄ⾆⛏眃閄쬺廉訴헂拾坊脂⪋뜋辒
[  965.549307][ T5693] usb 5-1: Manufacturer: 돵鱶콃퐢⧉坣溋詏텔⎋붣篩壆ّᗋ䩑쓡史顮ඁ锎ብ칵⡲ˣ撇ꈚ㽁ꓞꏠ쫧뮦묤ڮ馎䃸闏嬯昜䆗抟湉⒣㧰匭ﰿ⳪誀籲軷꜎綿鶟攻秝폜䋿뤁謔ꙣ沊嘔翼ᣘ쉡탮᳀냴ૻ䈐吺癨ꎗ䉄ꤙ⼿㱪ච⫛镐揰塨荷裰諊邚୿⿓治
[  965.593967][ T5693] usb 5-1: SerialNumber: 倨嗟✖嫠愷턖澑躮펨ꍍ뜠땹踨퀄∊ដៗ닖ꇺ৻䥛㧉꼨岆띞랽襔ᣈ婟ꯓ๑䌏䭞﹈㋨卪ਐ薇䙌ۃ㐮Ƅ狵飔煈덀퍘닾谸貒㖚ኾ튷፮Į䮇熝쳘딂皎ퟨ歟ℓ㪔镊ǝᜮ関ቌ蠣ꮟҨ甧爍暋鞽瞈醠瑓贞ꪅ츥憮ࡨ厼磬ṵ䗁콥ᨇ隉᫆ඬ欙噦꺴䰷陻曂粄
[  965.999784][T19695] 9p: p9: multiple sources not supported
[  966.008137][T19696] 9p: p9: multiple sources not supported
[  966.696640][ T5732] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  966.764861][T19710] ALSA: seq fatal error: cannot create timer (-16)
[  966.856818][ T5732] usb 2-1: device descriptor read/64, error -71
[  967.116705][ T5732] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  967.266679][ T5732] usb 2-1: device descriptor read/64, error -71
[  967.387959][ T5732] usb usb2-port1: attempt power cycle
[  967.756571][ T5732] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  967.818411][ T5732] usb 2-1: device descriptor read/8, error -71
[  967.923841][ T5693] usb 5-1: USB disconnect, device number 26
[  968.066901][ T5732] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  968.096480][T14038] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[  968.097151][ T5732] usb 2-1: device descriptor read/8, error -71
[  968.114557][T19727] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  968.148440][T19727] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  968.230262][ T5732] usb usb2-port1: unable to enumerate USB device
[  968.287781][T14038] usb 3-1: not running at top speed; connect to a high speed hub
[  968.304384][T14038] usb 3-1: config 3 interface 0 has no altsetting 0
[  968.314729][T14038] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=7f.e9
[  968.328208][T14038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.338922][T14038] usb 3-1: Product: syz
[  968.348129][T19729] netlink: 'syz.5.3786': attribute type 12 has an invalid length.
[  968.356185][T14038] usb 3-1: Manufacturer: syz
[  968.366665][T14038] usb 3-1: SerialNumber: syz
[  968.641612][T14038] usb 3-1: USB disconnect, device number 101
[  969.636482][ T5638] Bluetooth: hci0: command 0x0406 tx timeout
[  969.995117][T19756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.038472][T19756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.306752][ T5628] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  970.471906][ T5628] usb 2-1: unable to get BOS descriptor or descriptor too short
[  970.498476][ T5628] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024
[  970.521644][ T5628] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  970.541778][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.566001][ T5628] usb 2-1: Product: syz
[  970.592747][ T5628] usb 2-1: Manufacturer: 㐁
[  970.614354][ T5628] usb 2-1: SerialNumber: syz
[  970.637876][T19754] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  970.913013][T19778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.972043][T19778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.010410][ T5628] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  971.034706][ T5628] usb 2-1: MIDIStreaming interface descriptor not found
[  971.043859][T19780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.103738][T19780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.173031][ T5628] usb 2-1: USB disconnect, device number 97
[  971.318535][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  971.390223][T19783] netlink: 'syz.4.3801': attribute type 9 has an invalid length.
[  971.659477][T19787] syzkaller0: entered promiscuous mode
[  971.673919][T19787] syzkaller0: entered allmulticast mode
[  971.696767][T19787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  971.821043][T19793] binder: BINDER_SET_CONTEXT_MGR already set
[  971.827510][T19793] binder: 19786:19793 ioctl 4018620d 2000000004c0 returned -16
[  972.081402][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3807'.
[  972.580795][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.615185][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.672898][T19817] netlink: 'syz.5.3809': attribute type 8 has an invalid length.
[  973.246701][ T5628] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  973.342496][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.354894][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.416747][ T5628] usb 5-1: Using ep0 maxpacket: 32
[  973.432443][ T5628] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  973.445985][ T5628] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  973.459079][ T5628] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  973.470898][ T5628] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  973.487527][ T5628] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  973.496974][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.505042][ T5628] usb 5-1: Product: syz
[  973.509473][ T5628] usb 5-1: Manufacturer: syz
[  973.514141][ T5628] usb 5-1: SerialNumber: syz
[  973.529153][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  973.544625][ T5628] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input98
[  973.676495][T14038] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  973.736647][ T5628] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  973.749139][ T5628]  (id 0x00)
[  973.796905][ T5628] rc_core: IR keymap rc-imon-pad not found
[  973.803494][ T5628] Registered IR keymap rc-empty
[  973.808903][ T5628] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  973.819352][ T5628] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  973.830746][T14038] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  973.854119][T14038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  973.898528][T14038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  973.919984][T14038] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  973.937959][T14038] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  973.950087][T14038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.953606][ T5628] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  973.962640][T14038] usb 3-1: config 0 descriptor??
[  973.985025][T19846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3818'.
[  974.043186][ T5628] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input99
[  974.063816][ T5628] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:27> initialized
[  974.291420][T19855] binder: BINDER_SET_CONTEXT_MGR already set
[  974.315358][T19855] binder: 19851:19855 ioctl 4018620d 2000000004c0 returned -16
[  974.410827][T14038] plantronics 0003:047F:FFFF.0032: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  974.540546][T19874] loop9: detected capacity change from 0 to 7
[  974.564861][T19874] Dev loop9: unable to read RDB block 7
[  974.584803][T19874]  loop9: unable to read partition table
[  974.607328][T19874] loop9: partition table beyond EOD, truncated
[  974.629654][T19874] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  974.716738][T19873] imon:send_packet: packet tx failed (-71)
[  974.727417][ T5732] usb 5-1: USB disconnect, device number 27
[  974.779978][T19873] imon:vfd_write: send packet #0 failed
[  974.945162][T19876] netlink: 'syz.6.3823': attribute type 12 has an invalid length.
[  975.776749][ T5693] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  975.938677][ T5693] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  975.949815][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  975.964080][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  975.991026][ T5693] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  976.000710][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.009074][ T5693] usb 5-1: Product: syz
[  976.013624][ T5693] usb 5-1: Manufacturer: syz
[  976.018582][ T5693] usb 5-1: SerialNumber: syz
[  976.030036][ T5693] usb 5-1: config 0 descriptor??
[  976.106941][T14038] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  976.128824][T19903] kAFS: unable to lookup cell '�'
[  976.154008][T19903] kAFS: unable to lookup cell '(,c��'
[  976.262053][ T5693] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff
[  976.283835][T14038] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  976.305329][T14038] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  976.329292][T14038] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  976.363116][ T5693] usb 5-1: USB disconnect, device number 28
[  976.370750][T14038] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  976.392100][T14038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.413293][T14038] usb 2-1: Product: syz
[  976.434622][T14038] usb 2-1: Manufacturer: syz
[  976.445234][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  976.471274][T14038] usb 2-1: SerialNumber: syz
[  976.583405][T11069] usb 3-1: USB disconnect, device number 102
[  976.696006][T14038] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  976.727023][T14038] cdc_ncm 2-1:1.0: bind() failure
[  976.927021][ T5638] Bluetooth: hci2: unexpected event for opcode 0x1009
[  977.116610][T11069] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  977.223839][ T5732] usb 2-1: USB disconnect, device number 98
[  977.232554][T19924] binder: BINDER_SET_CONTEXT_MGR already set
[  977.239260][T19924] binder: 19914:19924 ioctl 4018620d 2000000004c0 returned -16
[  977.265460][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3840'.
[  977.303196][T11069] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.336874][T11069] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  977.385473][T11069] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  977.415296][T11069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.453263][T11069] usb 3-1: config 0 descriptor??
[  977.513353][T19938] veth0_to_bridge: entered promiscuous mode
[  977.527987][T19938] macvtap1: entered allmulticast mode
[  977.542696][T19938] veth0_to_bridge: entered allmulticast mode
[  977.568990][T19938] veth0_to_bridge: left allmulticast mode
[  977.579570][T19938] veth0_to_bridge: left promiscuous mode
[  977.662711][T19936] netlink: 'syz.5.3843': attribute type 12 has an invalid length.
[  977.674560][T19907] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  977.685711][T19936] netlink: 'syz.5.3843': attribute type 29 has an invalid length.
[  977.706518][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  977.745250][T19936] netlink: 'syz.5.3843': attribute type 3 has an invalid length.
[  977.780484][T19936] netlink: 'syz.5.3843': attribute type 12 has an invalid length.
[  977.813627][T19936] netlink: 'syz.5.3843': attribute type 29 has an invalid length.
[  977.848709][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  977.884838][T19936] netlink: 'syz.5.3843': attribute type 3 has an invalid length.
[  977.915688][T19936] netlink: 'syz.5.3843': attribute type 12 has an invalid length.
[  977.957393][T19936] netlink: 'syz.5.3843': attribute type 29 has an invalid length.
[  977.983226][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  977.996744][T19936] netlink: 'syz.5.3843': attribute type 3 has an invalid length.
[  978.044745][T19938] veth0_to_bridge: entered promiscuous mode
[  978.059276][T19938] macvtap1: entered allmulticast mode
[  978.071948][T19938] veth0_to_bridge: entered allmulticast mode
[  978.102408][T19938] veth0_to_bridge: left allmulticast mode
[  978.115374][T19938] veth0_to_bridge: left promiscuous mode
[  978.198469][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  978.219663][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  978.266252][T19938] veth0_to_bridge: entered promiscuous mode
[  978.284083][T19938] macvtap1: entered allmulticast mode
[  978.298936][T19938] veth0_to_bridge: entered allmulticast mode
[  978.325666][T19938] veth0_to_bridge: left allmulticast mode
[  978.341974][T19938] veth0_to_bridge: left promiscuous mode
[  978.450832][T19936] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3843'.
[  978.566710][T11069] ath6kl: Failed to submit usb control message: -110
[  978.587673][T11069] ath6kl: unable to send the bmi data to the device: -110
[  978.611807][T11069] ath6kl: Unable to send get target info: -110
[  978.638091][T11069] ath6kl: Failed to init ath6kl core: -110
[  978.671090][T11069] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110
[  978.833492][T19954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'.
[  978.843578][T19954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3847'.
[  978.855659][T19952] binder: BINDER_SET_CONTEXT_MGR already set
[  978.869421][T19952] binder: 19948:19952 ioctl 4018620d 2000000004c0 returned -16
[  979.066637][T11069] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  979.217490][T11069] usb 5-1: too many configurations: 126, using maximum allowed: 8
[  979.248783][T11069] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  979.265751][T11069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.284548][T11069] usb 5-1: Product: syz
[  979.294780][T11069] usb 5-1: Manufacturer: syz
[  979.309335][T11069] usb 5-1: SerialNumber: syz
[  979.539926][T11069] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  979.571056][T11069] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  979.592880][T11069] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  979.626622][T11069] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  979.664907][T11069] usb 5-1: USB disconnect, device number 29
[  979.789498][ T5628] usb 3-1: USB disconnect, device number 103
[  979.853900][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  980.193785][T19970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3853'.
[  980.442386][T19980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.458416][T19980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.625266][T19984] trusted_key: encrypted_key: insufficient parameters specified
[  980.788198][T19990] binder: BINDER_SET_CONTEXT_MGR already set
[  980.794247][T19990] binder: 19983:19990 ioctl 4018620d 2000000004c0 returned -16
[  981.255271][T19999] binder: BINDER_SET_CONTEXT_MGR already set
[  981.275875][T19999] binder: 19994:19999 ioctl 4018620d 2000000004c0 returned -16
[  981.394126][T20002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.421560][T20002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.905545][T20014] xt_SECMARK: invalid mode: 2
[  982.633125][T20035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  982.661500][T20035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.889384][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.917385][T11069] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  982.935662][   T29] audit: type=1800 audit(1779306803.371:1500): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3872" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  983.108954][T11069] usb 5-1: unable to get BOS descriptor or descriptor too short
[  983.125137][T11069] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  983.145647][T11069] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  983.193864][T11069] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  983.211868][T11069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.234687][T11069] usb 5-1: Product: syz
[  983.240423][T11069] usb 5-1: Manufacturer: syz
[  983.250808][T11069] usb 5-1: SerialNumber: syz
[  983.300344][T11069] usb 5-1: selecting invalid altsetting 1
[  983.318720][T11069] usb 5-1: unit 6 not found!
[  983.506690][ T5732] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  983.686273][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.759015][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  983.781657][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  983.805756][ T5732] usb 2-1: Product: syz
[  983.825047][ T5732] usb 2-1: Manufacturer: syz
[  983.837547][ T5732] usb 2-1: SerialNumber: syz
[  983.921459][T11069] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[  983.939394][T20036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  983.979975][T20036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  984.088816][ T5732] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  984.356251][    C0] usblp0: nonzero write bulk status received: -71
[  984.383571][ T5732] usb 2-1: USB disconnect, device number 99
[  984.452496][ T5732] usblp0: removed
[  985.605305][T11069] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  985.645537][T11069] usb 5-1: USB disconnect, device number 30
[  985.728868][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  986.456400][ T5732] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  986.628703][ T5732] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  986.637577][ T5732] usb 5-1: config 1 has no interface number 0
[  986.644764][ T5732] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  986.663828][ T5732] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  986.686522][ T5732] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  986.755381][ T5732] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  986.775934][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.785019][ T5732] usb 5-1: Product: syz
[  986.796197][ T5732] usb 5-1: Manufacturer: syz
[  986.821750][ T5732] usb 5-1: SerialNumber: syz
[  986.834439][T20080] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  986.859345][T20089] binder: BINDER_SET_CONTEXT_MGR already set
[  986.887826][T20089] binder: 20086:20089 ioctl 4018620d 2000000004c0 returned -16
[  987.113251][T20095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  987.224946][T20098] validate_nla: 9 callbacks suppressed
[  987.232723][T20098] netlink: 'syz.1.3884': attribute type 4 has an invalid length.
[  987.362931][ T5732] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  987.541635][ T5732] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71
[  987.574860][ T5732] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71
[  987.606624][ T5732] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71
[  987.626270][ T5732] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71
[  987.661831][ T5732] usb 5-1: USB disconnect, device number 31
[  987.695530][ T5732] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem
[  987.708773][ T5751] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  987.898785][ T5751] usb 2-1: Using ep0 maxpacket: 16
[  987.946929][ T5732] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  987.957437][ T5751] usb 2-1: config 1 has no interfaces?
[  987.996059][ T5751] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  988.024222][ T5751] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  988.049635][ T5751] usb 2-1: Manufacturer: syz
[  989.781281][T20126] __nla_validate_parse: 1 callbacks suppressed
[  989.781296][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3891'.
[  989.819992][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3891'.
[  989.959639][T20126] bond3 (unregistering): Released all slaves
[  990.010535][T20137] FAULT_INJECTION: forcing a failure.
[  990.010535][T20137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  990.024328][T20137] CPU: 1 UID: 0 PID: 20137 Comm: syz.4.3894 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  990.024354][T20137] Tainted: [L]=SOFTLOCKUP
[  990.024359][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  990.024369][T20137] Call Trace:
[  990.024376][T20137]  <TASK>
[  990.024383][T20137]  dump_stack_lvl+0xe8/0x150
[  990.024411][T20137]  should_fail_ex+0x412/0x560
[  990.024440][T20137]  _copy_from_iter+0x1d3/0x1670
[  990.024465][T20137]  ? rcu_is_watching+0x15/0xb0
[  990.024490][T20137]  ? __pfx__copy_from_iter+0x10/0x10
[  990.024519][T20137]  ? netlink_sendmsg+0x650/0xb40
[  990.024543][T20137]  ? skb_put+0x11b/0x210
[  990.024577][T20137]  netlink_sendmsg+0x6c0/0xb40
[  990.024607][T20137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.024633][T20137]  ? __fget_files+0x2a/0x420
[  990.024652][T20137]  ? aa_sock_msg_perm+0xf1/0x1b0
[  990.024677][T20137]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  990.024700][T20137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.024725][T20137]  __sys_sendto+0x672/0x710
[  990.024750][T20137]  ? __pfx___sys_sendto+0x10/0x10
[  990.024770][T20137]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  990.024803][T20137]  ? __fget_files+0x3a0/0x420
[  990.024833][T20137]  ? ksys_write+0x242/0x270
[  990.024871][T20137]  ? __pfx_ksys_write+0x10/0x10
[  990.024899][T20137]  __x64_sys_sendto+0xde/0x100
[  990.024922][T20137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.024942][T20137]  do_syscall_64+0x15f/0xf80
[  990.024966][T20137]  ? trace_irq_disable+0x3b/0x140
[  990.024991][T20137]  ? clear_bhb_loop+0x40/0x90
[  990.025012][T20137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.025030][T20137] RIP: 0033:0x7fbc6ab9ce59
[  990.025046][T20137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.025061][T20137] RSP: 002b:00007fbc6babc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  990.025080][T20137] RAX: ffffffffffffffda RBX: 00007fbc6ae15fa0 RCX: 00007fbc6ab9ce59
[  990.025092][T20137] RDX: 0000000000000090 RSI: 0000200000000540 RDI: 0000000000000003
[  990.025104][T20137] RBP: 00007fbc6babc090 R08: 0000000000000000 R09: 0000000000000000
[  990.025115][T20137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.025124][T20137] R13: 00007fbc6ae16038 R14: 00007fbc6ae15fa0 R15: 00007fbc6af3fa48
[  990.025152][T20137]  </TASK>
[  990.561300][T20143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.571900][T20143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.586874][T20143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.600358][T20128] bond3 (unregistering): Released all slaves
[  990.613214][T11066] usb 2-1: USB disconnect, device number 100
[  990.667941][T20143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.718134][ T5732] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  990.876684][ T5732] usb 5-1: device descriptor read/64, error -71
[  990.907085][T20148] binder: BINDER_SET_CONTEXT_MGR already set
[  990.913327][T20148] binder: 20145:20148 ioctl 4018620d 2000000004c0 returned -16
[  991.126692][ T5732] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  991.301115][ T5732] usb 5-1: device descriptor read/64, error -71
[  991.402004][T20158] openvswitch: netlink: Missing valid actions attribute.
[  991.417333][ T5732] usb usb5-port1: attempt power cycle
[  991.418509][T20158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  991.438396][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3900'.
[  991.566660][T11066] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  991.717042][T11066] usb 3-1: Using ep0 maxpacket: 32
[  991.727886][T11066] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  991.747077][T11066] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  991.759833][T11066] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  991.774010][T11066] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  991.788140][T20164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3902'.
[  991.788973][ T5732] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  991.806195][T20165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3902'.
[  991.808810][T11066] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  991.825070][T11066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.834329][ T5732] usb 5-1: device descriptor read/8, error -71
[  991.836216][T20165] ip6erspan0: entered allmulticast mode
[  991.841177][T11066] usb 3-1: Product: syz
[  991.850967][T11066] usb 3-1: Manufacturer: syz
[  991.855680][T11066] usb 3-1: SerialNumber: syz
[  991.873305][    C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  991.885521][T11066] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input101
[  991.910981][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3903'.
[  992.078109][ T5732] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  992.087302][T11066] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  992.106430][T11066]  (id 0x00)
[  992.118783][ T5732] usb 5-1: device descriptor read/8, error -71
[  992.128517][T20176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3906'.
[  992.188085][T11066] rc_core: IR keymap rc-imon-pad not found
[  992.194123][T11066] Registered IR keymap rc-empty
[  992.199774][T11066] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  992.210425][T11066] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  992.226749][ T5732] usb usb5-port1: unable to enumerate USB device
[  992.239939][T11066] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  992.251807][T11066] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input102
[  992.269198][T11066] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:104> initialized
[  992.433232][T11066] usb 3-1: USB disconnect, device number 104
[  992.439711][ T5751] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  992.509326][T20186] xt_SECMARK: invalid mode: 2
[  992.596656][ T5751] usb 2-1: Using ep0 maxpacket: 8
[  992.603640][ T5751] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  992.612130][ T5751] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  992.622096][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  992.632698][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  992.643577][ T5751] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  992.658287][ T5751] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  992.667530][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.881029][ T5751] usb 2-1: usb_control_msg returned -32
[  992.887597][ T5751] usbtmc 2-1:16.0: can't read capabilities
[  992.989158][T20194] binder: BINDER_SET_CONTEXT_MGR already set
[  992.995418][T20194] binder: 20191:20194 ioctl 4018620d 2000000004c0 returned -16
[  993.131428][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  993.138147][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  993.215701][T20197] netlink: 'syz.2.3913': attribute type 1 has an invalid length.
[  993.241453][T20199] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  993.249148][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'.
[  993.286970][T20197] 8021q: adding VLAN 0 to HW filter on device bond2
[  993.315462][T20200] vlan0: entered allmulticast mode
[  993.315480][T20200] bond2: entered allmulticast mode
[  993.375629][T20197] bond2: (slave geneve2): making interface the new active one
[  993.413439][T20197] geneve2: entered allmulticast mode
[  993.444693][T11066] usb 2-1: USB disconnect, device number 101
[  993.513379][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3914'.
[  993.569486][T20197] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  993.935386][T20210] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�l�1�*�$pOc�ɔ��r$�G����
[  994.326767][T11066] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  994.501423][T11066] usb 2-1: unable to get BOS descriptor or descriptor too short
[  994.522091][T11066] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  994.554251][T11066] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  994.588913][T11066] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  994.612505][T11066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.634285][T11066] usb 2-1: Product: syz
[  994.650998][T11066] usb 2-1: Manufacturer: syz
[  994.675024][T11066] usb 2-1: SerialNumber: syz
[  995.154331][T20235] input: syz0 as /devices/virtual/input/input103
[  995.162324][T11066] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  995.172409][T11066] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  995.182816][T11066] usb 2-1: 2:1 : unknown format tag 0x400 is detected.  processed as MPEG.
[  995.198412][T11066] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  995.206940][T11066] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  995.273819][T11066] usb 2-1: USB disconnect, device number 102
[  995.330978][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  995.473138][T20238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.485249][T20238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.597397][T20240] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  995.796096][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3925'.
[  996.066542][T11069] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  996.091178][T20263] binder: BINDER_SET_CONTEXT_MGR already set
[  996.101834][T20263] binder: 20260:20263 ioctl 4018620d 2000000004c0 returned -16
[  996.156891][T11066] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  996.229266][T11069] usb 3-1: Using ep0 maxpacket: 32
[  996.242926][T11069] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  996.252163][T11069] usb 3-1: config 0 has no interface number 0
[  996.260323][T11069] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  996.270836][T11069] usb 3-1: config 0 interface 89 has no altsetting 0
[  996.280387][T11069] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  996.291589][T11069] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.299972][T11069] usb 3-1: Product: syz
[  996.304439][T11069] usb 3-1: Manufacturer: syz
[  996.309451][T11069] usb 3-1: SerialNumber: syz
[  996.319677][T11069] usb 3-1: config 0 descriptor??
[  996.326927][T11066] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  996.345026][T11066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.350701][T11069] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  996.363855][T11069] em28xx 3-1:0.89: Video interface 89 found:
[  996.371349][T11066] usb 2-1: Product: syz
[  996.375799][T11066] usb 2-1: Manufacturer: syz
[  996.384098][T11066] usb 2-1: SerialNumber: syz
[  997.137722][T11066] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  997.179964][T11066] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  997.216062][T11066] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  997.253838][T11066] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  997.295714][T11066] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  997.327797][T11066] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  997.358592][T11066] usb 2-1: USB disconnect, device number 103
[  997.516746][T11069] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  997.552929][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.594620][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.631463][T11069] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  997.693427][T11069] em28xx 3-1:0.89: board has no eeprom
[  997.782644][T11069] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  997.811396][T11069] em28xx 3-1:0.89: analog set to bulk mode.
[  997.860795][ T5712] em28xx 3-1:0.89: Registering V4L2 extension
[  997.918553][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3937'.
[  997.998894][T11069] usb 3-1: USB disconnect, device number 105
[  998.023859][T11069] em28xx 3-1:0.89: Disconnecting em28xx
[  998.173484][ T5712] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  998.202095][ T5712] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  998.272277][ T5712] em28xx 3-1:0.89: No AC97 audio processor
[  998.327575][ T5712] usb 3-1: Decoder not found
[  998.374057][ T5712] em28xx 3-1:0.89: failed to create media graph
[  998.449515][ T5712] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  998.516904][T20311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  998.574874][T20306] ==================================================================
[  998.575395][T20311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  998.582974][T20306] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0
[  998.597845][T20306] Read of size 4 at addr ffff888028980860 by task v4l_id/20306
[  998.605369][T20306] 
[  998.607683][T20306] CPU: 0 UID: 0 PID: 20306 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  998.607699][T20306] Tainted: [L]=SOFTLOCKUP
[  998.607703][T20306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  998.607709][T20306] Call Trace:
[  998.607715][T20306]  <TASK>
[  998.607721][T20306]  dump_stack_lvl+0xe8/0x150
[  998.607735][T20306]  print_address_description+0x55/0x1e0
[  998.607747][T20306]  ? v4l2_open+0x395/0x3a0
[  998.607760][T20306]  print_report+0x58/0x70
[  998.607768][T20306]  kasan_report+0x117/0x150
[  998.607783][T20306]  ? v4l2_open+0x395/0x3a0
[  998.607797][T20306]  v4l2_open+0x395/0x3a0
[  998.607810][T20306]  chrdev_open+0x4cd/0x5e0
[  998.607821][T20306]  ? __pfx_chrdev_open+0x10/0x10
[  998.607829][T20306]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  998.607844][T20306]  ? __pfx_chrdev_open+0x10/0x10
[  998.607853][T20306]  do_dentry_open+0x785/0x14e0
[  998.607866][T20306]  vfs_open+0x3b/0x340
[  998.607877][T20306]  ? path_openat+0x2df0/0x3860
[  998.607890][T20306]  path_openat+0x2e08/0x3860
[  998.607905][T20306]  ? __pfx_stack_trace_save+0x10/0x10
[  998.607920][T20306]  ? stack_depot_save_flags+0x33/0x810
[  998.607934][T20306]  ? __pfx_path_openat+0x10/0x10
[  998.607946][T20306]  ? __x64_sys_openat+0x138/0x170
[  998.607958][T20306]  ? __lock_acquire+0x6b5/0x2cf0
[  998.607970][T20306]  do_file_open+0x23e/0x4a0
[  998.607984][T20306]  ? __pfx_do_file_open+0x10/0x10
[  998.608000][T20306]  ? _raw_spin_unlock+0x28/0x50
[  998.608012][T20306]  ? alloc_fd+0x64b/0x6c0
[  998.608025][T20306]  do_sys_openat2+0x113/0x200
[  998.608037][T20306]  ? __pfx_do_sys_openat2+0x10/0x10
[  998.608048][T20306]  ? exc_page_fault+0x6a/0xc0
[  998.608061][T20306]  ? do_user_addr_fault+0xc6f/0x1340
[  998.608072][T20306]  __x64_sys_openat+0x138/0x170
[  998.608083][T20306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.608093][T20306]  do_syscall_64+0x15f/0xf80
[  998.608107][T20306]  ? trace_irq_disable+0x3b/0x140
[  998.608121][T20306]  ? clear_bhb_loop+0x40/0x90
[  998.608131][T20306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.608141][T20306] RIP: 0033:0x7fbe7bca7407
[  998.608152][T20306] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  998.608161][T20306] RSP: 002b:00007ffed40ec940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  998.608173][T20306] RAX: ffffffffffffffda RBX: 00007fbe7c3c2880 RCX: 00007fbe7bca7407
[  998.608180][T20306] RDX: 0000000000000000 RSI: 00007ffed40ecf1c RDI: ffffffffffffff9c
[  998.608187][T20306] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  998.608193][T20306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  998.608199][T20306] R13: 00007ffed40ecb90 R14: 00007fbe7c529000 R15: 00005647fc1254d8
[  998.608210][T20306]  </TASK>
[  998.608214][T20306] 
[  998.881954][T20306] Allocated by task 5712:
[  998.886257][T20306]  kasan_save_track+0x3e/0x80
[  998.890923][T20306]  __kasan_kmalloc+0x93/0xb0
[  998.895508][T20306]  __kmalloc_cache_noprof+0x31c/0x660
[  998.900882][T20306]  em28xx_v4l2_init+0x10b/0x2eb0
[  998.905833][T20306]  em28xx_init_extension+0x120/0x1c0
[  998.911105][T20306]  process_scheduled_works+0xb5d/0x1860
[  998.916633][T20306]  worker_thread+0xa53/0xfc0
[  998.921199][T20306]  kthread+0x389/0x470
[  998.925248][T20306]  ret_from_fork+0x514/0xb70
[  998.929822][T20306]  ret_from_fork_asm+0x1a/0x30
[  998.934567][T20306] 
[  998.936873][T20306] Freed by task 5712:
[  998.940831][T20306]  kasan_save_track+0x3e/0x80
[  998.945491][T20306]  kasan_save_free_info+0x46/0x50
[  998.950523][T20306]  __kasan_slab_free+0x5c/0x80
[  998.955274][T20306]  kfree+0x1c5/0x640
[  998.959149][T20306]  em28xx_v4l2_init+0x1685/0x2eb0
[  998.964239][T20306]  em28xx_init_extension+0x120/0x1c0
[  998.969545][T20306]  process_scheduled_works+0xb5d/0x1860
[  998.975070][T20306]  worker_thread+0xa53/0xfc0
[  998.979636][T20306]  kthread+0x389/0x470
[  998.983716][T20306]  ret_from_fork+0x514/0xb70
[  998.988304][T20306]  ret_from_fork_asm+0x1a/0x30
[  998.993050][T20306] 
[  998.995353][T20306] The buggy address belongs to the object at ffff888028980000
[  998.995353][T20306]  which belongs to the cache kmalloc-8k of size 8192
[  999.009379][T20306] The buggy address is located 2144 bytes inside of
[  999.009379][T20306]  freed 8192-byte region [ffff888028980000, ffff888028982000)
[  999.023323][T20306] 
[  999.025627][T20306] The buggy address belongs to the physical page:
[  999.032022][T20306] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28980
[  999.040761][T20306] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  999.049238][T20306] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  999.056759][T20306] page_type: f5(slab)
[  999.060729][T20306] raw: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122
[  999.069290][T20306] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  999.077852][T20306] head: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122
[  999.086506][T20306] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  999.095178][T20306] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  999.103827][T20306] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  999.112475][T20306] page dumped because: kasan: bad access detected
[  999.119052][T20306] page_owner tracks the page as allocated
[  999.124756][T20306] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5373, tgid 5373 (start-stop-daem), ts 46075287416, free_ts 46003715308
[  999.145586][T20306]  post_alloc_hook+0x22d/0x280
[  999.150341][T20306]  get_page_from_freelist+0x24ba/0x2540
[  999.155871][T20306]  __alloc_frozen_pages_noprof+0x18d/0x380
[  999.161680][T20306]  allocate_slab+0x77/0x660
[  999.166176][T20306]  refill_objects+0x339/0x3d0
[  999.170836][T20306]  __pcs_replace_empty_main+0x321/0x720
[  999.176366][T20306]  __kmalloc_cache_noprof+0x392/0x660
[  999.181719][T20306]  tomoyo_init_log+0x112e/0x1fb0
[  999.186641][T20306]  tomoyo_supervisor+0x353/0x1570
[  999.191645][T20306]  tomoyo_env_perm+0x151/0x1f0
[  999.196417][T20306]  tomoyo_find_next_domain+0x15cb/0x1aa0
[  999.202035][T20306]  tomoyo_bprm_check_security+0x11b/0x180
[  999.207736][T20306]  security_bprm_check+0x85/0x240
[  999.212740][T20306]  bprm_execve+0x8a4/0x1510
[  999.217222][T20306]  do_execveat_common+0x50d/0x690
[  999.222226][T20306]  __x64_sys_execve+0x97/0xc0
[  999.226891][T20306] page last free pid 5372 tgid 5372 stack trace:
[  999.233195][T20306]  __free_frozen_pages+0xbc7/0xd30
[  999.238426][T20306]  __slab_free+0x274/0x2c0
[  999.242830][T20306]  qlist_free_all+0x99/0x100
[  999.247418][T20306]  kasan_quarantine_reduce+0x148/0x160
[  999.252856][T20306]  __kasan_slab_alloc+0x22/0x80
[  999.257686][T20306]  kmem_cache_alloc_noprof+0x2bc/0x650
[  999.263121][T20306]  vm_area_dup+0x2b/0x680
[  999.267431][T20306]  __split_vma+0x1dc/0xa40
[  999.271831][T20306]  vms_gather_munmap_vmas+0x32d/0x1380
[  999.277266][T20306]  do_vmi_align_munmap+0x2b4/0x4b0
[  999.282353][T20306]  do_vmi_munmap+0x252/0x2d0
[  999.286920][T20306]  __vm_munmap+0x22c/0x3d0
[  999.291314][T20306]  elf_load+0x2c2/0x6b0
[  999.295447][T20306]  load_elf_interp+0x4ce/0xb60
[  999.300188][T20306]  load_elf_binary+0x1b2f/0x2980
[  999.305103][T20306]  bprm_execve+0x94a/0x1510
[  999.309584][T20306] 
[  999.311888][T20306] Memory state around the buggy address:
[  999.317493][T20306]  ffff888028980700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  999.325541][T20306]  ffff888028980780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  999.333580][T20306] >ffff888028980800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  999.341620][T20306]                                                        ^
[  999.348791][T20306]  ffff888028980880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  999.356834][T20306]  ffff888028980900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  999.364869][T20306] ==================================================================
[  999.378387][ T5712] em28xx 3-1:0.89: Registering snapshot button...
[  999.483694][ T5712] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input104
[  999.614125][ T5693] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  999.626794][ T5712] em28xx 3-1:0.89: Remote control support is not available for this card.
[  999.668274][T11069] em28xx 3-1:0.89: Closing input extension
[  999.682939][T20306] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  999.690177][T20306] CPU: 1 UID: 0 PID: 20306 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  999.700749][T20306] Tainted: [L]=SOFTLOCKUP
[  999.705053][T20306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  999.715089][T20306] Call Trace:
[  999.718353][T20306]  <TASK>
[  999.721266][T20306]  vpanic+0x56c/0xa60
[  999.725231][T20306]  ? __pfx_vpanic+0x10/0x10
[  999.729715][T20306]  ? __pfx___schedule+0x10/0x10
[  999.734559][T20306]  panic+0xc5/0xd0
[  999.738265][T20306]  ? __pfx_panic+0x10/0x10
[  999.742685][T20306]  ? preempt_schedule_thunk+0x16/0x30
[  999.748044][T20306]  ? v4l2_open+0x395/0x3a0
[  999.752446][T20306]  check_panic_on_warn+0x89/0xb0
[  999.757376][T20306]  ? v4l2_open+0x395/0x3a0
[  999.761790][T20306]  end_report+0x73/0x170
[  999.766027][T20306]  ? v4l2_open+0x395/0x3a0
[  999.770428][T20306]  kasan_report+0x128/0x150
[  999.774926][T20306]  ? v4l2_open+0x395/0x3a0
[  999.779327][T20306]  v4l2_open+0x395/0x3a0
[  999.783557][T20306]  chrdev_open+0x4cd/0x5e0
[  999.787966][T20306]  ? __pfx_chrdev_open+0x10/0x10
[  999.792883][T20306]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  999.799195][T20306]  ? __pfx_chrdev_open+0x10/0x10
[  999.804114][T20306]  do_dentry_open+0x785/0x14e0
[  999.808862][T20306]  vfs_open+0x3b/0x340
[  999.812909][T20306]  ? path_openat+0x2df0/0x3860
[  999.817657][T20306]  path_openat+0x2e08/0x3860
[  999.822242][T20306]  ? __pfx_stack_trace_save+0x10/0x10
[  999.827605][T20306]  ? stack_depot_save_flags+0x33/0x810
[  999.833055][T20306]  ? __pfx_path_openat+0x10/0x10
[  999.837974][T20306]  ? __x64_sys_openat+0x138/0x170
[  999.842979][T20306]  ? __lock_acquire+0x6b5/0x2cf0
[  999.847905][T20306]  do_file_open+0x23e/0x4a0
[  999.853003][T20306]  ? __pfx_do_file_open+0x10/0x10
[  999.858022][T20306]  ? _raw_spin_unlock+0x28/0x50
[  999.862857][T20306]  ? alloc_fd+0x64b/0x6c0
[  999.867178][T20306]  do_sys_openat2+0x113/0x200
[  999.871842][T20306]  ? __pfx_do_sys_openat2+0x10/0x10
[  999.877020][T20306]  ? exc_page_fault+0x6a/0xc0
[  999.881681][T20306]  ? do_user_addr_fault+0xc6f/0x1340
[  999.886946][T20306]  __x64_sys_openat+0x138/0x170
[  999.891790][T20306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.897836][T20306]  do_syscall_64+0x15f/0xf80
[  999.902413][T20306]  ? trace_irq_disable+0x3b/0x140
[  999.907424][T20306]  ? clear_bhb_loop+0x40/0x90
[  999.912109][T20306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.917987][T20306] RIP: 0033:0x7fbe7bca7407
[  999.922390][T20306] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  999.941987][T20306] RSP: 002b:00007ffed40ec940 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  999.950386][T20306] RAX: ffffffffffffffda RBX: 00007fbe7c3c2880 RCX: 00007fbe7bca7407
[  999.958370][T20306] RDX: 0000000000000000 RSI: 00007ffed40ecf1c RDI: ffffffffffffff9c
[  999.966329][T20306] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  999.974297][T20306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  999.982257][T20306] R13: 00007ffed40ecb90 R14: 00007fbe7c529000 R15: 00005647fc1254d8
[  999.990217][T20306]  </TASK>
[  999.993510][T20306] Kernel Offset: disabled
[  999.997823][T20306] Rebooting in 86400 seconds..