last executing test programs:

10m38.347114985s ago: executing program 1 (id=4444):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0])
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fa74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8"], 0xb8, 0x800}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e", 0x36}, {&(0x7f0000000500)="3fe4c8a3288f097706aa85de8423ff465d7b71eaf8992a407855560b228b744778dff691321cc63107b2", 0x2a}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(r5, 0x0, 0x0, 0x800) (async)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xe4, 0x0, &(0x7f0000001180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a00)={@fda={0x66646185, 0x5, 0x2, 0x16}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001000)={@fda={0x66646185, 0x7, 0x1, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000c40)=""/146, 0x92, 0x2, 0x2e}, @fd}, &(0x7f0000001080)={0x0, 0x20, 0x48}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000010c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0x15}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000001140)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140), 0xaa, 0x0, &(0x7f0000000300)="06b6d774bd91d030f1359aa77f917dfaf6197d1d6e4fd2c90e8a54cd3f65eb7c75bbb98e59d22ee01a9c182d2b72f2d8ead7016d807549e3a8c768ce116afa455e97d0fcb30a59866dd71c4388556f8deb15d07bddb2e8cd358e5495b7d6c27c67f031f7710b9a176680b098a07a6e9fbdfb678f0adb2e13fe7197f7db6ceb0c5077ee39614a66154f89f8ba42d36e4c875dca9e64a1a7baacac2574ff79c6eb289efa9c49ce080c6019"})

10m37.21172675s ago: executing program 1 (id=4452):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc, &(0x7f0000005f40)=ANY=[@ANYBLOB="6d35ba112b760d00407e1da8"])

10m35.191678839s ago: executing program 1 (id=4460):
r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newchain={0x44, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x81, 0x4, 0x6, 0x4, 0x9, 0x7, 0xfffff001}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4044004)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000062c0)={0x50, 0x0, r3, {0x7, 0x2d, 0x400, 0x80, 0x100, 0xa57, 0x5, 0x101, 0x0, 0x0, 0x100, 0x5}}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000d00)={<r4=>r0, &(0x7f00000008c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x44000, &(0x7f0000000c40)={@_ha_fsid={[0xffffffff]}, {0x8001, 0x2, 0x100, 0xe3}}, 0x7fff, &(0x7f0000000c80), &(0x7f0000000cc0)=0x200})
writev(r2, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecbf61fc3", 0xe}], 0x2)
r5 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602020000000700100002000d240902"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="200305000000fcbdd71a54c48b649375365ed1e8c90080f45a6954e6be89d12a1459c5c0a108d445c077e85a7a1f0be7b43dc916e90d5396c4d36e0df7b09f81dfb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001fc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x22840000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000d40)={0x120c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "3f0f67fac24df0dd026fe4c7f073195d1f2e0f9b8359c0466c7d5838298ab749279bab50b7baf3f46230ad563b6671c241fbcc9fc99bd8722158569820a2c786c02e2fa5dd534a1e9d883c91af087bdfce855839e8df122b0de79468cb836ac57108fa49cd317362588dfdd2de87a2484c11429481b7ca1af543c5954e48b8fb9724f87f1f5b2fdc951ab6b1136af888b7797b609b284a019b37f6aa927eeb54a7f23b2a21fe09cdbb9975aee742fb7891b62343aaf762bc7707cb152e11211a80a0b7d9cd8bc25e9f086f11e781067caec99fa026ba45e15f5d0a64877ef0590507d7e490a716654a44858d186e26b4ab665985b5ba5190ab6573522714211021a436b936e73c8c937b38db6a743e758c1fc09f218288fb68ebb77be28d52b7558995bf2b152bbed5873ee7fc4ca6129d6a5198c2c8d7087232faba7c4793d0fe4d7625f824ed468468f4e6614ffa24c283e4a68c81d06834a01fc1ffd054229aea4d891e12cbed5e7b1ca614606721d3c68ceef19d8b91d5c9c677c045cdba249003d1c9342235d054f38706cab69922b4102ff94d7337ead325bac8e517ecc55c13548a499b8f08afdd886251f62f5b158dd8483bfb5ffd4a3e727660475446efe7603ffd4245ff5d655a74ad396b6e442b1b6c42c1213095843cbb08c71bf7a97cbec89a913d21f7dcaadb263d7656484821058438d0534596e7834e361e9de3265f287c10ad535b6e414c9643d602d1f83782728394fbeeadf031784e495cbfdb3a4119de1f2380c2eacbad969cb71f317365946a16d90eb9ed84dfccf9135d5f6ae17e2e7c04dcfe94bc808184c8ee6e74533222a4aaf2c57173385b3a342a7da6f37d5fd2d818680f35182d7450a986d1e2df58376ab7b44630ccaa8ebd7e1643a8e491eec2832001dd31080fb5f030cd6da1a6438d27ed142ace5077c7515aed82436c10c02665d4c344c4e6721e95fb349d75a8779c18a80ccc166838565e5b0abc9e54edfa1c1df919a89366888469180a173889c5f2b3a22ca9d18f67c34b779c1f563ce74697a6b3907f95730918e7139b2d7417a16e28c67ae56992726a1f0e51f36ac8f37d297fc6c8d4c127d1568a3988b51f719d526eb0c376b9aac5c244d1229c6aff957137f5fd12fc5f01f487fb3e7c2de54969bb069ca38f03c21b7bfab55a5e9bd25caa9478606de21524330edae1772e25a9dd90a229fea8a45b90beb61fe3ce2fe6b2ade759f4c99f297b78c7bd8f944a9d88cf82fde669b1e60e9d2ebfa89eb192d7df47f90f17d90c7fec0420bc3d9c497101075d2b1528f15ae82bac810d4e6324f313faabf7e76f53aca0b1dfe865a418665ed0bfa7b30dff8ad32393432d0974eeea2ec4444ff8964d731eb471dc62c7d3cc246a5a4d9d3a3fe88c7d4cf97e58c5cb85a096bd99ead3092a61a20f7dbea055dba8c8946282a3a3dd51a004c01ff6d6faf66bbba61a6e4e3ea93a69dd71d40cb7bc2266ce99d039e51a79e54b8cda1f08a2d51708836602b721a7ba9d3953eca68fba289b86c41c3558d8c16fa7325de4ebb00846534c4dfaf1461f2092c8315b87cc0b9234e0623650b87bbbecb4927422362a17df24b9a4ccd300a835fb0aa7342e0ab8089a9b487f7a5ff8342487a12f59ce465024773c789622905fd1f2a55879f8583bfcf0e01e51f91ccaf5c9f5cb9f695a14ff921d71f38186be5e273d7852eb64ce2584b919ef1d7dd28cb708569089926637f58ad8da74f9b302ac694508ed348a840ff63eb64f0e6ad688bd5437c7ef437dcc0f799176c8ced08d1de08d190105fb942f8f35665341a5127371a3fc31d72b1a40f5faadd0d7882e2c59527577446f5c495bc6348286053a943c263a70e6d159fed8ce1b12f45d6a86cced4cb328daa2eafeb84e6e2db8e860b0a7a23b36b33834d7c70187ea8c9bf05756cf179847b615ed6e709fe65a9df282582395cbbd9581a7ed0be96cb02a4c1fe8f86fe902c124a36244379d320e0606352292b44617c92dc8e31bfed0c716a5f1754940057fd6d84bf2cd24d7315f886d9d2b6616dd680f44fad7ad6d1ec89d6ffbf919ca1e76eca1d93334a6b81b07177c66dd96e3144e648ca54d548a9d720877973094f69e29896c4cd9fbfbbb801f146d218ea4cc34daffc00f7133b3d37c2822d76e2a4d1cc7f49bbbe2cb3815c7fc6cada6ac7318f4da7ebaa076d21b25b1fbbcab4fae84220321bec1b6f271a94b0cc5b88d11bb3729fc555329a4ef89c374afce5dd64ad24c74d7c0e30a1c898737873104048d0e350d0f83949128450a25dfda908ad5db87207dc087925b12fcea86e7856050564be173f3125a14e927bc6604a2b0fb8d3897c38cb9cd2136f07cd5ebbae2cc5eff7d8b8ad99dc12fd1a856d17c70a1ee388a4d5cb5b3c6ae38c8958d00701cf86c85965633b82c93ffd20cc94c2d208affe78c3fe140fec786db1ed36eeb49ec490e2e3e4ded4912d0840178de638fae5cc0c9d5f6b9f7414ec8bba7d06e344b19cc1dcba0543579775069126fc31d2df7c9b6d967ff533dd73c216a8c9b409d4eb3fae220438b002cca913260c6633572ac0a71a9cd63a4b71832b1352788f81cb7246b2bfcfa5eddd590d5aecbc70a4694d3de107ddbb67907f27cddd767c19b1b4465dec397358a8d321b61943af36277b222f705352577e150f91b868582ac5fa8acede1e4d18a4059e230e02685d9d1e6ad874e804e5a0d8ebf037b7e179f2df52e1385bb6ee9195778d6b99a1acd2d3673ea8a45636b085b8f065437a2762217e94d0c0a95c5d10f4ca3edde8c9753e03348b6115028cb8fa14bf41b2c746c98b68b0029f7366fdddff7124d8e24e6413c4554236ba484cb18410c2c72ca5b9191eb9caa6c8a8ece3a7da9ba27193ea44f2b28c2d3a5de66467a7e071805a437d5a2056e4e37f10740e1793c1ad1835ab3fe275b076709617446af2bf0dac001940f1bd5da3ce8ad294f5eb0f544f5b32026ab1b0fcbff6435a1e2a6c6cb55050692e4fa04d951761ccafa9f5c5d56fe0f9df38b94a23834df8f798914711c1728f4122ae621338ca0a89fa889a36b205f9e5e8a30dd4ff9e6f3eb1850812f24105277d844c30adbeb964e4dcb8b77eed938300f42a5704a5b7c63c7d028ddb0ca0413cf4f884ae2ec1adb2fbfc3f4e39e7ba91e067f4bb895adf4442a6d0a46f38e5c9f380d8fd03252468154c438f95184ad361a740c5b97c1c4704c0caf701bda0683f414fb564788e3fb64fd18b84645b24ae335201cceaa99a126adaf95d80758bbc2a5b2a8b2749b09070091e41816a0cdf52955c4752b2a658529ffc1a7a047392c8b68823fd7d55d87b1a495f84e065c24a2f78f7e9784aacac262c154745c25935f3411d3f8bf109e90812f6d06e522d241fabc02b80a98ed1058391e5329f4b75f336a94a5f2affbc17c8ec0f658b7e2ff54e4c2c83097c540c7d64b5c99bd68066e24a7b2baf65ee4550d358d2e2d524bb686b9c2fe0fe8e6d0dccc9dd0669acfd78cacefb6572948dbffa8cf39384631d944fd739f5edc1e6ca0d07f607aa847d92de976d4791efc54b8ce410eabfa459b4ed3add05e2082b9660cd73f1b2033cb8432505cde3e7942225ba61f6aeefc708a5c9bc0857186150105524f470fb4446dbfbc892638798ee2dd8e19a9e48e3554f3a790c77e74984870183f9704650735bc8778b8896c6b3c07fcc4b3deb05681c34b034828e342368094f872e7b370320c2752acc30966b1ed7c372fcb72c67b8b5200d81643c856d172753459c3483a9d7cf52569706a0b3745ae305bc1c0a8b144d0e38abcc3119ddccb32f3caac7d34217825dcbaf4e8fdf778a888676aa3c68a5981c1b4ea5c9f1a883206a4c1d350b4615b6d3fe4e07ac0286508d203b61b2579cac9466003f3bbfa20597abe7aec9d1b2802473fcb3f2f0a9058f840bf21d58f24fb4d21640b451a526e042187e521fb9bea9770939f3ce681c0917d260096182d071b2a0c276e756ff339df5da437cb8049666ab37dae7155c75b6cda1ab300b39443c081713a2e52b7735e67a63a28e58bb76deacc1d4f590c10c19ef680f8c4c439dd86170d7fb8c7d9079e09a6476846409b887b32dedba707cf3fdda6c8785a729e3fb94638f9d57d1a79f0265c07d9a827e06d713f6a5dae88bd65c8e17b4e693212ac7f7fdabcc443008087a258942f51bb5fa338f0d5eb592a15b9cb43e83e7c485c591d0b08bd783e9c869bf71243e45762853c5a740161c48b5b4c4f6bc5790233a3b5e0c43b3d985c0ed5748c45d421fa4c72dc1fae5f80421d34e169ca1d8b28d9ed7297c61ce872dccbee08505b57f239736d9e258ada4ae331e482ba743d306fa28151971d2916b6ed4175e21ad3dc60a6bca1cd7dddd04496a79fb5073b33dd291a9da0895651ee2d1fb0e8fc8ec37fe5299752c2311576984967451d79c10c39708cd794f3ef535f363e075b392c37786eb53863633aca2cb9ef5b41a1dbcb7aee90ec758efb67cc01f2e8557bced2ef1d870ad10d2081eedb7c72f098f9ac0943d065e34445de816be7b9a63a0e70325d8b1345074b84d0ca3bd665d24f58161fa3461e665167658f4d4eef69c59389e87dcf3904919c5fb13bda9ab5cad7b9951ebc3cfe408180b6c0d6d1b048e2d411a285e4eedc2cf15f314f5672fdc57e65a7cc2b93a2bb43119c5db21a83a08175da026ae373cb5e8da2f2acfa717a6b79115ff8db8fac3e9e24669beefe59d4aa54554d394f8f81b688d5e60e8ed68100365f476a7aec6c98efde81476a3e6e8212de60aa2be012286cd14d07d3ddd2542db9daa753111282e1d8d8bdb6a88ef90109fe958907806652691383a7a2a66ba89595089b064b751f590fbe504c214249fcc78f42fc1b6045b269c6b5fc24a691e672774749667992e95cbdb6490515549103dac43da245a4c540bd478e29fa3693b14fae92ec160ad75fe1052e33be277385fb0d1ae0bf02eb8da8affe8d5e669748292beea4385a62bb07270a421744a67aa2c722fcce1ff3e87d2fc7bd90d5e58564757f85858e830ab61635b6545001f6404c6efe2b5018a60e74a0ab8a335340066a0ec371d0874a0e80aed5df7b72248436dbfcaa649d69cf91b33999e691eda94724040efb5cf6e05a00b3a1ae95e08a88afcdd6620c6aa92057b105492fc6d286f7cf1b79c8283f40464a7079b894258b84f6943d5516082c5929df911f33154c7649f5486d3cefe44e5e47382672654c31aeea2a2794439c7967bee3d253187e6f1bcb4941402c469b25bcf9531787eee092cebeaf631ecaefb992ede985f32d2374e14c00fe6cf4bffdde329af6ec1adb4bdb724c783aac801cc4ab9c028163d91cd3a858675b7b9f1b156937a569aa19c920aa4bfbb4b3314e127c28eabf80488de488c52df6ee622449a31bedd0e84649c15cf3555a0e2c55599b6f6748a8b2fd4c7a3f826ca2fd8829596c57d2a3c9c0fe4c6a3c14e63943f39cb7716405b791bc80364eb2b266c5dc1eca7fcad63883365d52cef4a6d9665a6dda298245cbc069341427ed49a2cd8b07b313399ee584720e26c39abaacc05cd0719323d1ca231afbd943146101047d34de5883a5ce2dd1cb2e7bcbc6654f95a77f90ed51b9c99dc9ab6eff810bfc799c447d7ef99198889d9649140a19ef5375d3fb6a99006373a6976c1ac658e8ba9ceb7e0efbad8ac74a6083a50e9b2ba573c8a292f265506b35810ac887cdc366c0732c447e7e3a6185111f1d589f"}, @NL80211_ATTR_FRAME_MATCH={0xf1, 0x5b, "b210925b0a0708b1feb947a2a48002affd238e32a9c8827585175c5bdc556a9b63d45c5398bbd55b8942eb7dcd206a74638872003708e8326a2f5cefc1a29683c048011a610771641e28508899175a38870185b1af69b47e7970f69ac1a32ff5495cbe12b96809e52a5c2eb75b641a76f044f71082da239b8df52c01de48ba7d48615655f9593443488f8c3ccff4f6c9fecd7487b764a8d5c89b9beb0f22889fa7aadc292ec20fd6cb7907fe2b870a199c1f8f2ba933558e57321145a863160475c9ac1150c6d68a5b5489680b0af986ef8f94a1c9bc9f9973f03779d9cf01cb8544a3d234875068f46de363cb"}, @NL80211_ATTR_FRAME_MATCH={0x53, 0x5b, "7b92c9c4a742ee8ca638138cabb39a4984a3c63d66b87e5c3e0112639dcd44de510b6d25d3a0b74b348b297330d37204db32a834773582f58ff5d3428476afb0cea010f681dca606971acfa2cd4e7f"}, @NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "d18645c526660b409c8969ac655cbc25956d3accb084d7da8114e60e76dd60a2e09eb99ab5af74173b931d1a050fc317117fb6c926c3adc328ee9071500446c599161e866d361a5e460860a2bf356d1b7c8c8229f44159fc81908af5be06175b3b8d77b9"}, @NL80211_ATTR_FRAME_MATCH={0x2f, 0x5b, "e03a7bfdb6b5b032d374d8540a4fe45d88c340d1219e3024bd18f9bc9cb5e9fa3bbb37136090371cb15ada"}]}, 0x120c}, 0x1, 0x0, 0x0, 0x1}, 0x40800)

10m32.057070399s ago: executing program 1 (id=4467):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080014"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x861add76117a05d1)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0xe8, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0xff, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe0}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x3)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$dsp(r4, &(0x7f0000000280)='\x00', 0x1)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000440)={0x0, 0x0, 0x80000a, 0x100080000000006, 0x3469, 0x1, 0xfffe000000000001, 0x1, 0x0, 0x800000002, 0xfffffffd, 0x1})
close(r4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x6}, 0x1c)
ptrace(0x10, 0x0)
ptrace$setregs(0xf, 0x0, 0x40, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

10m31.458995304s ago: executing program 1 (id=4473):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x80, 0xffffffff, 0xff, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x68, 0x0, 0xdb, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x44, 0x7a, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0xa}}, {@rand_addr=0x64010101}, {@loopback, 0x101}, {@remote, 0xfff}, {@local, 0x3ff}, {@multicast2}, {@empty, 0xc59}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}]}, @lsrr={0x83, 0x27, 0xce, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0xb, [@loopback]}, @noop, @cipso={0x86, 0x28, 0x3, [{0x2, 0x3, "87"}, {0x5, 0xc, "3d73a36412a12d55ff95"}, {0x7, 0x11, "c75542b6e630e35bc1c700ed906f76"}, {0x5, 0x2}]}]}}}}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bad7000fd79ed4c23c56839182d91895c4adbdf25168ea588bd88070000000400018008000400ea00"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x8081)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x85, 0x0, &(0x7f0000001100))
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x4, 0x3, 0x40, 0x6, '\x00', 0x8})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10m30.083550815s ago: executing program 1 (id=4481):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800, 0x0, 0x1, 0x1, 0x8, 0x0, 0x600}, 0x20)

10m29.584047861s ago: executing program 32 (id=4481):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x800, 0x0, 0x1, 0x1, 0x8, 0x0, 0x600}, 0x20)

12.173810708s ago: executing program 2 (id=6200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000002a25f860000000000000000000000000000e0ff0000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000688600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000721f00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e840", 0x4c}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3e", 0x75}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d16", 0x6}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x4004840) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
r2 = userfaultfd(0x80001)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000340)=@ethtool_channels={0x3c, 0x1, 0xb, 0xf, 0x5, 0x3, 0x4, 0xcdb, 0xfff}}) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) (async)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x8, 0x1}) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) (async)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = accept4(r1, 0x0, 0x0, 0x800)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) (async)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

11.388070275s ago: executing program 2 (id=6205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x33, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r13, 0x1, 0x2a, 0x0, &(0x7f0000000000))
r14 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r14, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x98, 0x208, 0x98, 0x0, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff00007f, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xe, 0xffff, 0x3, 0x1f, 0x14, 0x23], 0x1, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'geneve0\x00', {0xff}, {}, 0x8, 0x3}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x0, 0x11}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4}, {0xfffd, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)
r15 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r15, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

11.323949721s ago: executing program 3 (id=6206):
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000140)="f30f00550a0f0172000f08b9800000c00f3235008000000f30c4e245a8e666b83e000f00d80f22df360ffd39b9b50900000f320f78b808b39f6c", 0x3a}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.099374656s ago: executing program 5 (id=6207):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) (async)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x110, 0x5c, 0x160, 0x0, 0x3e0, 0x258, 0x228, 0x25a, 0x258, 0x228, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, [], [0x0, 0xffffffff, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xa8, 0x110, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x5}}}}, {{@ipv6={@local, @empty, [0xff000000, 0x0, 0xffffffff], [0xffffff00], 'dummy0\x00', 'dummy0\x00', {0xff}, {0xff}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0xee00, 0x0, 0x0, 0x0, 0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa3, 0x0, 0x0, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002280)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x110, 0x5c, 0x160, 0x0, 0x3e0, 0x258, 0x228, 0x25a, 0x258, 0x228, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, [], [0x0, 0xffffffff, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xa8, 0x110, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x5}}}}, {{@ipv6={@local, @empty, [0xff000000, 0x0, 0xffffffff], [0xffffff00], 'dummy0\x00', 'dummy0\x00', {0xff}, {0xff}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0xee00, 0x0, 0x0, 0x0, 0x7}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa3, 0x0, 0x0, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
fsopen(&(0x7f0000000000)='iso9660\x00', 0x1) (async)
r4 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x60, 0x81, 0x9, "818c0400", "012000"}}, 0x0}, 0x0)
r6 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$uac3(r6, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0)
syz_usb_control_io$uac3(r6, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) (async)
syz_usb_control_io$uac3(r6, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="66b9030100c00f320f1c3afcd8ec66b9800000c00f326635000400000f30b88f008ec0f3670f0124c69a863f24006536262614a0baa100ed", 0x38}], 0x1, 0x5d37c442447bcc40, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10.888075451s ago: executing program 2 (id=6208):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
prlimit64(0x0, 0x8, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)={0x20, 0xe, 0x4, "7f91ec1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.298790464s ago: executing program 5 (id=6209):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$fb0(0xffffff9c, 0x0, 0x8600, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES64=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x1000c8c4}, 0x2400c084)
socket(0x40000000015, 0x805, 0x0)
socket(0xa, 0x3, 0x3a)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0xc, 0x0, 0x0)
syz_usb_disconnect(r3)
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0x8c12)
r5 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x7)
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xea305c312efd687e, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7dff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0)

8.433081858s ago: executing program 5 (id=6213):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x4a09, 0x8001)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) (async)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) (async)
ppoll(&(0x7f00000002c0)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) (async)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) (async)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0) (async)
syz_open_dev$midi(&(0x7f0000000000), 0x4a09, 0x8001) (async)

8.279131937s ago: executing program 0 (id=6214):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x7fffffffffffffff, 0x303001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x280880, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3e4, 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000000}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
shutdown(r0, 0x1)

8.202481501s ago: executing program 3 (id=6216):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x6, 0x9, 0x4, 0xfffffffffffffffe}) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x6, 0x9, 0x4, 0xfffffffffffffffe, <r3=>0x0})
sched_setattr(r3, &(0x7f0000000140)={0xffd7, 0x3, 0x11, 0x3, 0x0, 0x9, 0xfffffffffffffffd, 0x8, 0x4eb5, 0xfffffffb}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x43, 0x1, 0x539e09df839dfe94, "d3fa5b89042b0f0094c5164ce8e84e0d4c7b546787a700", 0x30314247}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x43, 0x1, 0x539e09df839dfe94, "d3fa5b89042b0f0094c5164ce8e84e0d4c7b546787a700", 0x30314247})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0)
unshare(0x400)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8) (async)
listen(r6, 0x8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d)

8.072217022s ago: executing program 0 (id=6217):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x7, 0x5b2, 0x1})
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000100700000000000000dbdf2500000000677327e0ba0151030685f61b0929ff37f4fe3d26a9fc44ee9f57317ee4b43552bf2ec77c699d060609cd0eac2b3f096026a3a43da1741a680b44fa014186d038528ce8ae6fb94a23b53eeafb1c77975c53529e1afc133facbefad098d74ce57d383063ada4ff34777dd6d165364a48c9a049108ba032dc957d49898662b9509409f81fef408d05b215c1f4b788896c65a750bd42a71d6661cc784e7618", @ANYRES32=0x0, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)=<r8=>0x0)
ptrace(0x4208, r8)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000140))
r12 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r12, 0xc0d05604, &(0x7f0000000880)={0x2, @meta={0x57574d52, 0x59936c5, 0x4f3c, 0x3113, 0xdaecfee}})

7.496229406s ago: executing program 0 (id=6218):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x4001}, 0xc) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000400)=0x7ff, 0x12) (async)
syz_open_pts(r2, 0xa00) (async)
sendfile(r1, r2, 0x0, 0xffffffff004) (async)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x411c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x4e11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x108)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
read$watch_queue(r2, &(0x7f0000000100)=""/227, 0xe3) (async)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

7.089785795s ago: executing program 4 (id=6219):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
dup3(r1, r0, 0x80000)
unshare(0x8040480)
ftruncate(0xffffffffffffffff, 0xc17a)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x4000000000000b, 0x400000000, 0x1, 0x8000, 0x40000, 0x0, 0x7}, &(0x7f00000000c0)={0x8, 0x3ff, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x8004000000000}, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x25f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0xd6, &(0x7f0000000180)=ANY=[@ANYRES64=r1]}]})
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
dup3(r1, r0, 0x80000) (async)
unshare(0x8040480) (async)
ftruncate(0xffffffffffffffff, 0xc17a) (async)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x4000000000000b, 0x400000000, 0x1, 0x8000, 0x40000, 0x0, 0x7}, &(0x7f00000000c0)={0x8, 0x3ff, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x8004000000000}, 0x0, 0x0, 0x0) (async)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x25f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x2, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0xd6, &(0x7f0000000180)=ANY=[@ANYRES64=r1]}]}) (async)

6.974087685s ago: executing program 2 (id=6220):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
vmsplice(r0, 0x0, 0x0, 0xc) (fail_nth: 3)

6.711842093s ago: executing program 2 (id=6221):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2f)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x44, 0x66, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xd, 0xc}, {0xfff3, 0xc}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x68}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x200418e0}, 0x48000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

6.612450128s ago: executing program 3 (id=6222):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8)
r1 = socket(0x2, 0x80805, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000000)=0x100000001, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000fedbdf2502000000fc01c80900270000060015000200000014001680040008800c"], 0x38}}, 0x0)

6.306065122s ago: executing program 3 (id=6223):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0x1d}], 0x1)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0xfb, 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200001b96231b06e53f87010000002a900683749e821d87266c9d2099244900106b5eab8b92156399e1960de2e7642bca65aa"], 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000c4000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x41, 0x1e})
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'})
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1, @ANYRES64=r2, @ANYRES32=r1, @ANYRESOCT=r5, @ANYRES8], 0x0)
unshare(0x20000000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000500000005000600000000000500060009000000440001800800030001000000080003000200000014000200626f6e645f736c6176655f30800000001c00020074756e6c30000000000000000000000008000100", @ANYRES32, @ANYBLOB="08000900010000000500070005"], 0x78}}, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)

5.503949644s ago: executing program 0 (id=6224):
io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x7fffffff, 0x33c})
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x80}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f00000002c0)={r4, 0x3}, 0x1)
fanotify_init(0x4, 0x40000)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x34b130198900281b, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x57}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$BLKZEROOUT(r2, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4)
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r8, 0x0, &(0x7f0000000080)={0x1, 0xbae}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

5.27603771s ago: executing program 4 (id=6225):
r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
unshare(0x6020400)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
fsmount(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0x8, 0xd3, "fde61e0ee4a60008bc6ba395eded00838132c26bf2674c4a0327b101f45bc3ba34d623bc2dc8203dd939fc89fb6e7f222ec3db94d79fbff41e1cd4ea33ff2d6b61aef2f0b8d600469a70a9533e2bbcdc3268d3566ff523e43d8d3abc1891cd12a82264c58c0233aff1720713913882ef40776f97b60e927ac3e1a0fd7ab3c179805b2c291d6c500a672a62ec53b01698ef45d85f3d22e324165ac7047e01cd8c309dcd9d70ae9e898f817c2cfeff82c13cedd21aa9c8a5e7bf62205be51632dc1360dabb9927ad2492d61b11f7ae480163f35c"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000540)=""/99, 0x63)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24008095}, 0x4004084)
io_setup(0x8, &(0x7f0000000540))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_disconnect(r0)

5.184687617s ago: executing program 5 (id=6226):
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000140)="f30f00550a0f0172000f08b9800000c00f3235008000000f30c4e245a8e666b83e000f00d80f22df360ffd39b9b50900000f320f78b808b39f6c", 0x3a}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.708055797s ago: executing program 2 (id=6227):
r0 = userfaultfd(0x80001)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x1000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$uac2(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201)
ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0x24, 0x27, {0x27, 0x23, "f49d5b653d511dcf9645a1a06589e5d7f2f9a19ba793b10e5bdeb249e7f5c7193d6ef62278"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "5a54d3a0"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x10, 0x1, {0x22, 0x38c}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x10, 0x16, 0x12, "6efd3b9148c3fa71885ad274b59e5b69679d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0xea, "ad1016625a24393d108da904d759bcc06d912585a642f87a926bf9a0ed3812ac5d131346f588edb7ff54c5fd90eaef1f168fdc7bd7c465724d39e2068fc511d1b076e4dbd7e5bf032a519b7cf0f56036580a37419b42889cc6cd1fc1777ff191b4c6d8cf9338929bedd55a712550c1f3d989100e1e64909abf02d8608df9b081faa77d1b401ede1fb67cfa63a400858d6af85ea0325b18fdf8d305cad0dd06fb0c8a0f1621c771fdbcc60ea6c7fad851518e5ec5aad4dadee02a0031c2fe7a95fa9c3018a0a7207a3e2b36442965b02dfbaea8ff2b7f5a788aebda15d71fe4daa67bd805f96c8a79fff2"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x10}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0)

3.461621143s ago: executing program 0 (id=6228):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x4})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000200)={0x7, 0x5b2, 0x1})
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000100700000000000000dbdf2500000000677327e0ba0151030685f61b0929ff37f4fe3d26a9fc44ee9f57317ee4b43552bf2ec77c699d060609cd0eac2b3f096026a3a43da1741a680b44fa014186d038528ce8ae6fb94a23b53eeafb1c77975c53529e1afc133facbefad098d74ce57d383063ada4ff34777dd6d165364a48c9a049108ba032dc957d49898662b9509409f81fef408d05b215c1f4b788896c65a750bd42a71d6661cc784e7618", @ANYRES32=0x0, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)=<r8=>0x0)
ptrace(0x4208, r8)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff84}, {0x8001, 0x9, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r9, 0x8983, &(0x7f0000000140))
r12 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r12, 0xc0d05604, &(0x7f0000000880)={0x2, @meta={0x57574d52, 0x59936c5, 0x4f3c, 0x3113, 0xdaecfee}})

3.016391851s ago: executing program 0 (id=6229):
r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0xd, 0x5, "7bbf53881f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "2e9e"}, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$uac3(0x0, 0xef, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x8, 0xa0, 0x2, {0x8, 0xb, 0x4, 0x2, 0x1, 0x26, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x34, 0x9}, [@processing_unit={0xd, 0x24, 0x9, 0x2, 0x4, [0x3, 0x0]}, @extension_unit={0x1d, 0x24, 0xa, 0x5, 0x1, [0x1, 0x3, 0x0, 0x3, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x9, 0x7, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x63, 0x4, 'Z', "a667"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x55, 0x80, 0xa, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x8, 0xc, {0xa, 0x25, 0x25, 0x6, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x8, "9dc536"}, @as_header={0x17, 0x24, 0x1, 0xf9, 0x4, 0x106, 0x2, 0x2, 0x7, 0x8, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0x5, 0x95, {0xa, 0x25, 0x25, 0xc, 0x55, 0x9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0x0, 0x7, 0x8, 0xc}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe4, 0x3, 0x1, 0xfff, 0x5}]}, 0x1, [{0x53, &(0x7f00000002c0)=@string={0x53, 0x3, "bf624f19bf107e39d9923343a3bba15ad8c6b1d99885a9990333acddaeb2ddd27b7d6290245e5106b8e493f1425c2f607c729a6312bb21598bc7f2bf212586e231750ae44c389d1710259f1bd5c44a68d2"}}]}) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0x0, 0x0, 0x5, 0xfffffffffffffedc, 0x0}) (async)
syz_usb_control_io$uac3(r1, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x20, 0xb, 0xb8, {0xb8, 0x24, "25870b3bd112c484f210be20b9f2a3e5e1bb27eb6c10bcc89ba2b5d7885302ad48e8485c4ed88f6bca6b516ebe1d7064dbbbc80f3d75f6bb7e1811490467be1c8f761f4c14c746b8adb0f2c48eb08a761aa237aff31e3b8c733dc38a74a6020010f095adafae15afef3a129bd1c44297a3c385c16184ef13fad4b8c22da7b9bbc36591bd4e3f9ef6cab357f1a2c55c1bede48c211f606d65b68b60de862e033beb797f0b3e654c461cb0dfe1601571991037f124ad3c"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000540)={0x20, 0x16, 0x7f, "73a0a21a349961170a33ea57c504b2935e13219f679723cabc7eddd3cf16df39b5f530223f16a0ccee6249693a964e7ce8570dbd1e1451e3a0152ae2136d356cd6748a903b381f55506de2249b7bda8fe1677d1da65068b2cca68c267a3d81b6f8b2219018cf067ed574a3713c0e3bd50b6c13db0cdcd84b10801f3fdeb6d7"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000000)={0x20, 0x81, 0x3, "009b00"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "8c"}, &(0x7f0000000740)={0x20, 0x83, 0x1, '['}, &(0x7f0000000780)={0x20, 0x84, 0x3, "98a4f6"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "100100"}})

1.96698265s ago: executing program 5 (id=6230):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4400c800)
sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0)
timer_create(0x5, &(0x7f0000000000)={0x0, 0xb, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000040))
sendto$inet6(r0, &(0x7f0000000180)="1ec0000000", 0x5, 0x4000, 0x0, 0x0)

1.934610757s ago: executing program 5 (id=6231):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x70, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "10cda92a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x20f, 0x8, 0x40}, {0x6, 0x24, 0x1a, 0x7f}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x4, 0x5, 0x41, 0x3, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7b, 0x3, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0xb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x6, 0x81}}}}}}}]}}, &(0x7f0000004fc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x15, 0xa, 0x5, 0xff}, 0x72, &(0x7f00000024c0)=ANY=[@ANYBLOB="050f0000000010010402019f08b407b110100a1c410000000ff00400003f000020100a07c56400000f00090007000000c0c00000cfc00000003f0000c000ff000b100100a00009060400f707100204680a0020100a00e5ff0100000000040f000000603f0000003f00000f000000cf00ff00"], 0x8, [{0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "86317771969baaa809d057985610438d082ab9476f121ae38cd637b8d9ae52846ef4a2f434a280f3a9d0890dd6383ce4a6a58a3a86104afc3142fbd403211db65a344c4dfd1853833d9212fbe0c5279f03a4d90f0e0c8e57da0a45"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x459}}, {0xc4, &(0x7f0000005040)=ANY=[@ANYBLOB="c403ccf94ecd4c835a5b811dfaf0d7e511fe3fb4e646cc9edda7e59dc21dc3b7c098325433c7547ab2385c95ad4c2d0a406b424c225ffec959041f6e6cf9bd31e72208a8da3d9de2a81fa81d6158b57d2b27da7bba5589aa13063e80cd8a749b48eef0d58aadf8990852b3f68a771968e41551a31e8bc24f06a0a684ffdbb1f5934293ac724fcb1f053828c99a656fbff7d601e602426bb64b845f5a4184b1e77dcb8f930d425200f11f18052644f04c68e19627ab072ced4fe2e96e455937ff1152e99a50f20febdfc55e"]}, {0xc6, &(0x7f0000002640)=ANY=[@ANYBLOB="c6033565afbf9883848d11a170353861cc5d55f1186ae3099a12315386a941a6e211f92397869d73be4cdb48ed4572b8b5e37f922d55a6fb72f9e1285240f192ab316a3fcee782ffcd6ba9e1e401952231fb71aeea5b332098d1696dbe6341c89abbf5c617567c026264d802f5b7072f94c13ea35f2450c61ed454d04789365c0906150892bc23cbbf4820a1feaca3810a40d703212d4abeb3ab948dcabb952113fbe4cd6328b2d4d80dea3867ec5951eb028406adfdfc30f1b12dbc6957e6a9e8468eea35f3"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x403}}, {0xec, &(0x7f0000000540)=ANY=[@ANYBLOB="ec03f1f13bb963e5dda6b2dc0947c5510e9c1718b6ef51a012b2b2a56b1d2138e5ea1d7004d1e5cabd73e58380b19845c0bf2e80aa94f98ba7c79ede976c10897a0d0db7787c31c25fbfa65525980116a562d480a0e3d8ceb01dcde6403dcaf068553a0ed56b97c1d249cf7ae8d3bb2e3a2a777e84acd2ab637eac18a9834e73b98c8718e9192c519c9f2487fcfd715794fb3fa954664843c75f7eb882019dc577150e70b4f729ba28a6ca45fa64581e1c595c4b04af5fbf1c4cc8460d0b03000000b02514ae8d79c93c8e928d9ce11623ddce07c4f5681e83ca6a5519f778864c0abfd04b697b13c9a896ef"]}, {0x36, &(0x7f0000000100)=@string={0x36, 0x3, "1ccc5e7361f95be0b68cbf138accc30be8ddf01afeeaae76fb191200ff5c979265b7e1a27fb0356d689947ea218680d7b7aaebff"}}]}) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) (async)
write$snddsp(r1, &(0x7f0000000140)="c1401a9b57b73ef41a8e8c85251c27443708b76b822501e5b7d2f7a5656e81aba8a7b5721cc79dcae2863b5d43", 0x2d) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0x38, 0x28, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8}, {0x18, 0x2}, {0x9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x38}}, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000027c0)={<r9=>0x0, "b07364335c0aaff742d0a5f924159590"}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000037c0)={0x1, 0x3, {0x0, @struct={0x36b, 0x5}, <r10=>0x0, 0x2, 0xff, 0xa3a, 0x5, 0x51a, 0x41, @struct={0x53fe, 0x9}, 0x524, 0x2, [0x3, 0x9, 0xf6af, 0x5, 0x800, 0x4]}, {0x401, @struct={0x1f, 0x4}, 0x0, 0x6, 0xb5a, 0x9, 0x1, 0x5, 0x428, @struct={0x9813, 0x7fffffff}, 0x51a5, 0x3, [0xfffffffffffffffa, 0x5, 0xfffffffffffffffb, 0x7f, 0x0, 0x401]}, {0x0, @usage=0x10001, 0x0, 0x5, 0x100, 0x6, 0x8000000000000001, 0x9, 0x1, @struct={0x4, 0xc8}, 0xe, 0xffffffff, [0x0, 0x0, 0x0, 0x6, 0x8, 0xfffffffffffff801]}, {0xfff, 0x40000000000000, 0x1}}) (async)
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000003bc0)={<r11=>0x0, "fe276b40a282b36fce8c2c75d1b2adea"})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000004bc0)={0x1f, 0x0, {0x7, @usage=0x9eac, r9, 0x9, 0xf, 0x7, 0x7, 0x8, 0x0, @struct={0x4007, 0x10}, 0x8, 0x3, [0x6, 0xf425, 0x9, 0xb4e, 0x1, 0x5]}, {0x3f74, @usage=0x652, r10, 0x3, 0x9, 0x401, 0xd, 0xa48, 0x1, @struct={0xfc, 0x5}, 0x3, 0x7, [0x0, 0x0, 0x10004, 0x5, 0x5, 0x2]}, {0x9, @struct={0x8, 0x2}, r11, 0x1000, 0x4, 0x8, 0x5, 0x4, 0x0, @usage=0x5, 0xfff, 0x1, [0x0, 0x1, 0x80000001, 0x9, 0x100000001, 0x80000001]}, {0x0, 0x8, 0xfffffffffffffffd}}) (async)
write$dsp(r8, &(0x7f0000000040)='F', 0x1)

1.764691704s ago: executing program 3 (id=6232):
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', r4, 0x700, 0x7, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0xfffe, 0x1, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}}}}})

1.576221868s ago: executing program 3 (id=6233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28)
read$FUSE(r2, &(0x7f0000000b80)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_STATX(r2, &(0x7f0000000340)={0x130, 0x0, r3, {0x6, 0xffffffff, 0x0, '\x00', {0x8000, 0x258, 0x2, 0x0, r4, r5, 0x1000, '\x00', 0xd724, 0x85, 0x6, 0x3f, {0x7}, {0xfffffffffffffff7, 0x8000}, {0xff, 0x4}, {0x2, 0xfff}, 0x1, 0xffffffff, 0x3ff, 0xfffffffd}}}, 0x130)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r6, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10003, 0x0, 0xfd, 0x0, 0xfd, 0x0, 0x21, 0x5, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)

619.154133ms ago: executing program 4 (id=6234):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000800)="b57b1950", 0x4}, {&(0x7f0000000200)=' ', 0x1}, {&(0x7f0000000400)="01", 0x1}, {&(0x7f0000000d80)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000a80)='-_', 0x2}, {&(0x7f0000000740)="f273", 0x2}, {&(0x7f0000000880)="49d6", 0x2}, {&(0x7f0000002e40)="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", 0x1c1}, {&(0x7f0000002a40)='8', 0x1}], 0xd}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000fc0)="5c8c56b4ef4b478bf9b431ece6b2d8bdf4abffaee5e1138ba457a84eec31c9fdec2e274f512ea28c50a9c25214a70c6582928702c1116955bbeb327a89cc181a2b", 0x41}, {&(0x7f0000000840)="e3", 0x1}], 0x2}}], 0x2, 0x4008440)

582.868221ms ago: executing program 4 (id=6235):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x54, 0x7ffc0001}]})
remap_file_pages(&(0x7f0000260000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffa, 0x800)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x44)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f00000000c0)}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x72, &(0x7f00000001c0)={@local, @link_local, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x14, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xe}, {@local, 0xfffffffd}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x92ed}, {@multicast2, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4c, 0x100}}}}}}}, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
socket$pppl2tp(0x18, 0x1, 0x1)
io_submit(0x0, 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)

162.135042ms ago: executing program 4 (id=6236):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}, 0x90}], 0x1, 0x40002122, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001d00)={{0x1, 0x1, 0x18, <r2=>r1, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000780)=0xe8)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x48, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x44}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x88}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4810)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, <r6=>0x0}, &(0x7f00000004c0)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
lchown(&(0x7f00000002c0)='\x00', r6, r7)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [{0x2, 0x5, r3}, {0x2, 0x5, 0xee00}, {0x2, 0x5, r6}], {0x4, 0x7}, [{0x8, 0x5, 0xee00}], {0x10, 0x4}, {0x20, 0x4}}, 0x44, 0x1)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="619800000000000069616f000000000004000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc8, &(0x7f0000000580)=""/200, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)

0s ago: executing program 4 (id=6237):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xfffffffffffffff9, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x82, 0x5, 0x1, 0x0, 0xd5})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000004740)={0x0, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x5}}}, 0x84)
close(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000340)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')

kernel console output (not intermixed with test programs):

9667][T18208] usb 6-1: Product: syz
[ 1896.023829][T18208] usb 6-1: Manufacturer: syz
[ 1896.028443][T18208] usb 6-1: SerialNumber: syz
[ 1896.035011][   T42] usb usb4-port1: unable to enumerate USB device
[ 1896.046393][T18208] usb 6-1: config 0 descriptor??
[ 1896.229725][T11628] usb 5-1: Using ep0 maxpacket: 32
[ 1896.235542][T18208] usb 6-1: can't set config #0, error -71
[ 1896.249425][T18208] usb 6-1: USB disconnect, device number 86
[ 1896.756175][T18734] usb 3-1: new full-speed USB device number 114 using dummy_hcd
[ 1897.002216][T18734] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1897.011513][T18734] usb 3-1: not running at top speed; connect to a high speed hub
[ 1897.020750][T18734] usb 3-1: config 13 has an invalid interface number: 102 but max is 0
[ 1897.030607][T18734] usb 3-1: config 13 has an invalid descriptor of length 216, skipping remainder of the config
[ 1897.041875][T18734] usb 3-1: config 13 has no interface number 0
[ 1897.051194][T18734] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=e4.2e
[ 1897.062916][T18734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1897.071824][T18734] usb 3-1: Product: syz
[ 1897.077093][T18734] usb 3-1: Manufacturer: syz
[ 1897.081863][T18734] usb 3-1: SerialNumber: syz
[ 1897.097188][T11628] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1897.322382][T28245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1897.331296][T28245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1897.447510][T18734] cdc_phonet 3-1:13.102: probe with driver cdc_phonet failed with error -22
[ 1897.470564][T18734] usb 3-1: USB disconnect, device number 114
[ 1897.546830][T11628] usb 5-1: config 137 has an invalid interface number: 5 but max is 0
[ 1897.555092][T11628] usb 5-1: config 137 has no interface number 0
[ 1897.561407][T11628] usb 5-1: config 137 interface 5 has no altsetting 0
[ 1897.981284][T18208] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1898.329989][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5954'.
[ 1898.448223][T28262] netlink: 316 bytes leftover after parsing attributes in process `syz.2.5955'.
[ 1898.560863][T11628] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=c2.5a
[ 1898.569989][T11628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1898.578155][T11628] usb 5-1: Product: syz
[ 1898.685575][T18208] usb 4-1: Using ep0 maxpacket: 16
[ 1898.691018][T11628] usb 5-1: can't set config #137, error -71
[ 1898.698781][T11628] usb 5-1: USB disconnect, device number 93
[ 1899.403195][T18208] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1899.413360][T18208] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1899.843105][T18208] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 1899.852225][T18208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1899.860221][T18208] usb 4-1: SerialNumber: syz
[ 1900.063620][T18208] usb 4-1: 0:2 : does not exist
[ 1900.367392][   T42] usb 4-1: USB disconnect, device number 20
[ 1900.877065][   T29] kauditd_printk_skb: 10 callbacks suppressed
[ 1900.877086][   T29] audit: type=1800 audit(1782547176.446:3853): pid=28231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5947" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1901.295269][T18208] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1901.421799][T11628] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1902.058878][T11628] usb 4-1: Using ep0 maxpacket: 32
[ 1902.750659][T11628] usb 4-1: config 2 has an invalid interface number: 196 but max is 0
[ 1902.758908][T11628] usb 4-1: config 2 has no interface number 0
[ 1902.765032][T11628] usb 4-1: config 2 interface 196 has no altsetting 0
[ 1902.864363][T18208] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1903.632443][T11628] usb 4-1: New USB device found, idVendor=0421, idProduct=0000, bcdDevice= 9.71
[ 1903.641556][T11628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1903.649575][T11628] usb 4-1: Product: syz
[ 1903.653736][T11628] usb 4-1: Manufacturer: syz
[ 1903.658332][T11628] usb 4-1: SerialNumber: syz
[ 1904.074833][T28281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1904.087418][T28281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1904.124306][T28281] loop2: detected capacity change from 0 to 7
[ 1904.177649][T28281] Dev loop2: unable to read RDB block 7
[ 1904.183906][T28281]  loop2: AHDI p1 p2 p3
[ 1904.204956][T28281] loop2: partition table partially beyond EOD, truncated
[ 1904.215704][T28281] loop2: p1 size 1986618213 extends beyond EOD, truncated
[ 1904.235751][T28281] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1904.327081][T18208] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1904.336225][T18208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1904.344262][T18208] usb 1-1: Product: syz
[ 1904.348466][T18208] usb 1-1: Manufacturer: syz
[ 1904.360168][T26847] udevd[26847]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1904.439916][T11628] usb 4-1: USB disconnect, device number 21
[ 1904.458754][T18208] usb 1-1: can't set config #1, error -71
[ 1904.472966][T18208] usb 1-1: USB disconnect, device number 56
[ 1905.332647][   T29] audit: type=1800 audit(1782547180.896:3854): pid=28296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5963" name="bus" dev="ramfs" ino=173067 res=0 errno=0
[ 1905.427498][ T5699] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1905.530882][T18208] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1905.858573][ T5699] usb 3-1: device descriptor read/64, error -71
[ 1906.203548][T28327] binder_alloc: 28326: binder_alloc_buf size -648 failed, no address space
[ 1906.231360][T28327] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192)
[ 1906.299871][ T5699] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1906.373681][T28335] batman_adv: batadv0: Adding interface: wlan0
[ 1906.379952][T28335] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1906.421956][T28335] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[ 1906.632570][ T5721] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1906.739540][ T5699] usb 3-1: device descriptor read/64, error -71
[ 1906.846918][T18208] usb 1-1: config 247 has an invalid interface number: 194 but max is 2
[ 1906.856074][T18208] usb 1-1: config 247 has an invalid interface number: 213 but max is 2
[ 1906.865347][T18208] usb 1-1: config 247 contains an unexpected descriptor of type 0x2, skipping
[ 1906.874286][T18208] usb 1-1: config 247 has an invalid interface number: 100 but max is 2
[ 1906.882746][T18208] usb 1-1: config 247 has no interface number 0
[ 1906.889279][T18208] usb 1-1: config 247 has no interface number 1
[ 1906.895779][T18208] usb 1-1: config 247 has no interface number 2
[ 1906.906001][T18208] usb 1-1: config 247 interface 194 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[ 1906.917717][T18208] usb 1-1: config 247 interface 194 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1906.928803][T18208] usb 1-1: config 247 interface 194 altsetting 5 endpoint 0xE has invalid maxpacket 1136, setting to 64
[ 1906.940811][T18208] usb 1-1: config 247 interface 194 altsetting 5 has an endpoint descriptor with address 0xF1, changing to 0x81
[ 1906.964333][ T5699] usb usb3-port1: attempt power cycle
[ 1906.983618][T18208] usb 1-1: config 247 interface 194 altsetting 5 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1906.994068][T18208] usb 1-1: config 247 interface 194 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[ 1907.005008][T18208] usb 1-1: config 247 interface 194 altsetting 5 has a duplicate endpoint with address 0x5, skipping
[ 1907.016769][T18208] usb 1-1: config 247 interface 213 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 1907.027789][T18208] usb 1-1: config 247 interface 213 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1907.039083][T18208] usb 1-1: config 247 interface 213 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[ 1907.050827][T18208] usb 1-1: config 247 interface 213 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[ 1907.061739][T18208] usb 1-1: config 247 interface 213 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1907.090880][T18208] usb 1-1: config 247 interface 213 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1907.103095][T18208] usb 1-1: config 247 interface 213 altsetting 1 has an endpoint descriptor with address 0x1D, changing to 0xD
[ 1907.115299][T18208] usb 1-1: config 247 interface 213 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 1907.126555][T18208] usb 1-1: config 247 interface 213 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1907.139776][T18208] usb 1-1: config 247 interface 213 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 1907.151712][T18208] usb 1-1: config 247 interface 213 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[ 1907.162696][T18208] usb 1-1: config 247 interface 213 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[ 1907.175312][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0xF, skipping
[ 1907.242710][T18208] usb 1-1: config 247 interface 100 altsetting 251 has an endpoint descriptor with address 0x9E, changing to 0x8E
[ 1907.267716][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0x8E, skipping
[ 1907.294234][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0x2, skipping
[ 1907.324830][ T5721] usb 4-1: Using ep0 maxpacket: 8
[ 1907.348882][T18208] usb 1-1: config 247 interface 100 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1907.361838][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0x7, skipping
[ 1907.373187][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0x5, skipping
[ 1907.385776][T18208] usb 1-1: config 247 interface 100 altsetting 251 has a duplicate endpoint with address 0x4, skipping
[ 1907.397201][T18208] usb 1-1: config 247 interface 100 altsetting 251 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[ 1907.412661][T18208] usb 1-1: config 247 interface 194 has no altsetting 0
[ 1907.432253][ T5699] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1907.460799][T18208] usb 1-1: config 247 interface 213 has no altsetting 0
[ 1907.467835][T18208] usb 1-1: config 247 interface 100 has no altsetting 0
[ 1907.870666][ T5699] usb 3-1: device descriptor read/8, error -71
[ 1907.975940][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[ 1907.986800][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1048, setting to 1024
[ 1907.997796][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[ 1908.008536][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[ 1908.019200][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[ 1908.029753][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[ 1908.040313][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[ 1908.051157][ T5721] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1908.156469][T28360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5988'.
[ 1908.304022][T18208] usb 1-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=84.3d
[ 1908.313405][T18208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1908.321436][T18208] usb 1-1: Product: ã Š
[ 1908.419052][T18208] usb 1-1: can't set config #247, error -71
[ 1908.428202][T18208] usb 1-1: USB disconnect, device number 57
[ 1908.466271][T11630] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1908.522046][ T5699] usb 3-1: new low-speed USB device number 118 using dummy_hcd
[ 1908.737538][T11630] usb 5-1: Using ep0 maxpacket: 16
[ 1908.751916][T11630] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1908.762045][T11630] usb 5-1: config 3 has an invalid interface number: 57 but max is 0
[ 1908.771007][T11630] usb 5-1: config 3 has no interface number 0
[ 1908.777422][T11630] usb 5-1: config 3 interface 57 has no altsetting 0
[ 1908.786439][T11630] usb 5-1: New USB device found, idVendor=1bbb, idProduct=0003, bcdDevice=77.23
[ 1908.795836][T11630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1908.804871][T11630] usb 5-1: Product: syz
[ 1908.809312][T11630] usb 5-1: Manufacturer: syz
[ 1908.814057][T11630] usb 5-1: SerialNumber: syz
[ 1908.853331][ T5721] usb 4-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40
[ 1908.862457][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1908.870494][ T5721] usb 4-1: Product: င
[ 1908.874705][ T5721] usb 4-1: Manufacturer: ь
[ 1908.879252][ T5721] usb 4-1: SerialNumber: �
[ 1909.039220][T28358] vlan2: entered promiscuous mode
[ 1909.044394][T28358] team0: entered promiscuous mode
[ 1909.135959][T11630] usb 5-1: USB disconnect, device number 94
[ 1909.187699][T18208] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1909.615126][ T5699] usb 3-1: descriptor type invalid, skip
[ 1909.620878][ T5699] usb 3-1: descriptor type invalid, skip
[ 1909.629514][ T5721] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1909.636570][ T5721] usb 4-1: MIDIStreaming interface descriptor not found
[ 1909.643752][ T5699] usb 3-1: descriptor type invalid, skip
[ 1909.702010][ T5721] usb 4-1: USB disconnect, device number 22
[ 1909.795318][T26377] udevd[26377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1909.838748][T18208] usb 1-1: Using ep0 maxpacket: 32
[ 1910.395133][ T5721] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[ 1911.166070][T11628] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1911.238185][T28386] netlink: 'syz.2.5996': attribute type 32 has an invalid length.
[ 1911.246162][T28386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5996'.
[ 1911.263022][T28389] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1911.272514][T28389] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1911.287351][ T5699] usb 3-1: string descriptor 0 read error: -71
[ 1911.293705][ T5699] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1911.302780][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1911.365089][T28386] bond2: option coupled_control: invalid value (28)
[ 1911.373755][T28386] bond2 (unregistering): Released all slaves
[ 1911.400399][ T5699] usb 3-1: can't set config #1, error -71
[ 1911.406462][T18208] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1911.415583][T18208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1911.423607][T18208] usb 1-1: Product: syz
[ 1911.427798][T18208] usb 1-1: Manufacturer: syz
[ 1911.435320][ T5699] usb 3-1: USB disconnect, device number 118
[ 1911.446580][T18208] usb 1-1: SerialNumber: syz
[ 1911.466044][T18208] usb 1-1: config 0 descriptor??
[ 1911.616187][T18208] usb 1-1: can't set config #0, error -71
[ 1911.624256][T18208] usb 1-1: USB disconnect, device number 58
[ 1911.728590][ T5721] usb 4-1: descriptor type invalid, skip
[ 1911.734307][ T5721] usb 4-1: descriptor type invalid, skip
[ 1911.739952][ T5721] usb 4-1: descriptor type invalid, skip
[ 1911.840976][T11628] usb 6-1: Using ep0 maxpacket: 8
[ 1912.015267][T28410] bond0: Unable to set peer notification delay as MII monitoring is disabled
[ 1912.025839][T28410] bond0 (unregistering): Released all slaves
[ 1912.094241][T28414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1912.115621][T28414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1912.326452][   T42] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1912.420688][T28425] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[ 1912.443627][   T29] audit: type=1326 audit(1782547187.976:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.481281][   T29] audit: type=1326 audit(1782547188.056:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.507448][   T29] audit: type=1326 audit(1782547188.056:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.535311][ T5721] usb 4-1: string descriptor 0 read error: -71
[ 1912.541652][ T5721] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1912.550819][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1912.560115][   T29] audit: type=1326 audit(1782547188.056:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.573490][T11628] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1912.592636][T11628] usb 6-1: config 0 has no interface number 0
[ 1912.600507][   T29] audit: type=1326 audit(1782547188.056:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.627137][   T42] usb 5-1: Using ep0 maxpacket: 32
[ 1912.629443][   T42] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1912.630447][   T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1912.630473][   T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1912.632752][   T42] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[ 1912.632789][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1912.632814][   T42] usb 5-1: Product: syz
[ 1912.632832][   T42] usb 5-1: Manufacturer: syz
[ 1912.632850][   T42] usb 5-1: SerialNumber: syz
[ 1912.752585][ T5721] usb 4-1: can't set config #1, error -71
[ 1912.760251][ T5721] usb 4-1: USB disconnect, device number 23
[ 1912.771842][   T29] audit: type=1326 audit(1782547188.056:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.796300][   T29] audit: type=1326 audit(1782547188.056:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.820884][   T29] audit: type=1326 audit(1782547188.056:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.845277][   T29] audit: type=1326 audit(1782547188.056:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1912.902550][   T42] usb 5-1: unit 255 not found!
[ 1912.960097][   T29] audit: type=1326 audit(1782547188.056:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28424 comm="syz.3.6006" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3ef9ce59 code=0x7ffc0000
[ 1913.021251][   T42] usb 5-1: USB disconnect, device number 95
[ 1913.211708][T26847] udevd[26847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1913.458346][T11628] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1913.467470][T11628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.475507][T11628] usb 6-1: Product: syz
[ 1913.479792][T11628] usb 6-1: Manufacturer: syz
[ 1913.484428][T11628] usb 6-1: SerialNumber: syz
[ 1913.503133][T11628] usb 6-1: config 0 descriptor??
[ 1913.545089][T28435] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6009'.
[ 1913.571374][T28435] bridge_slave_0: entered promiscuous mode
[ 1913.814499][T28441] syzkaller0: entered promiscuous mode
[ 1913.821358][T28441] syzkaller0: entered allmulticast mode
[ 1914.020421][T11628] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1914.027803][T11628] uvcvideo 6-1:0.31: No valid video chain found.
[ 1914.045242][T11628] usb 6-1: USB disconnect, device number 87
[ 1914.641599][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.648244][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.064109][T11628] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1916.659100][T11628] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1917.114524][T11628] usb 6-1: config 6 has an invalid interface number: 209 but max is 0
[ 1917.122788][T11628] usb 6-1: config 6 has no interface number 0
[ 1917.129530][T11628] usb 6-1: config 6 interface 209 altsetting 249 has an endpoint descriptor with address 0x61, changing to 0x1
[ 1917.141323][T11628] usb 6-1: config 6 interface 209 has no altsetting 0
[ 1917.550616][T11628] usb 6-1: string descriptor 0 read error: -71
[ 1917.557008][T11628] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=42.83
[ 1917.566114][T11628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1917.689382][T11628] usb 6-1: can't set config #6, error -71
[ 1917.703184][T11628] usb 6-1: USB disconnect, device number 88
[ 1918.964031][T28480] netlink: 'syz.0.6019': attribute type 1 has an invalid length.
[ 1918.999886][T28480] bond4: entered promiscuous mode
[ 1919.005496][T28480] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1919.042099][T28480] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1919.049330][T28480] bond4: (slave gre1): The slave device specified does not support setting the MAC address
[ 1919.067009][T28480] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode
[ 1919.089385][T28480] bond4: (slave gre1): making interface the new active one
[ 1919.096669][T28480] gre1: entered promiscuous mode
[ 1919.103979][T28480] bond4: (slave gre1): Enslaving as an active interface with an up link
[ 1919.373364][T28491] input: syz0 as /devices/virtual/input/input154
[ 1919.511548][T28496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6025'.
[ 1919.527237][T28496] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6025'.
[ 1919.675725][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'.
[ 1919.712938][T28501] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1919.753001][T28501] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1919.771811][T28501] veth0_to_bridge: entered allmulticast mode
[ 1919.799851][T28501] veth0_to_bridge: entered promiscuous mode
[ 1919.806451][T28501] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1919.813715][T28501] bridge0: port 3(veth0_to_bridge) entered forwarding state
[ 1919.879227][T28510] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6029'.
[ 1920.356104][   T42] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[ 1920.576483][   T42] usb 3-1: device descriptor read/64, error -71
[ 1920.633378][T27520] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1920.906124][   T42] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[ 1921.075302][T27520] usb 5-1: device descriptor read/64, error -71
[ 1921.127090][   T42] usb 3-1: device descriptor read/64, error -71
[ 1921.239881][   T42] usb usb3-port1: attempt power cycle
[ 1921.396883][T27520] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1921.556711][ T5777] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1921.671638][   T42] usb 3-1: new full-speed USB device number 121 using dummy_hcd
[ 1921.718656][ T5721] usb 1-1: new low-speed USB device number 59 using dummy_hcd
[ 1921.734490][   T42] usb 3-1: device descriptor read/8, error -71
[ 1921.827276][T27520] usb 5-1: device descriptor read/64, error -71
[ 1921.846014][ T5777] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1921.862523][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1921.887544][ T5777] usb 4-1: Product: syz
[ 1921.898022][ T5777] usb 4-1: Manufacturer: syz
[ 1921.909712][ T5777] usb 4-1: SerialNumber: syz
[ 1921.934335][T27520] usb usb5-port1: attempt power cycle
[ 1922.043309][   T42] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[ 1922.146812][   T42] usb 3-1: device descriptor read/8, error -71
[ 1922.159489][ T5721] usb 1-1: device descriptor read/64, error -71
[ 1922.179708][T28541] program syz.3.6036 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1922.338145][   T42] usb usb3-port1: unable to enumerate USB device
[ 1922.383791][T27520] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1922.503539][ T5721] usb 1-1: new low-speed USB device number 60 using dummy_hcd
[ 1922.728985][T27520] usb 5-1: device not accepting address 98, error -71
[ 1922.936170][ T5721] usb 1-1: device descriptor read/64, error -71
[ 1923.046698][ T5721] usb usb1-port1: attempt power cycle
[ 1923.132355][T28555] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[ 1923.162893][   T29] kauditd_printk_skb: 63 callbacks suppressed
[ 1923.162911][   T29] audit: type=1326 audit(1782547198.686:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.201621][   T29] audit: type=1326 audit(1782547198.746:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.226902][   T29] audit: type=1326 audit(1782547198.746:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.251641][   T29] audit: type=1326 audit(1782547198.746:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.298815][   T29] audit: type=1326 audit(1782547198.746:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.323751][   T29] audit: type=1326 audit(1782547198.746:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.348614][   T29] audit: type=1326 audit(1782547198.746:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.373326][   T29] audit: type=1326 audit(1782547198.746:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.398390][   T29] audit: type=1326 audit(1782547198.746:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.428040][   T29] audit: type=1326 audit(1782547198.746:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28554 comm="syz.2.6039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1923.530179][ T5721] usb 1-1: new low-speed USB device number 61 using dummy_hcd
[ 1923.982879][ T5721] usb 1-1: device descriptor read/8, error -71
[ 1924.326679][ T5721] usb 1-1: new low-speed USB device number 62 using dummy_hcd
[ 1924.650679][ T5721] usb 1-1: device not accepting address 62, error -71
[ 1924.658214][ T5721] usb usb1-port1: unable to enumerate USB device
[ 1924.780710][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1924.805984][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1924.831832][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1924.847838][ T5777] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1924.863018][ T5777] usb 4-1: USB disconnect, device number 24
[ 1925.336824][   T42] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1925.386129][T11630] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1925.539624][   T42] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1925.550992][   T42] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[ 1925.575609][   T42] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[ 1925.585310][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1925.593441][   T42] usb 6-1: Product: syz
[ 1925.598204][   T42] usb 6-1: Manufacturer: syz
[ 1925.602921][   T42] usb 6-1: SerialNumber: syz
[ 1925.612972][T11630] usb 5-1: Using ep0 maxpacket: 32
[ 1925.626145][T11630] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1925.644256][T11630] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1925.658821][T11630] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[ 1925.668434][T11630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1925.676526][T11630] usb 5-1: Product: syz
[ 1925.681020][T11630] usb 5-1: Manufacturer: syz
[ 1925.685713][T11630] usb 5-1: SerialNumber: syz
[ 1925.847529][   T42] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1925.859246][   T42] usb 6-1: unit 6 not found!
[ 1925.897474][   T42] usb 6-1: USB disconnect, device number 89
[ 1925.923447][T11630] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1925.988577][T28472] udevd[28472]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1925.993387][T11630] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[ 1926.029164][ T5721] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1926.137482][T11630] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[ 1926.150603][T11630] usb 5-1: USB disconnect, device number 100
[ 1926.200825][T28471] udevd[28471]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1926.680957][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6056'.
[ 1926.941371][T28607] netlink: 'syz.0.6057': attribute type 4 has an invalid length.
[ 1926.952258][T28607] netlink: 'syz.0.6057': attribute type 4 has an invalid length.
[ 1927.033517][T27520] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1927.354189][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1927.365110][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1927.375053][ T5721] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1927.381236][T28617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6061'.
[ 1927.396759][ T5721] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1927.406028][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1927.438027][ T5721] usb 4-1: config 0 descriptor??
[ 1927.519505][   T42] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1927.685895][T27520] usb 6-1: Using ep0 maxpacket: 8
[ 1927.791156][   T42] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1927.811554][   T42] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1927.832985][   T42] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1927.848041][   T42] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1927.867148][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.875623][   T42] usb 3-1: Product: syz
[ 1927.881648][   T42] usb 3-1: Manufacturer: syz
[ 1927.887175][   T42] usb 3-1: SerialNumber: syz
[ 1927.920890][   T42] usb 3-1: config 0 descriptor??
[ 1927.966535][T11630] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1928.137976][T28611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1928.146640][T11630] usb 1-1: device descriptor read/64, error -71
[ 1928.155289][T28611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1928.359171][T27520] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1928.368837][ T5721] plantronics 0003:047F:FFFF.0078: unknown global tag 0xd
[ 1928.376028][ T5721] plantronics 0003:047F:FFFF.0078: item 0 2 1 13 parsing failed
[ 1928.384535][ T5721] plantronics 0003:047F:FFFF.0078: parse failed
[ 1928.389931][   T42] usb 3-1: USB disconnect, device number 123
[ 1928.391051][ T5721] plantronics 0003:047F:FFFF.0078: probe with driver plantronics failed with error -22
[ 1928.407793][T11630] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1928.598509][T28643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'.
[ 1928.621136][T28591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1928.639381][T11630] usb 1-1: device descriptor read/64, error -71
[ 1928.655754][T28591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1928.736269][T18208] usb 4-1: USB disconnect, device number 25
[ 1928.749837][T11630] usb usb1-port1: attempt power cycle
[ 1929.176270][T11630] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1929.234975][T27520] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1929.246740][T27520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1929.254788][T27520] usb 6-1: Product: syz
[ 1929.258997][T27520] usb 6-1: Manufacturer: syz
[ 1929.263656][T27520] usb 6-1: SerialNumber: syz
[ 1929.269186][T11630] usb 1-1: device descriptor read/8, error -71
[ 1929.284208][T27520] usb 6-1: config 0 descriptor??
[ 1929.399747][T28652] netlink: 'syz.2.6071': attribute type 1 has an invalid length.
[ 1929.430747][T28652] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1929.519204][T28652] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode
[ 1929.549817][T28652] bond2: (slave wlan1): Enslaving as an active interface with a down link
[ 1929.576200][T11630] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1929.584784][T18208] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1929.627466][T11630] usb 1-1: device descriptor read/8, error -71
[ 1929.737169][T11630] usb usb1-port1: unable to enumerate USB device
[ 1929.909090][T27520] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1929.918044][T27520] dvb-usb: bulk message failed: -22 (2/0)
[ 1929.930171][T27520] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1929.982483][T28675] kvm: pic: non byte write
[ 1930.025143][T27520] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1930.034069][T27520] usb 6-1: media controller created
[ 1930.052875][T27520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1930.146428][T27520] usb 6-1: selecting invalid altsetting 0
[ 1930.152239][T27520] cxusb: set interface failed
[ 1930.156983][T27520] dvb-usb: bulk message failed: -22 (1/0)
[ 1930.201355][T27520] DVB: Unable to find symbol mt352_attach()
[ 1930.207353][T27520] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1930.587324][T27520] rc_core: IR keymap rc-dvico-portable not found
[ 1930.593748][T27520] Registered IR keymap rc-empty
[ 1930.600112][T27520] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[ 1930.612933][T27520] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input155
[ 1930.643159][T27520] dvb-usb: schedule remote query interval to 100 msecs.
[ 1930.650177][T27520] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1930.708506][T27520] usb 6-1: USB disconnect, device number 90
[ 1930.857987][T27520] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1930.919752][T18208] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[ 1930.927861][T18208] usb 4-1: config 1 has no interface number 0
[ 1930.934011][T18208] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1930.945534][T18208] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1930.955414][T18208] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1930.979553][T18208] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1931.307871][T28697] netlink: 'syz.0.6080': attribute type 1 has an invalid length.
[ 1931.375513][T28700] netlink: 'syz.4.6083': attribute type 1 has an invalid length.
[ 1931.455787][T28700] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1931.527535][T28702] bond0: (slave veth11): Enslaving as an active interface with a down link
[ 1931.556313][T28707] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1931.586721][T27520] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1931.600145][T28707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1931.807064][T18208] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1931.816178][T18208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1931.831145][T18208] usb 4-1: Product: syz
[ 1931.839058][T18208] usb 4-1: Manufacturer: syz
[ 1931.855138][T18208] usb 4-1: SerialNumber: syz
[ 1931.916757][T18208] usb 4-1: can't set config #1, error -71
[ 1931.923889][T18208] usb 4-1: USB disconnect, device number 26
[ 1932.108565][T28723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6090'.
[ 1932.137931][T11628] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1932.151246][T28677] Bluetooth: hci3: command 0x0406 tx timeout
[ 1932.246926][T27520] usb 6-1: Using ep0 maxpacket: 16
[ 1932.362848][T28725] bond5 (unregistering): Released all slaves
[ 1932.554501][T28731] netlink: 'syz.2.6092': attribute type 1 has an invalid length.
[ 1932.562270][T28731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'.
[ 1932.689096][T18208] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1932.764282][T28736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6094'.
[ 1933.139355][T27520] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1933.147315][T18208] usb 4-1: device descriptor read/64, error -71
[ 1933.188325][   T42] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1933.456063][T11628] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1933.466249][T11628] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1933.475327][T11628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1933.477652][   T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[ 1933.488670][T18208] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1933.514900][   T42] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 1933.528561][   T42] usb 3-1: Product: syz
[ 1933.536179][   T42] usb 3-1: Manufacturer: syz
[ 1933.547304][   T42] usb 3-1: SerialNumber: syz
[ 1933.570166][   T42] usb 3-1: config 0 descriptor??
[ 1933.677719][T27520] usb 6-1: unable to read config index 0 descriptor/all
[ 1933.684833][T27520] usb 6-1: can't read configurations, error -71
[ 1933.696631][T11628] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1933.793637][   T42] usb 3-1: USB disconnect, device number 124
[ 1933.898024][T18208] usb 4-1: device descriptor read/64, error -71
[ 1934.117278][T18208] usb usb4-port1: attempt power cycle
[ 1934.555953][T18208] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1934.889009][T27520] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1934.997619][T11628] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[ 1935.005908][T11628] stv0680 5-1:4.0: STV(e): camera ping failed!!
[ 1935.109263][T18208] usb 4-1: device descriptor read/8, error -71
[ 1935.115981][T11628] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1935.124192][T11628] stv0680 5-1:4.0: last error: 0,  command = 0x0
[ 1935.134256][T11628] usb 5-1: USB disconnect, device number 101
[ 1935.414192][T28781] veth1_to_team: entered promiscuous mode
[ 1935.421361][T28781] macvtap1: entered promiscuous mode
[ 1935.445390][T28781] macvtap1: entered allmulticast mode
[ 1935.450840][T28781] veth1_to_team: entered allmulticast mode
[ 1935.516981][T28784] input: syz0 as /devices/virtual/input/input156
[ 1935.558511][T27520] usb 6-1: Using ep0 maxpacket: 8
[ 1935.766191][T11630] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1935.788252][T18208] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1935.796027][T11628] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1935.952889][T28793] EXT4-fs: Conflicting test_dummy_encryption options
[ 1935.986261][T11630] usb 3-1: Using ep0 maxpacket: 8
[ 1936.003116][T11630] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1936.017878][T11630] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1936.033156][T11630] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1936.048177][T11630] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1936.071289][T11630] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1936.085421][T11630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1936.331456][T11630] usb 3-1: GET_CAPABILITIES returned 0
[ 1936.340898][T11630] usbtmc 3-1:16.0: can't read capabilities
[ 1936.436238][T11628] usb 5-1: Using ep0 maxpacket: 16
[ 1936.548311][T28786] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90
[ 1936.558132][T28795] netlink: 766 bytes leftover after parsing attributes in process `syz.2.6110'.
[ 1936.558132][T28786] netlink: 766 bytes leftover after parsing attributes in process `syz.2.6110'.
[ 1936.577354][ T5718] usb 3-1: USB disconnect, device number 125
[ 1936.947530][T28799] binder: 28798:28799 ioctl 40046205 0 returned -22
[ 1936.956458][T28800] tunl0: Caught tx_queue_len zero misconfig
[ 1936.962604][T28800] netlink: 'syz.0.6114': attribute type 10 has an invalid length.
[ 1936.989715][T28799] netlink: 'syz.0.6114': attribute type 10 has an invalid length.
[ 1937.104005][T11628] usb 5-1: config 8 has an invalid interface number: 206 but max is 0
[ 1937.112288][T11628] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1937.122531][T27520] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1937.131612][T27520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1937.139637][T27520] usb 6-1: Product: syz
[ 1937.143830][T27520] usb 6-1: Manufacturer: syz
[ 1937.148457][T27520] usb 6-1: SerialNumber: syz
[ 1937.180134][T11628] usb 5-1: config 8 has no interface number 0
[ 1937.186684][T11628] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1937.216498][T11628] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1937.227606][T11628] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1937.237573][T11628] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1937.250560][T11628] usb 5-1: config 8 interface 206 has no altsetting 0
[ 1937.549468][T27520] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1937.655458][T27520] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1937.664537][T27520] mxuport 6-1:254.0: probe with driver mxuport failed with error -71
[ 1937.674492][ T5718] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1937.686847][T27520] usb 6-1: USB disconnect, device number 92
[ 1937.764681][T18208] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1937.773803][T18208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1937.781840][T18208] usb 4-1: Product: syz
[ 1937.786049][T18208] usb 4-1: Manufacturer: syz
[ 1937.790678][T18208] usb 4-1: SerialNumber: syz
[ 1937.796995][ T5699] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[ 1938.097140][T11628] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[ 1938.106274][T11628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1938.114323][T11628] usb 5-1: Product: syz
[ 1938.118531][T11628] usb 5-1: Manufacturer: syz
[ 1938.123197][T11628] usb 5-1: SerialNumber: syz
[ 1938.202781][T18208] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1938.214745][T18208] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1938.229189][T11628] usb 5-1: can't set config #8, error -71
[ 1938.248025][T18208] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1938.258150][T11628] usb 5-1: USB disconnect, device number 102
[ 1938.266713][T18208] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1938.315126][ T5718] usb 3-1: Using ep0 maxpacket: 32
[ 1938.323838][T18208] usb 4-1: USB disconnect, device number 30
[ 1938.346119][T28820] netlink: 'syz.4.6120': attribute type 12 has an invalid length.
[ 1938.542498][T27520] usb 6-1: new low-speed USB device number 93 using dummy_hcd
[ 1938.989811][ T5718] usb 3-1: config 2 has an invalid interface number: 196 but max is 0
[ 1938.998060][ T5718] usb 3-1: config 2 has no interface number 0
[ 1939.004198][ T5718] usb 3-1: config 2 interface 196 has no altsetting 0
[ 1939.047554][T27404] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1939.095385][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1939.106536][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1939.116337][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1939.129226][ T5699] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1939.138338][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.146863][   T42] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1939.153545][ T5699] usb 1-1: config 0 descriptor??
[ 1939.205629][T27520] usb 6-1: Invalid ep0 maxpacket: 32
[ 1939.308383][T27404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1939.324421][T27404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1939.348718][T27404] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1939.362515][T27404] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1939.378609][T27404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.387877][   T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1939.397788][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.420785][T27404] usb 5-1: config 0 descriptor??
[ 1939.436061][T27520] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[ 1939.445594][   T42] usb 4-1: config 0 descriptor??
[ 1939.776242][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.783988][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.791697][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x1
[ 1939.799401][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x4
[ 1939.807102][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.814800][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.822495][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.830191][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.837887][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.845584][ T5699] hid-multitouch 0003:0457:07DA.0079: unknown main item tag 0x0
[ 1939.866527][   T42] ath6kl: Failed to submit usb control message: -71
[ 1939.883659][   T42] ath6kl: unable to send the bmi data to the device: -71
[ 1939.887044][ T5718] usb 3-1: New USB device found, idVendor=0421, idProduct=0000, bcdDevice= 9.71
[ 1939.899817][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1939.909821][ T5718] usb 3-1: Product: syz
[ 1939.914040][ T5718] usb 3-1: Manufacturer: syz
[ 1939.918672][ T5718] usb 3-1: SerialNumber: syz
[ 1939.927936][T28825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1939.928137][ T5699] hid-multitouch 0003:0457:07DA.0079: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[ 1939.963387][   T42] ath6kl: Unable to send get target info: -71
[ 1939.987848][T28825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1940.012278][   T42] ath6kl: Failed to init ath6kl core: -71
[ 1940.048092][   T42] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1940.144968][   T42] usb 4-1: USB disconnect, device number 31
[ 1940.233221][T27520] usb 6-1: Invalid ep0 maxpacket: 32
[ 1940.238899][T27520] usb usb6-port1: attempt power cycle
[ 1940.301777][T19401] veth0_to_bridge: left allmulticast mode
[ 1940.315899][T19401] veth0_to_bridge: left promiscuous mode
[ 1940.331624][T19401] bridge0: port 1(veth0_to_bridge) entered disabled state
[ 1940.591294][ T5718] usb 3-1: USB disconnect, device number 126
[ 1940.813085][T28846] binder_alloc: binder_alloc_mmap_handler: 28844 200000ffd000-200000fff000 already mapped failed -16
[ 1940.864542][T28846] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6126'.
[ 1941.221660][T19401] bond5 (unregistering): (slave gretap0): Removing an active aggregator
[ 1941.232115][T19401] bond5 (unregistering): (slave gretap0): Releasing backup interface
[ 1941.314575][T19401] team0: Port device gtp0 removed
[ 1941.439794][T19401] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 1941.515471][T19401] bond1 (unregistering): Released all slaves
[ 1941.562601][T19401] bond2 (unregistering): (slave bond3): Releasing backup interface
[ 1941.578753][T19401] bond2 (unregistering): Released all slaves
[ 1941.639415][T19401] bond3 (unregistering): Released all slaves
[ 1941.666175][T19401] bond0 (unregistering): Released all slaves
[ 1941.702832][T11630] usb 1-1: USB disconnect, device number 67
[ 1941.747916][T19401] bond4 (unregistering): (slave veth3): Releasing backup interface
[ 1941.810294][T19401] bond4 (unregistering): Released all slaves
[ 1941.831921][T19401] bond5 (unregistering): Released all slaves
[ 1941.914739][T28839] netlink: 'syz.3.6124': attribute type 12 has an invalid length.
[ 1941.936327][T28839] netlink: 'syz.3.6124': attribute type 29 has an invalid length.
[ 1941.963149][T28839] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6124'.
[ 1941.974807][T28842] netlink: 'syz.3.6124': attribute type 12 has an invalid length.
[ 1942.020980][T28842] netlink: 'syz.3.6124': attribute type 29 has an invalid length.
[ 1942.028984][T28855] xt_hashlimit: size too large, truncated to 1048576
[ 1942.085392][T28842] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6124'.
[ 1942.239679][   T29] kauditd_printk_skb: 55 callbacks suppressed
[ 1942.239699][   T29] audit: type=1800 audit(1782547217.826:3993): pid=28860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6130" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[ 1942.506549][T19402] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.596047][  T146] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.639578][T28677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1942.640451][  T146] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.671746][T28677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1942.677515][T19401] tipc: Disabling bearer <udp:syz2>
[ 1942.684869][T28677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1942.686272][T19401] tipc: Disabling bearer <eth:syzkaller0>
[ 1942.771915][T28677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1942.779579][T11187] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.787003][T28677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1942.865083][T11187] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.916219][T19402] bond5: (slave erspan0): link status up again after 0 ms
[ 1942.974976][T11187] bond5: (slave erspan0): link status up again after 0 ms
[ 1943.026125][T11187] bond5: (slave erspan0): link status up again after 0 ms
[ 1943.083070][T27404] usbhid 5-1:0.0: can't add hid device: -71
[ 1943.136089][T19400] bond5: (slave erspan0): link status up again after 0 ms
[ 1943.146111][T27404] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1943.214421][T27404] usb 5-1: USB disconnect, device number 103
[ 1943.257213][T11630] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1943.268378][T19401] tipc: Left network mode
[ 1943.279041][T11187] net_ratelimit: 1 callbacks suppressed
[ 1943.279061][T11187] bond5: (slave erspan0): link status up again after 0 ms
[ 1943.356590][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1943.551862][T11630] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1943.580589][T11630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.615336][T11630] usb 6-1: Product: syz
[ 1943.666804][T11630] usb 6-1: Manufacturer: syz
[ 1943.685229][T11630] usb 6-1: SerialNumber: syz
[ 1943.721262][T11630] usb 6-1: config 0 descriptor??
[ 1943.741788][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1943.873249][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1944.075658][T19401] IPVS: stopping master sync thread 20090 ...
[ 1944.139995][ T5699] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1944.220461][T28874] program syz.5.6132 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1944.328538][T11630] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22
[ 1944.374686][T11630] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1944.394390][T11630] usb 6-1: USB disconnect, device number 96
[ 1944.425978][  T146] bond5: (slave erspan0): failed to get link speed/duplex
[ 1944.784512][T28677] Bluetooth: hci0: command tx timeout
[ 1944.846520][ T5699] usb 4-1: Using ep0 maxpacket: 16
[ 1945.174649][T28869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1945.183180][T28869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1945.191213][T28869] bridge_slave_0: entered allmulticast mode
[ 1945.199951][T28869] bridge_slave_0: entered promiscuous mode
[ 1945.210224][T28869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1945.217559][T28869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1945.225132][T28869] bridge_slave_1: entered allmulticast mode
[ 1945.235745][T28869] bridge_slave_1: entered promiscuous mode
[ 1945.317877][T28869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1945.330753][T28869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1945.374746][T28869] team0: Port device team_slave_0 added
[ 1945.384960][T28869] team0: Port device team_slave_1 added
[ 1945.406111][T27404] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1945.448074][T28869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1945.455101][T28869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1945.481030][T28869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1945.494191][T28869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1945.504544][T28869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1945.536595][T28869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1945.548782][T28917] syzkaller0: entered promiscuous mode
[ 1945.554318][T28917] syzkaller0: entered allmulticast mode
[ 1945.626486][T27404] usb 5-1: Using ep0 maxpacket: 32
[ 1945.650026][T27404] usb 5-1: config 2 has an invalid interface number: 196 but max is 0
[ 1945.660354][T27404] usb 5-1: config 2 has no interface number 0
[ 1945.676844][T27404] usb 5-1: config 2 interface 196 has no altsetting 0
[ 1945.691610][T28917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1945.702138][T27404] usb 5-1: New USB device found, idVendor=0421, idProduct=0000, bcdDevice= 9.71
[ 1945.712368][T28916] tipc: Resetting bearer <eth:syzkaller0>
[ 1945.739508][T27404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1945.750466][T27404] usb 5-1: Product: syz
[ 1945.754720][T27404] usb 5-1: Manufacturer: syz
[ 1945.759407][T27404] usb 5-1: SerialNumber: syz
[ 1945.783114][T28916] tipc: Disabling bearer <eth:syzkaller0>
[ 1945.840285][T19401] hsr_slave_0: left promiscuous mode
[ 1945.846601][T19401] hsr_slave_1: left promiscuous mode
[ 1945.982528][T28910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1946.019559][T28910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1946.035264][ T5699] usb 4-1: config 117 has an invalid interface number: 124 but max is 0
[ 1946.043691][ T5699] usb 4-1: config 117 has no interface number 0
[ 1946.050001][ T5699] usb 4-1: config 117 interface 124 has no altsetting 0
[ 1946.124230][T27404] usb 5-1: USB disconnect, device number 104
[ 1946.250795][ T5718] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1946.486014][T28869] hsr_slave_0: entered promiscuous mode
[ 1946.492632][T28869] hsr_slave_1: entered promiscuous mode
[ 1946.499191][T28869] debugfs: 'hsr0' already exists in 'hsr'
[ 1946.504937][T28869] Cannot create hsr debugfs directory
[ 1946.614639][T27520] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1946.700102][ T5718] usb 3-1: device descriptor read/64, error -71
[ 1946.856562][T28677] Bluetooth: hci0: command tx timeout
[ 1946.986313][T28935] syzkaller0: entered promiscuous mode
[ 1946.991931][T28935] syzkaller0: entered allmulticast mode
[ 1947.016904][T19402] bond5: (slave erspan0): failed to get link speed/duplex
[ 1947.043865][ T5699] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.85
[ 1947.052986][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1947.061022][ T5699] usb 4-1: Product: syz
[ 1947.065314][ T5699] usb 4-1: Manufacturer: syz
[ 1947.071803][ T5718] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1947.160255][ T5699] usb 4-1: can't set config #117, error -71
[ 1947.173632][ T5699] usb 4-1: USB disconnect, device number 32
[ 1947.235033][T28869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1947.247602][T28869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57079 - 0
[ 1947.501474][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1947.510331][ T5718] usb 3-1: device descriptor read/64, error -71
[ 1947.575579][T28869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1947.586033][T28869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57079 - 0
[ 1947.614819][ T5718] usb usb3-port1: attempt power cycle
[ 1947.650335][T19401] IPVS: stop unused estimator thread 0...
[ 1947.809588][T28869] bond0: (slave netdevsim1): Releasing backup interface
[ 1947.880050][T28869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1947.892585][T28869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57079 - 0
[ 1947.939164][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1947.996124][T11630] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1948.053868][ T5718] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1948.063867][T19402] bond5: (slave erspan0): failed to get link speed/duplex
[ 1948.256154][T11630] usb 5-1: Using ep0 maxpacket: 16
[ 1948.263150][T11630] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1948.271649][T11630] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1948.282407][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1948.291447][ T5699] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1948.293154][T11630] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1948.318616][T11630] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89
[ 1948.329286][T11630] usb 5-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3
[ 1948.337614][T11630] usb 5-1: Manufacturer: syz
[ 1948.342440][T11630] usb 5-1: SerialNumber: syz
[ 1948.349906][T11630] usb 5-1: config 0 descriptor??
[ 1948.365646][T11630] usb 5-1: 0:2 : does not exist
[ 1948.410203][T28869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1948.420549][T28869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57079 - 0
[ 1948.455995][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1948.511966][ T5718] usb 3-1: device descriptor read/8, error -71
[ 1948.613940][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1948.641459][T19407] veth0_to_bridge: left allmulticast mode
[ 1948.647277][T19407] veth0_to_bridge: left promiscuous mode
[ 1948.653361][T19407] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1948.664317][T19407] bridge_slave_1: left promiscuous mode
[ 1948.672458][T19407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1948.681740][T19407] bridge_slave_0: left allmulticast mode
[ 1948.687411][T19407] bridge_slave_0: left promiscuous mode
[ 1948.693129][T19407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1948.936146][T28677] Bluetooth: hci0: command tx timeout
[ 1948.948916][ T5718] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1948.956611][ T5699] usb 4-1: Using ep0 maxpacket: 32
[ 1949.093811][T19407] bond4 (unregistering): (slave gre1): Releasing backup interface
[ 1949.101715][T19407] gre1 (unregistering): left promiscuous mode
[ 1949.207105][T19407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1949.220571][T19407] bond0 (unregistering): (slave 
c
@0Ù): Releasing backup interface
[ 1949.231328][T19407] bond0 (unregistering): Released all slaves
[ 1949.244024][T19407] bond1 (unregistering): Released all slaves
[ 1949.259624][T19407] bond2 (unregistering): Released all slaves
[ 1949.275555][T19407] bond3 (unregistering): Released all slaves
[ 1949.292138][ T5718] usb 3-1: device not accepting address 4, error -71
[ 1949.299246][ T5718] usb usb3-port1: unable to enumerate USB device
[ 1949.318116][T19407] bond4 (unregistering): Released all slaves
[ 1949.347225][T11630] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1949.463178][T28869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1949.473281][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1949.481471][T28869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1949.491091][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1949.499225][T28869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1949.528136][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1949.538266][T28869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1949.550424][T28869] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1949.578000][T11630] usb 6-1: Using ep0 maxpacket: 32
[ 1949.587314][T11630] usb 6-1: no configurations
[ 1949.600977][T11630] usb 6-1: can't read configurations, error -22
[ 1949.637031][ T5699] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 16
[ 1949.646940][ T5699] usb 4-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1949.660017][ T5699] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1949.678378][T19407] tipc: Disabling bearer <udp:syz0>
[ 1949.684491][T19407] tipc: Left network mode
[ 1949.755708][T28869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1949.780110][T28869] 8021q: adding VLAN 0 to HW filter on device team0
[ 1949.793464][T19401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1949.800780][T19401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1949.809332][T11630] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1949.828257][T11187] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1949.835543][T11187] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1949.862151][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1949.945879][T28869] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1949.984852][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1949.994995][ T5718] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1950.038357][T11630] usb 6-1: Using ep0 maxpacket: 32
[ 1950.045322][T28869] veth0_vlan: entered promiscuous mode
[ 1950.054208][T11630] usb 6-1: no configurations
[ 1950.060053][T11630] usb 6-1: can't read configurations, error -22
[ 1950.067406][T11630] usb usb6-port1: attempt power cycle
[ 1950.067606][T28869] veth1_vlan: entered promiscuous mode
[ 1950.096486][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1950.122712][T28869] veth0_macvtap: entered promiscuous mode
[ 1950.132428][T28869] veth1_macvtap: entered promiscuous mode
[ 1950.150969][T28869] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1950.165112][T28869] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1950.179472][T11187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.189021][T11185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.217971][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1950.234954][  T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.261358][  T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1950.407969][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1950.429618][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1950.437141][T11630] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1950.461934][T19402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1950.469828][T19402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1950.501727][T11630] usb 6-1: Using ep0 maxpacket: 32
[ 1950.508712][T11630] usb 6-1: no configurations
[ 1950.513533][T11630] usb 6-1: can't read configurations, error -22
[ 1950.541256][ T5699] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1950.544870][T19402] bond5: (slave erspan0): failed to get link speed/duplex
[ 1950.550391][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1950.550418][ T5699] usb 4-1: Product: syz
[ 1950.550435][ T5699] usb 4-1: Manufacturer: syz
[ 1950.550452][ T5699] usb 4-1: SerialNumber: syz
[ 1950.650388][ T5718] usb 3-1: Using ep0 maxpacket: 32
[ 1950.650684][T28956] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1950.670716][T28956] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1950.707903][T11630] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1950.756826][T11630] usb 6-1: Using ep0 maxpacket: 32
[ 1950.762923][T11630] usb 6-1: no configurations
[ 1950.768249][T11630] usb 6-1: can't read configurations, error -22
[ 1950.784390][T11630] usb usb6-port1: unable to enumerate USB device
[ 1950.803733][   T29] audit: type=1326 audit(1782547226.346:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.0.6152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1359ce59 code=0x7ffc0000
[ 1950.821817][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1950.830504][   T29] audit: type=1326 audit(1782547226.346:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.0.6152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1359ce59 code=0x7ffc0000
[ 1950.860354][   T29] audit: type=1326 audit(1782547226.406:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.0.6152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f2a1359ce59 code=0x7ffc0000
[ 1950.943582][   T29] audit: type=1326 audit(1782547226.406:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.0.6152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1359ce59 code=0x7ffc0000
[ 1950.973462][   T29] audit: type=1326 audit(1782547226.406:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.0.6152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1359ce59 code=0x7ffc0000
[ 1951.033668][T28677] Bluetooth: hci0: command tx timeout
[ 1951.066016][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1951.290936][T19407] hsr_slave_0: left promiscuous mode
[ 1951.297109][T19407] hsr_slave_1: left promiscuous mode
[ 1951.310427][T19407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1951.320058][T19407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1951.341443][ T5718] usb 3-1: config 2 has an invalid interface number: 196 but max is 0
[ 1951.349779][ T5718] usb 3-1: config 2 has no interface number 0
[ 1951.359726][T19407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1951.367188][ T5718] usb 3-1: config 2 interface 196 has no altsetting 0
[ 1951.373998][T19407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1951.386025][T19407] batman_adv: batadv0: Interface deactivated: macsec0
[ 1951.394145][T19407] batman_adv: batadv0: Removing interface: macsec0
[ 1951.420927][T19407] veth1_vlan: left promiscuous mode
[ 1951.451308][ T5699] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1951.465024][ T5699] usb 4-1: USB disconnect, device number 33
[ 1951.583819][T11628] usb 5-1: USB disconnect, device number 105
[ 1951.972262][T19407] team0 (unregistering): Port device team_slave_1 removed
[ 1952.005674][T19407] team0 (unregistering): Port device team_slave_0 removed
[ 1952.131567][ T5699] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[ 1952.362388][ T5718] usb 3-1: New USB device found, idVendor=0421, idProduct=0000, bcdDevice= 9.71
[ 1952.407073][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1952.415156][ T5718] usb 3-1: Product: syz
[ 1952.419365][ T5718] usb 3-1: Manufacturer: syz
[ 1952.432759][T29001] netlink: 'syz.4.6157': attribute type 1 has an invalid length.
[ 1952.478211][ T5718] usb 3-1: can't set config #2, error -71
[ 1952.512695][ T5718] usb 3-1: USB disconnect, device number 5
[ 1952.566215][T28677] Bluetooth: hci5: command 0x0406 tx timeout
[ 1952.720339][T29013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6157'.
[ 1952.873459][T29007] bond2: (slave geneve4): making interface the new active one
[ 1952.906481][T29007] bond2: (slave geneve4): Enslaving as an active interface with an up link
[ 1953.004883][T29013] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1953.049098][  T146] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1953.071037][  T146] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1953.080477][  T146] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1953.089857][  T146] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1953.375417][ T5718] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1953.385514][T17475] net_ratelimit: 2 callbacks suppressed
[ 1953.385535][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1953.492767][  T146] bond5: (slave erspan0): failed to get link speed/duplex
[ 1953.602123][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1953.710255][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1953.718454][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1953.926667][ T5699] usb 4-1: not running at top speed; connect to a high speed hub
[ 1953.937657][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.032904][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.037563][ T5718] usb 3-1: Using ep0 maxpacket: 8
[ 1954.057460][T19407] IPVS: stop unused estimator thread 0...
[ 1954.083595][T29040] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1954.115913][T29040] netlink: 'syz.4.6166': attribute type 3 has an invalid length.
[ 1954.253694][  T146] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.369458][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.418263][T11630] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1954.477367][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.526259][T27404] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1954.580254][ T5699] usb 4-1: unable to read config index 0 descriptor/all
[ 1954.587396][ T5699] usb 4-1: can't read configurations, error -71
[ 1954.592113][  T146] bond5: (slave erspan0): failed to get link speed/duplex
[ 1954.594179][ T5721] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1954.688029][ T5718] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[ 1954.696571][ T5718] usb 3-1: config 0 has no interface number 0
[ 1954.703546][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1954.704053][ T5718] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[ 1954.726259][ T5718] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[ 1954.737093][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1954.747778][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1954.759312][T11630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1954.771088][T11630] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1954.780517][T11630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1954.788845][T27404] usb 1-1: Using ep0 maxpacket: 32
[ 1954.794251][T11630] usb 5-1: Product: syz
[ 1954.798770][T11630] usb 5-1: Manufacturer: syz
[ 1954.803889][T11630] usb 5-1: SerialNumber: syz
[ 1954.809565][T27404] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1954.827090][T27404] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1954.834948][T11630] usb 5-1: config 0 descriptor??
[ 1954.840273][T27404] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1954.852605][T27404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1954.863722][T27404] usb 1-1: config 0 descriptor??
[ 1955.042564][ T5699] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1955.060604][T11630] adutux 5-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1955.072502][T11630] usb 5-1: USB disconnect, device number 106
[ 1955.265778][ T5721] usb 6-1: Using ep0 maxpacket: 32
[ 1955.292743][T29045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1955.301843][T29045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1955.323421][T27404] corsair-cpro 0003:1B1C:0C10.007A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[ 1955.601970][ T5718] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[ 1955.611089][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.619126][ T5718] usb 3-1: Product: syz
[ 1955.623335][ T5718] usb 3-1: Manufacturer: syz
[ 1955.627969][ T5718] usb 3-1: SerialNumber: syz
[ 1955.637185][ T5718] usb 3-1: config 0 descriptor??
[ 1955.715769][ T5699] usb 4-1: Using ep0 maxpacket: 32
[ 1955.721266][ T5718] usb 3-1: can't set config #0, error -71
[ 1955.730141][ T5718] usb 3-1: USB disconnect, device number 6
[ 1955.740467][T27404] corsair-cpro 0003:1B1C:0C10.007A: probe with driver corsair-cpro failed with error -71
[ 1955.801211][T27404] usb 1-1: USB disconnect, device number 68
[ 1955.879955][   T29] audit: type=1326 audit(1782547231.466:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1955.901441][T29054] input: syz1 as /devices/virtual/input/input157
[ 1955.915314][   T29] audit: type=1326 audit(1782547231.466:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1955.950385][ T5699] usb 4-1: no configurations
[ 1955.955016][ T5699] usb 4-1: can't read configurations, error -22
[ 1955.961675][ T5721] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1955.973081][ T5699] usb usb4-port1: attempt power cycle
[ 1955.983895][ T5721] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1955.995592][ T5721] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1956.007328][   T29] audit: type=1326 audit(1782547231.466:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.031771][ T5721] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1956.045953][   T29] audit: type=1326 audit(1782547231.466:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.102557][   T29] audit: type=1326 audit(1782547231.466:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.126973][   T29] audit: type=1326 audit(1782547231.466:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.159069][   T29] audit: type=1326 audit(1782547231.466:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.239794][   T29] audit: type=1326 audit(1782547231.466:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.328406][   T29] audit: type=1326 audit(1782547231.466:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.352846][   T29] audit: type=1326 audit(1782547231.466:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29049 comm="syz.2.6170" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1956.417212][ T5699] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1956.854946][ T5699] usb 4-1: Using ep0 maxpacket: 32
[ 1956.862315][ T5721] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1956.871399][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1956.879416][ T5721] usb 6-1: Product: syz
[ 1956.883585][ T5721] usb 6-1: Manufacturer: syz
[ 1956.888224][ T5721] usb 6-1: SerialNumber: syz
[ 1956.960894][T20597] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1957.079425][ T5721] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input158
[ 1957.093848][ T5699] usb 4-1: no configurations
[ 1957.098506][ T5699] usb 4-1: can't read configurations, error -22
[ 1957.176460][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1957.286621][ T5699] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1957.295552][ T5721] imon:send_packet: packet tx failed (-71)
[ 1957.339876][T18734] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1957.393604][ T5721] imon 6-1:155.0: panel buttons/knobs setup failed
[ 1957.400197][ T5721] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1957.408562][ T5721]  (id 0x00)
[ 1957.417049][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6176'.
[ 1957.622953][ T5699] usb 4-1: device descriptor read/8, error -71
[ 1957.629247][ T5721] rc_core: IR keymap rc-imon-pad not found
[ 1957.635157][ T5721] Registered IR keymap rc-empty
[ 1957.640132][ T5721] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1957.650416][ T5721] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1957.739887][T18734] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1957.740623][ T5699] usb usb4-port1: unable to enumerate USB device
[ 1957.755984][T18734] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024
[ 1957.773906][T18734] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1957.800704][ T5721] imon:send_packet: packet tx failed (-71)
[ 1957.812134][T18734] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1957.822741][T18734] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[ 1957.838622][T18734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1957.859581][T18734] usb 1-1: config 0 descriptor??
[ 1957.866126][ T5721] imon 6-1:155.0: remote input dev register failed
[ 1957.872843][ T5721] imon 6-1:155.0: imon_init_intf0: rc device setup failed
[ 1958.059162][ T5721] imon 6-1:155.0: unable to initialize intf0, err 0
[ 1958.065854][ T5721] imon:imon_probe: failed to initialize context!
[ 1958.110150][ T5721] imon 6-1:155.0: unable to register, err -19
[ 1958.122216][ T5721] usb 6-1: USB disconnect, device number 102
[ 1958.291675][T18734] hid_parser_main: 22 callbacks suppressed
[ 1958.291700][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.313981][T20597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1958.324887][T20597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1958.334643][T20597] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1958.343689][T20597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1958.371730][T20597] usb 5-1: config 0 descriptor??
[ 1958.398454][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.409559][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6177'.
[ 1958.421810][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.421850][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.421881][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.421913][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.421944][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.421976][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.422008][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.422040][T18734] logitech-djreceiver 0003:046D:C532.007B: unknown main item tag 0x0
[ 1958.497844][T29068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1958.521731][T29068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1958.541598][T29068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1958.579049][T29068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1958.622184][T18734] usb 1-1: USB disconnect, device number 69
[ 1958.778934][T29076] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1958.966281][T29083] netlink: 'syz.0.6178': attribute type 29 has an invalid length.
[ 1959.036185][T17475] net_ratelimit: 26 callbacks suppressed
[ 1959.036209][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.133122][T20597] pyra 0003:1E7D:2CF6.007C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[ 1959.203515][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.434964][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.527765][ T5721] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1959.636210][ T5699] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 1959.644036][T18208] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1959.655744][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.748535][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.856082][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1959.959546][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1960.070295][T18208] usb 1-1: device descriptor read/64, error -71
[ 1960.117363][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1960.276067][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1960.289989][ T5699] usb 6-1: Using ep0 maxpacket: 32
[ 1960.395965][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1960.397445][ T5721] usb 3-1: too many configurations: 135, using maximum allowed: 8
[ 1960.411105][T18208] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1960.828491][T18208] usb 1-1: device descriptor read/64, error -71
[ 1960.834986][ T5721] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1960.847754][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1960.928200][T29060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1960.938545][T29060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1960.951292][T18208] usb usb1-port1: attempt power cycle
[ 1961.058525][T20597] pyra 0003:1E7D:2CF6.007C: couldn't init struct pyra_device
[ 1961.066057][T20597] pyra 0003:1E7D:2CF6.007C: couldn't install mouse
[ 1961.077520][T20597] pyra 0003:1E7D:2CF6.007C: probe with driver pyra failed with error -71
[ 1961.100394][T20597] usb 5-1: USB disconnect, device number 107
[ 1961.280025][ T5721] usb 3-1: config index 1 descriptor too short (expected 45, got 36)
[ 1961.288312][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1961.383279][T18208] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1961.656812][T27404] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1961.708187][ T5721] usb 3-1: config index 2 descriptor too short (expected 45, got 36)
[ 1961.717291][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1961.815551][ T5699] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1961.824886][T18208] usb 1-1: device descriptor read/8, error -71
[ 1961.831104][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1961.839103][ T5699] usb 6-1: Product: syz
[ 1961.843270][ T5699] usb 6-1: Manufacturer: syz
[ 1961.847868][ T5699] usb 6-1: SerialNumber: syz
[ 1961.854732][ T5699] usb 6-1: config 0 descriptor??
[ 1961.868232][T18734] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1961.916103][T27404] usb 4-1: Using ep0 maxpacket: 32
[ 1961.923057][T27404] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1961.932803][T27404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1961.950818][T27404] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1962.055244][ T5699] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1962.062968][ T5699] dvb-usb: bulk message failed: -22 (4/0)
[ 1962.068737][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1962.079466][ T5699] dvb-usb: bulk message failed: -22 (5/0)
[ 1962.085243][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1962.098540][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1962.109499][T18734] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1962.118987][T18734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1962.129921][T18734] usb 5-1: config 0 descriptor??
[ 1962.163624][T18208] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1962.172352][ T5721] usb 3-1: config index 3 descriptor too short (expected 45, got 36)
[ 1962.180905][ T5699] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1962.188978][ T5699] usb 6-1: media controller created
[ 1962.198313][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1962.220602][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1962.242845][ T5699] usb 6-1: selecting invalid altsetting 3
[ 1962.248747][ T5699] ttusb2: set interface to alts=3 failed
[ 1962.354325][T27404] gspca_nw80x: reg_r err -71
[ 1962.373918][T27404] nw80x 4-1:3.0: probe with driver nw80x failed with error -71
[ 1962.411912][T27404] usb 4-1: USB disconnect, device number 38
[ 1962.429268][ T5699] DVB: Unable to find symbol tda10086_attach()
[ 1962.435498][ T5699] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1962.505505][T18208] usb 1-1: device descriptor read/8, error -71
[ 1962.521973][ T5721] usb 3-1: unable to read config index 4 descriptor/start: -71
[ 1962.529635][ T5721] usb 3-1: can't read configurations, error -71
[ 1962.551040][T18734] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1962.574117][T18734] [drm:udl_init] *ERROR* Selecting channel failed
[ 1962.610684][T18734] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[ 1962.623076][ T5699] dvb-usb: bulk message failed: -22 (4/0)
[ 1962.628884][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1962.639206][ T5699] dvb-usb: bulk message failed: -22 (5/0)
[ 1962.645063][ T5699] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1962.655237][ T5699] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1962.655499][T18734] [drm] Initialized udl on minor 2
[ 1962.676632][T18208] usb usb1-port1: unable to enumerate USB device
[ 1962.694781][T29118] vivid-004: disconnect
[ 1962.742954][T18734] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1962.759802][T18734] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1962.777943][T27404] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1962.811367][T27404] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1962.829454][T18734] usb 5-1: USB disconnect, device number 108
[ 1962.850443][T29120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'.
[ 1962.874355][T29117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1963.284392][T18208] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1963.522538][T29127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6190'.
[ 1963.538830][ T5699] usb 6-1: USB disconnect, device number 103
[ 1963.556127][T27404] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1963.625599][ T5699] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1963.665336][T29112] vivid-004: reconnect
[ 1963.786232][T27404] usb 5-1: Using ep0 maxpacket: 16
[ 1963.795439][T27404] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1963.807395][T27404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1963.815487][T27404] usb 5-1: Product: syz
[ 1963.820299][T27404] usb 5-1: Manufacturer: syz
[ 1963.824975][T27404] usb 5-1: SerialNumber: syz
[ 1963.845337][T27404] usb 5-1: config 0 descriptor??
[ 1963.876654][T27404] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[ 1963.952468][T18208] usb 1-1: Using ep0 maxpacket: 32
[ 1964.006056][T18734] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 1964.117947][T19405] net_ratelimit: 27 callbacks suppressed
[ 1964.117964][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.171848][T18208] usb 1-1: no configurations
[ 1964.176543][T18208] usb 1-1: can't read configurations, error -22
[ 1964.240438][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.248024][T18734] usb 4-1: device descriptor read/64, error -71
[ 1964.304546][T27404] usb 5-1: USB disconnect, device number 109
[ 1964.391673][T18208] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1964.399769][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.506048][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.556678][T18734] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[ 1964.614432][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.724719][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.776471][T18734] usb 4-1: device descriptor read/64, error -71
[ 1964.849786][ T5718] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1964.869144][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1964.919123][T18734] usb usb4-port1: attempt power cycle
[ 1964.981471][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1965.008351][ T5777] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1965.072499][T18208] usb 1-1: Using ep0 maxpacket: 32
[ 1965.116178][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1965.267679][ T5777] usb 5-1: Using ep0 maxpacket: 16
[ 1965.275373][ T5777] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1965.286046][T18734] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[ 1965.296441][T18208] usb 1-1: no configurations
[ 1965.299975][ T5777] usb 5-1: config 0 has no interface number 0
[ 1965.301102][T18208] usb 1-1: can't read configurations, error -22
[ 1965.314999][T18208] usb usb1-port1: attempt power cycle
[ 1965.326448][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1965.350992][T18734] usb 4-1: device descriptor read/8, error -71
[ 1965.357525][ T5777] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1965.408248][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1965.451362][ T5777] usb 5-1: Product: syz
[ 1965.476246][ T5777] usb 5-1: Manufacturer: syz
[ 1965.505341][ T5777] usb 5-1: SerialNumber: syz
[ 1965.550542][ T5777] usb 5-1: config 0 descriptor??
[ 1965.591308][ T5777] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1965.676249][T18734] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[ 1965.728290][ T5699] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 1965.750542][T18734] usb 4-1: device descriptor read/8, error -71
[ 1966.010741][T18734] usb usb4-port1: unable to enumerate USB device
[ 1966.118836][ T5777] gspca_spca1528: reg_w err -110
[ 1966.168518][ T5718] usb 3-1: config 251 has an invalid interface number: 254 but max is 0
[ 1966.176917][ T5718] usb 3-1: config 251 has no interface number 0
[ 1966.183217][ T5718] usb 3-1: config 251 interface 254 has no altsetting 0
[ 1966.199190][ T5777] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110
[ 1966.386703][ T5699] usb 6-1: Using ep0 maxpacket: 8
[ 1967.032939][ T5718] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=e1.c1
[ 1967.042019][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1967.050097][ T5699] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1967.061213][ T5699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1967.071229][ T5699] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1967.081130][ T5699] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1967.099356][ T5718] usb 3-1: Product: syz
[ 1967.103555][ T5718] usb 3-1: Manufacturer: syz
[ 1967.109021][ T5718] usb 3-1: SerialNumber: syz
[ 1967.197640][ T5699] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1967.206760][ T5699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1967.528282][ T5777] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1967.579003][ T5699] usb 6-1: GET_CAPABILITIES returned 0
[ 1967.584663][ T5699] usbtmc 6-1:16.0: can't read capabilities
[ 1967.793183][ T5777] usb 4-1: Using ep0 maxpacket: 32
[ 1967.909995][ T5777] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1967.918670][ T5777] usb 4-1: config 0 has no interface number 0
[ 1967.928912][ T5777] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1967.938779][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1967.947114][ T5777] usb 4-1: Product: syz
[ 1967.951563][ T5777] usb 4-1: Manufacturer: syz
[ 1967.981093][ T5777] usb 4-1: SerialNumber: syz
[ 1968.001281][ T5777] usb 4-1: config 0 descriptor??
[ 1968.058976][T29147] 8021q: VLANs not supported on lo
[ 1968.090715][T11630] usb 6-1: USB disconnect, device number 104
[ 1968.280919][ T5718] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:251.254/input/input160
[ 1968.303742][ T5718] usb 3-1: USB disconnect, device number 9
[ 1968.580474][ T5777] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1968.668238][ T5777] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1969.114016][   T29] kauditd_printk_skb: 30 callbacks suppressed
[ 1969.114036][   T29] audit: type=1326 audit(1782547244.666:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.164316][T19407] net_ratelimit: 25 callbacks suppressed
[ 1969.164341][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.181288][T29158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1969.190207][T29158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1969.226687][ T5777] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[ 1969.275504][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.313553][   T29] audit: type=1326 audit(1782547244.746:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.340485][ T5777] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[ 1969.382013][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.398040][   T29] audit: type=1326 audit(1782547244.746:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.430712][ T5777] usb 4-1: USB disconnect, device number 43
[ 1969.451338][   T29] audit: type=1326 audit(1782547244.746:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.475766][   T29] audit: type=1326 audit(1782547244.746:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.520827][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.534922][   T29] audit: type=1326 audit(1782547244.746:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.561335][   T29] audit: type=1326 audit(1782547244.746:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.585839][   T29] audit: type=1326 audit(1782547244.746:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.2.6199" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1969.624142][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.792590][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.955969][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1969.965274][ T5777] usb 5-1: USB disconnect, device number 110
[ 1970.116225][T18734] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[ 1970.132777][T29179] netlink: 'syz.2.6205': attribute type 11 has an invalid length.
[ 1970.192052][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'.
[ 1970.270349][T19407] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1970.318091][T29179] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[ 1970.327422][T29179] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[ 1970.366776][T29186] No such timeout policy "syz0"
[ 1970.367047][T29187] No such timeout policy "syz0"
[ 1970.403216][T18734] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[ 1970.415316][T18734] usb 1-1: config 0 has no interface number 0
[ 1970.421810][T18734] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1970.438104][T18734] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1970.447855][T18734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1970.456093][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1970.464582][T18734] usb 1-1: Product: syz
[ 1970.469094][T18734] usb 1-1: Manufacturer: syz
[ 1970.474112][T18734] usb 1-1: SerialNumber: syz
[ 1970.482157][T18734] usb 1-1: config 0 descriptor??
[ 1970.512690][ T5718] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1970.542092][T29173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1970.580790][T18734] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7e:c2:36:2c:12:eb
[ 1970.620808][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1970.736884][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1970.957380][T29178] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1970.963904][T29178] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1970.990007][T29178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1970.996148][T29178] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1971.002173][T29178] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1971.012728][T29178] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1971.020361][T29178] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1971.030162][T29178] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1971.036213][T29178] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1971.046364][T29178] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1971.179718][ T5718] usb 4-1: Using ep0 maxpacket: 32
[ 1971.401781][ T5718] usb 4-1: no configurations
[ 1971.406738][ T5718] usb 4-1: can't read configurations, error -22
[ 1971.417144][T18208] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[ 1971.569342][ T5777] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1971.629203][ T5718] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1971.838391][ T5777] usb 6-1: config 0 has no interfaces?
[ 1971.868833][ T5777] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1971.878630][ T5777] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1971.889513][ T5777] usb 6-1: Product: syz
[ 1971.906829][ T5777] usb 6-1: Manufacturer: syz
[ 1971.933704][ T5777] usb 6-1: SerialNumber: syz
[ 1971.981261][ T5777] usb 6-1: config 0 descriptor??
[ 1972.209429][ T5777] usb 6-1: USB disconnect, device number 105
[ 1972.300835][ T5718] usb 4-1: Using ep0 maxpacket: 32
[ 1972.526060][ T5718] usb 4-1: no configurations
[ 1972.530751][ T5718] usb 4-1: can't read configurations, error -22
[ 1972.544715][ T5718] usb usb4-port1: attempt power cycle
[ 1972.726176][T28677] Bluetooth: hci1: command 0x0406 tx timeout
[ 1972.741980][T18208] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1972.751409][T18208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1972.766199][T18208] usb 3-1: config 0 descriptor??
[ 1972.968941][T18208] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1972.977453][ T5718] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1973.018378][T28677] Bluetooth: hci3: command 0x0406 tx timeout
[ 1973.024466][T17084] Bluetooth: hci2: command 0x0406 tx timeout
[ 1973.099175][ T5699] usb 1-1: USB disconnect, device number 77
[ 1973.107656][ T5699] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1973.126484][T28677] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1973.136652][T17084] Bluetooth: hci5: command 0x0406 tx timeout
[ 1973.302092][ T5718] usb 4-1: device descriptor read/8, error -71
[ 1973.523647][T27176] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1973.531728][T18208] gp8psk: usb out operation failed.
[ 1973.536944][T18208] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1973.547385][T18208] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1973.583107][T18208] usb 3-1: USB disconnect, device number 10
[ 1974.180411][T19400] net_ratelimit: 26 callbacks suppressed
[ 1974.180435][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.287169][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.336084][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1974.456448][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.564977][T29287] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[ 1974.574727][   T29] audit: type=1326 audit(1782547250.096:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1974.611575][T29287] audit: out of memory in audit_log_start
[ 1974.626942][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.636654][   T29] audit: type=1326 audit(1782547250.096:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1974.689051][T18734] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[ 1974.730183][   T29] audit: type=1326 audit(1782547250.096:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1974.765605][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.797930][T28677] Bluetooth: hci1: command 0x0406 tx timeout
[ 1974.828746][   T29] audit: type=1326 audit(1782547250.096:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9375d68e code=0x7ffc0000
[ 1974.865472][   T29] audit: type=1326 audit(1782547250.096:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c9375d68e code=0x7ffc0000
[ 1974.880698][T27176] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1974.894984][   T29] audit: type=1326 audit(1782547250.196:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9379ce59 code=0x7ffc0000
[ 1974.933984][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1974.936772][T27176] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1974.964129][T27176] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1974.964842][T18734] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1975.023546][T18734] usb 5-1: not running at top speed; connect to a high speed hub
[ 1975.039561][   T29] audit: type=1326 audit(1782547250.216:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4c9375d68e code=0x7ffc0000
[ 1975.050736][T18734] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1975.063809][   T29] audit: type=1326 audit(1782547250.216:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29286 comm="syz.2.6220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c9375d68e code=0x7ffc0000
[ 1975.095785][T28677] Bluetooth: hci3: command 0x0406 tx timeout
[ 1975.128596][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1975.136192][T27176] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1975.145291][T27176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1975.154162][T18734] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1975.170042][T28677] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1975.176354][T28677] Bluetooth: hci5: command 0x0406 tx timeout
[ 1975.188561][T18734] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40
[ 1975.197929][T18734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1975.207769][T18734] usb 5-1: Product: syz
[ 1975.213770][T18734] usb 5-1: SerialNumber: syz
[ 1975.247204][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1975.284877][T29304] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1975.339855][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1975.452391][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1975.460420][T27176] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1975.468328][T27176] usb 6-1: invalid MIDI out EP 0
[ 1975.510491][T29307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1975.519396][T29307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1975.649313][T29253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1975.671947][T18208] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1975.704877][T28471] udevd[28471]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1975.741241][T27176] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1975.755459][T29253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1976.056433][T11630] usb 6-1: USB disconnect, device number 106
[ 1976.068607][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.075021][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.135485][T18734] usbhid 5-1:1.0: can't add hid device: -71
[ 1976.167573][T18734] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1976.229390][T18734] usb 5-1: USB disconnect, device number 111
[ 1976.339929][T18208] usb 4-1: Using ep0 maxpacket: 16
[ 1976.722041][T18734] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1976.774009][T27176] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1976.986596][T18734] usb 5-1: Using ep0 maxpacket: 32
[ 1976.995202][T18208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1977.006101][T18208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1977.026228][T18208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1977.039404][T18208] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1977.040405][T18734] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1977.056509][T18208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1977.077660][T18734] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[ 1977.094036][T18734] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[ 1977.117053][ T5718] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1977.125061][T18734] usb 5-1: config 14 has no interface number 0
[ 1977.133656][T18208] usb 4-1: config 0 descriptor??
[ 1977.153778][T18734] usb 5-1: config 14 has no interface number 1
[ 1977.171402][T18734] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1977.199444][T18734] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1977.255954][T18734] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1977.267918][T18734] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1977.281449][T17084] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1977.326808][T18734] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1977.356997][T18734] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1977.390114][T18734] usb 5-1: config 14 interface 57 has no altsetting 0
[ 1977.397895][T18734] usb 5-1: config 14 interface 228 has no altsetting 0
[ 1977.407660][T18734] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1977.417142][T18734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1977.437562][T18734] usb 5-1: Product: syz
[ 1977.446153][T18734] usb 5-1: Manufacturer: syz
[ 1977.455573][T27176] usb 6-1: Using ep0 maxpacket: 32
[ 1977.457585][T18734] usb 5-1: SerialNumber: syz
[ 1977.678176][T27176] usb 6-1: no configurations
[ 1977.682857][T27176] usb 6-1: can't read configurations, error -22
[ 1977.789416][ T5718] usb 3-1: Using ep0 maxpacket: 32
[ 1977.915124][T27176] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1977.921192][T18734] legousbtower 5-1:14.57: interrupt endpoints not found
[ 1978.430263][T18734] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 2048
[ 1978.459294][ T5718] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[ 1978.467467][ T5718] usb 3-1: config 2 has no interface number 0
[ 1978.469757][T18734] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1978.473602][ T5718] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1978.516001][ T5718] usb 3-1: config 2 interface 88 has no altsetting 0
[ 1978.586581][T27176] usb 6-1: Using ep0 maxpacket: 32
[ 1978.794305][T27176] usb 6-1: no configurations
[ 1978.799354][T27176] usb 6-1: can't read configurations, error -22
[ 1978.806271][T27176] usb usb6-port1: attempt power cycle
[ 1978.902072][ T5699] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1979.227550][T18208] usbhid 4-1:0.0: can't add hid device: -71
[ 1979.233606][T18208] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1979.245138][T18208] usb 4-1: USB disconnect, device number 48
[ 1979.255160][T27176] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1979.338560][ T5718] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1979.347853][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1979.355903][ T5718] usb 3-1: Product: syz
[ 1979.360105][ T5718] usb 3-1: Manufacturer: syz
[ 1979.364739][ T5718] usb 3-1: SerialNumber: syz
[ 1979.369364][T19400] net_ratelimit: 32 callbacks suppressed
[ 1979.369386][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1979.449979][T29339] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1979.458955][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1979.564022][T27176] usb 6-1: device descriptor read/8, error -71
[ 1979.570559][ T5699] usb 1-1: Using ep0 maxpacket: 16
[ 1979.576513][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1979.683298][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1979.764077][T29339] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1979.794704][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1979.903899][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1980.011095][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1980.125060][T27176] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1980.136040][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1980.236804][ T5699] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 1980.244977][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1980.255095][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1980.266576][T11187] bond5: (slave erspan0): failed to get link speed/duplex
[ 1980.343873][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1980.459379][T18734] usb 5-1: USB disconnect, device number 112
[ 1980.465572][    C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[ 1980.487334][T18734] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1980.861625][   T29] kauditd_printk_skb: 4 callbacks suppressed
[ 1980.861656][   T29] audit: type=1326 audit(1782547256.426:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1980.907170][ T5699] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89
[ 1980.916296][ T5699] usb 1-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3
[ 1980.924500][ T5699] usb 1-1: Manufacturer: syz
[ 1980.929126][ T5699] usb 1-1: SerialNumber: syz
[ 1980.935322][   T29] audit: type=1326 audit(1782547256.426:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1980.959709][   T29] audit: type=1326 audit(1782547256.426:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1980.984065][   T29] audit: type=1326 audit(1782547256.426:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.021985][   T29] audit: type=1326 audit(1782547256.426:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.023693][ T5699] usb 1-1: config 0 descriptor??
[ 1981.053319][   T29] audit: type=1326 audit(1782547256.426:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.078057][   T29] audit: type=1326 audit(1782547256.426:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.102468][   T29] audit: type=1326 audit(1782547256.426:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.139278][   T29] audit: type=1326 audit(1782547256.426:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.163625][   T29] audit: type=1326 audit(1782547256.426:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29402 comm="syz.4.6235" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b4b9ce59 code=0x7ffc0000
[ 1981.248967][T27176] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1981.260794][T27176] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1981.274782][ T5699] usb 1-1: 0:2 : does not exist
[ 1981.279942][T27176] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1981.291204][T27176] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1981.300270][T27176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1981.357264][T29391] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1981.377741][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6236'.
[ 1981.481029][T29411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1981.491206][T29411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1981.528040][T29410] kvm: kvm [29409]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1981.694934][T29391] netlink: 'syz.5.6231': attribute type 1 has an invalid length.
[ 1981.721026][T29391] bond6: entered promiscuous mode
[ 1981.726181][T29391] bond6: entered allmulticast mode
[ 1981.731731][T29391] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1981.748251][T29391] erspan1: entered allmulticast mode
[ 1981.758122][T29391] bond6: (slave erspan1): making interface the new active one
[ 1981.765642][T29391] erspan1: entered promiscuous mode
[ 1981.772745][T29391] 
[ 1981.775120][T29391] ============================================
[ 1981.781296][T29391] WARNING: possible recursive locking detected
[ 1981.787490][T29391] syzkaller #0 Tainted: G             L     
[ 1981.793504][T29391] --------------------------------------------
[ 1981.799695][T29391] syz.5.6231/29391 is trying to acquire lock:
[ 1981.805785][T29391] ffff8880586b9558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1981.815675][T29391] 
[ 1981.815675][T29391] but task is already holding lock:
[ 1981.822128][T29404] rfkill: input handler enabled
[ 1981.823068][T29391] ffff8880349ee558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1981.837792][T29391] 
[ 1981.837792][T29391] other info that might help us debug this:
[ 1981.845886][T29391]  Possible unsafe locking scenario:
[ 1981.845886][T29391] 
[ 1981.853369][T29391]        CPU0
[ 1981.856693][T29391]        ----
[ 1981.860001][T29391]   lock(&qdisc_xmit_lock_key#4);
[ 1981.865087][T29391]   lock(&qdisc_xmit_lock_key#4);
[ 1981.870161][T29391] 
[ 1981.870161][T29391]  *** DEADLOCK ***
[ 1981.870161][T29391] 
[ 1981.878327][T29391]  May be due to missing lock nesting notation
[ 1981.878327][T29391] 
[ 1981.886673][T29391] 9 locks held by syz.5.6231/29391:
[ 1981.891911][T29391]  #0: ffffffff9034b0c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1981.901469][T29391]  #1: ffffffff8fdeaec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[ 1981.910903][T29391]  #2: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0
[ 1981.920855][T29391]  #3: ffff88803016e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0
[ 1981.933682][T29391]  #4: ffff8880349ee558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1981.943985][T29391]  #5: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[ 1981.952903][T29391]  #6: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[ 1981.962682][T29391]  #7: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0
[ 1981.972644][T29391]  #8: ffff88807b67d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0
[ 1981.985305][T29391] 
[ 1981.985305][T29391] stack backtrace:
[ 1981.991229][T29391] CPU: 0 UID: 0 PID: 29391 Comm: syz.5.6231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1981.991256][T29391] Tainted: [L]=SOFTLOCKUP
[ 1981.991263][T29391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1981.991275][T29391] Call Trace:
[ 1981.991283][T29391]  <TASK>
[ 1981.991291][T29391]  dump_stack_lvl+0xe8/0x150
[ 1981.991316][T29391]  print_deadlock_bug+0x279/0x290
[ 1981.991340][T29391]  __lock_acquire+0x24df/0x2cf0
[ 1981.991361][T29391]  ? __pfx_netif_skb_features+0x10/0x10
[ 1981.991385][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.991403][T29391]  ? sch_direct_xmit+0x15f/0x4c0
[ 1981.991418][T29391]  lock_acquire+0x106/0x350
[ 1981.991435][T29391]  ? sch_direct_xmit+0x15f/0x4c0
[ 1981.991456][T29391]  _raw_spin_lock+0x2e/0x40
[ 1981.991480][T29391]  ? sch_direct_xmit+0x15f/0x4c0
[ 1981.991495][T29391]  sch_direct_xmit+0x15f/0x4c0
[ 1981.991514][T29391]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1981.991534][T29391]  __dev_queue_xmit+0x1754/0x37f0
[ 1981.991561][T29391]  ? __dev_queue_xmit+0x29b/0x37f0
[ 1981.991587][T29391]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1981.991608][T29391]  ? neigh_resolve_output+0x428/0x720
[ 1981.991643][T29391]  ? eth_header+0x11b/0x200
[ 1981.991666][T29391]  ? __asan_memcpy+0x40/0x70
[ 1981.991701][T29391]  ? ip_finish_output2+0x3de/0x10b0
[ 1981.991719][T29391]  ip_finish_output2+0xc4b/0x10b0
[ 1981.991736][T29391]  ? ip_skb_dst_mtu+0x811/0xa50
[ 1981.991751][T29391]  ? ip_finish_output2+0x3de/0x10b0
[ 1981.991770][T29391]  ? ip_finish_output+0x40b/0x530
[ 1981.991798][T29391]  ip_output+0x29f/0x450
[ 1981.991823][T29391]  ? ip_output+0x5a/0x450
[ 1981.991849][T29391]  iptunnel_xmit+0x626/0xd10
[ 1981.991872][T29391]  ip_tunnel_xmit+0x195b/0x2040
[ 1981.991917][T29391]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[ 1981.991946][T29391]  ? __pfx_gre_build_header+0x10/0x10
[ 1981.991971][T29391]  ? kfree+0x1c5/0x640
[ 1981.991993][T29391]  ? pskb_expand_head+0x469/0x13a0
[ 1981.992016][T29391]  __gre_xmit+0x19e/0x240
[ 1981.992040][T29391]  ? __pfx___gre_xmit+0x10/0x10
[ 1981.992067][T29391]  erspan_xmit+0xad5/0x1590
[ 1981.992095][T29391]  ? __pfx_erspan_xmit+0x10/0x10
[ 1981.992125][T29391]  dev_hard_start_xmit+0x2cd/0x830
[ 1981.992153][T29391]  sch_direct_xmit+0x257/0x4c0
[ 1981.992171][T29391]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1981.992188][T29391]  ? do_set_master+0x4e0/0x720
[ 1981.992210][T29391]  __dev_queue_xmit+0x1754/0x37f0
[ 1981.992236][T29391]  ? __dev_queue_xmit+0x29b/0x37f0
[ 1981.992261][T29391]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1981.992282][T29391]  ? rcu_is_watching+0x15/0xb0
[ 1981.992303][T29391]  ? kmem_cache_alloc_node_noprof+0x1e1/0x610
[ 1981.992329][T29391]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1981.992353][T29391]  ? kmem_cache_alloc_node_noprof+0x1e1/0x610
[ 1981.992380][T29391]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[ 1981.992406][T29391]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[ 1981.992436][T29391]  ? __alloc_skb+0x4cc/0x7a0
[ 1981.992454][T29391]  ? alb_send_lp_vid+0x14e/0x550
[ 1981.992474][T29391]  alb_send_lp_vid+0x348/0x550
[ 1981.992493][T29391]  ? __pfx_alb_send_lp_vid+0x10/0x10
[ 1981.992512][T29391]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[ 1981.992543][T29391]  alb_send_learning_packets+0x12c/0x300
[ 1981.992572][T29391]  ? __pfx_alb_send_learning_packets+0x10/0x10
[ 1981.992602][T29391]  ? alb_swap_mac_addr+0x230/0x340
[ 1981.992628][T29391]  alb_fasten_mac_swap+0x45d/0xf70
[ 1981.992645][T29391]  ? dev_addr_mod+0x1ba/0x350
[ 1981.992666][T29391]  bond_alb_handle_active_change+0xc85/0xf50
[ 1981.992686][T29391]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[ 1981.992702][T29391]  ? __hw_addr_add_ex+0x182/0x520
[ 1981.992731][T29391]  ? __local_bh_enable_ip+0xd0/0x130
[ 1981.992758][T29391]  bond_change_active_slave+0x1098/0x36d0
[ 1981.992785][T29391]  ? __pfx_do_sync_core+0x10/0x10
[ 1981.992814][T29391]  ? smp_call_function_many_cond+0x112a/0x14b0
[ 1981.992834][T29391]  ? __pfx_bond_change_active_slave+0x10/0x10
[ 1981.992860][T29391]  ? __pfx_do_sync_core+0x10/0x10
[ 1981.992887][T29391]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1981.992906][T29391]  ? bond_start_xmit+0x92/0x19e0
[ 1981.992926][T29391]  ? __pfx___text_poke+0x10/0x10
[ 1981.992958][T29391]  bond_select_active_slave+0x8a6/0xcd0
[ 1981.992987][T29391]  ? __pfx_bond_select_active_slave+0x10/0x10
[ 1981.993018][T29391]  bond_enslave+0x239c/0x3b10
[ 1981.993044][T29391]  ? sock_def_readable+0xae/0x550
[ 1981.993075][T29391]  ? __pfx_bond_enslave+0x10/0x10
[ 1981.993106][T29391]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1981.993128][T29391]  ? __dev_change_flags+0x64b/0x820
[ 1981.993148][T29391]  ? mutex_is_locked+0x17/0x50
[ 1981.993170][T29391]  do_set_master+0x563/0x720
[ 1981.993192][T29391]  rtnl_newlink_create+0x641/0xb00
[ 1981.993216][T29391]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1981.993237][T29391]  ? __pfx___mutex_lock+0x10/0x10
[ 1981.993258][T29391]  ? ns_capable+0x89/0xe0
[ 1981.993284][T29391]  rtnl_newlink+0x167f/0x1bd0
[ 1981.993307][T29391]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1981.993324][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.993344][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.993363][T29391]  ? _raw_spin_unlock+0x28/0x50
[ 1981.993385][T29391]  ? sched_balance_rq+0x6511/0x7020
[ 1981.993413][T29391]  ? unwind_next_frame+0x8f/0x2550
[ 1981.993438][T29391]  ? is_bpf_text_address+0x26/0x2b0
[ 1981.993462][T29391]  ? is_bpf_text_address+0x26/0x2b0
[ 1981.993482][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.993501][T29391]  ? kernel_text_address+0xa5/0xe0
[ 1981.993522][T29391]  ? __kernel_text_address+0xd/0x30
[ 1981.993542][T29391]  ? unwind_get_return_address+0x4d/0x90
[ 1981.993564][T29391]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1981.993592][T29391]  ? arch_stack_walk+0xfb/0x150
[ 1981.993618][T29391]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1981.993647][T29391]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1981.993663][T29391]  rtnetlink_rcv_msg+0x802/0xc00
[ 1981.993680][T29391]  ? netlink_sendmsg+0x5d4/0xb40
[ 1981.993702][T29391]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1981.993719][T29391]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1981.993736][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.993759][T29391]  netlink_rcv_skb+0x226/0x4a0
[ 1981.993779][T29391]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1981.993796][T29391]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1981.993821][T29391]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1981.993840][T29391]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1981.993862][T29391]  netlink_unicast+0x7bb/0x940
[ 1981.993884][T29391]  netlink_sendmsg+0x813/0xb40
[ 1981.993908][T29391]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1981.993930][T29391]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1981.993954][T29391]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1981.993974][T29391]  sock_sendmsg_nosec+0x13a/0x180
[ 1981.994001][T29391]  ____sys_sendmsg+0x54e/0x850
[ 1981.994023][T29391]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1981.994046][T29391]  ? import_iovec+0x73/0xa0
[ 1981.994066][T29391]  ___sys_sendmsg+0x2a5/0x360
[ 1981.994085][T29391]  ? __lock_acquire+0x683/0x2cf0
[ 1981.994104][T29391]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1981.994126][T29391]  ? futex_wait+0x2a2/0x390
[ 1981.994162][T29391]  ? __fget_files+0x2a/0x420
[ 1981.994178][T29391]  ? __fget_files+0x3a2/0x420
[ 1981.994198][T29391]  __x64_sys_sendmsg+0x1b1/0x290
[ 1981.994219][T29391]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1981.994245][T29391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1981.994263][T29391]  do_syscall_64+0x174/0x580
[ 1981.994280][T29391]  ? clear_bhb_loop+0x40/0x90
[ 1981.994300][T29391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1981.994318][T29391] RIP: 0033:0x7fb3d679ce59
[ 1981.994336][T29391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1981.994351][T29391] RSP: 002b:00007fb3d769f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1981.994370][T29391] RAX: ffffffffffffffda RBX: 00007fb3d6a15fa0 RCX: 00007fb3d679ce59
[ 1981.994384][T29391] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1981.994395][T29391] RBP: 00007fb3d6832e6f R08: 0000000000000000 R09: 0000000000000000
[ 1981.994406][T29391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1981.994417][T29391] R13: 00007fb3d6a16038 R14: 00007fb3d6a15fa0 R15: 00007fb3d6b3fa48
[ 1981.994436][T29391]  </TASK>
[ 1982.486440][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1982.693128][ T5718] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1982.761645][T29391] bond6: (slave erspan1): Enslaving as an active interface with an up link
[ 1982.771527][ T5718] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[ 1982.818096][ T5718] asix 3-1:2.88: probe with driver asix failed with error -71
[ 1982.847080][ T5718] usb 3-1: USB disconnect, device number 11
[ 1982.870188][T29391] syz.5.6231 (29391) used greatest stack depth: 17832 bytes left
[ 1982.886388][T27176] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[ 1982.897416][T27176] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input161
[ 1982.912092][T27176] usb 6-1: USB disconnect, device number 110
[ 1983.031161][ T5699] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1983.085114][ T5699] usb 1-1: USB disconnect, device number 78
[ 1983.116392][T28472] udevd[28472]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1984.396031][T19400] net_ratelimit: 26 callbacks suppressed
[ 1984.396071][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1984.515929][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1984.625931][T11185] bond5: (slave erspan0): failed to get link speed/duplex
[ 1984.735935][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1984.846127][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1984.956007][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1985.065964][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1985.175961][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1985.285933][T17475] bond5: (slave erspan0): failed to get link speed/duplex
[ 1985.395962][T19407] bond5: (slave erspan0): failed to get link speed/duplex
[ 1989.486528][T19401] net_ratelimit: 36 callbacks suppressed
[ 1989.486573][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1989.606001][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1989.725944][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1989.835937][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1989.945964][T19405] bond5: (slave erspan0): failed to get link speed/duplex
[ 1990.055997][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1990.176034][T19401] bond5: (slave erspan0): failed to get link speed/duplex
[ 1990.287461][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1990.396125][T19400] bond5: (slave erspan0): failed to get link speed/duplex
[ 1990.506005][T19400] bond5: (slave erspan0): failed to get link speed/duplex