last executing test programs:

3m53.174519691s ago: executing program 2 (id=273):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000100)=""/126, 0xfffffffffffffcd7}], 0x2, &(0x7f0000000180)=""/65, 0x41}, 0xd}, {{&(0x7f0000000300)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001e40)=""/66, 0x37}, {&(0x7f0000000380)=""/151, 0xaf}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/201, 0xc9}, {&(0x7f0000001800)=""/15, 0xf}, {&(0x7f0000001840)=""/103, 0x67}], 0x9}, 0x81}, {{&(0x7f0000001980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/129, 0x86}], 0x1}}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b80)=""/225, 0xe1}, {&(0x7f0000001c80)=""/77, 0x4d}], 0x2, &(0x7f0000001d40)=""/223, 0xdf}, 0x8}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/192, 0xc0}, {&(0x7f0000001f80)=""/126, 0x7e}, {&(0x7f0000002000)=""/236, 0xec}, {&(0x7f0000002100)=""/12, 0xc}], 0x4, &(0x7f0000002180)=""/33, 0x21}, 0x4}, {{0x0, 0x0, &(0x7f00000021c0), 0x0, &(0x7f0000002200)=""/112, 0x70}, 0xfffffff2}, {{&(0x7f0000002280)=@rc={0x1f, @none}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/241, 0xf1}, {&(0x7f0000002440)=""/176, 0xb0}, {&(0x7f0000002500)=""/103, 0x67}, {&(0x7f0000002580)=""/205, 0xcd}, {&(0x7f0000002680)=""/120, 0x78}, {&(0x7f0000002700)=""/81, 0x51}], 0x7}, 0x10001}], 0x7, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8=r2, @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r2], 0x18}}, 0x240000c5)

3m53.04856478s ago: executing program 2 (id=274):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000002280))
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000fef0000028000001294", 0x2e}], 0x1}, 0x0)

3m52.852543616s ago: executing program 2 (id=276):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]})
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000540)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3m52.692809s ago: executing program 2 (id=277):
mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000000)='usrquota') (async)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000000)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$sndseq(r0, &(0x7f0000000540)=[{0x1, 0x46, 0x7, 0x8, @time={0x321, 0x3}, {0x7, 0x7}, {0xec, 0xff}, @control={0x9, 0x6, 0xb2d}}], 0x1c)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xfffffffffffffffb, 0x6}) (async)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x1000, 0x476, 0x0, 0x7f, 0x3, 0xfffffffffffffffb, 0x6})
fchown(r0, 0xee01, 0x0)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
unshare(0x22020600)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1f, 0x2}, 0x10)
dup(r2) (async)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e22, 0x8, @loopback, 0x8}, 0xffffffffffffff46, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46) (async)
move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46)
setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000180)=@md5={0x1, "a3ce020eaf0a03bb5405f4e52e09dd1d"}, 0x11, 0x0) (async)
setxattr$security_evm(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000180)=@md5={0x1, "a3ce020eaf0a03bb5405f4e52e09dd1d"}, 0x11, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90)
getpid() (async)
r7 = getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
getpriority(0x1, r7) (async)
getpriority(0x1, r7)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

3m52.478864056s ago: executing program 2 (id=279):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {0x3f000000}, {}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa})

3m51.929128527s ago: executing program 2 (id=282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x184)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x7000000, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})

3m51.468246162s ago: executing program 32 (id=282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102)
writev(r0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x184)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x7000000, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})

22.990761918s ago: executing program 0 (id=2514):
pipe2(&(0x7f00000006c0)={<r0=>0xffffffffffffffff}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x62, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20024850}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8894)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x850)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000100)={0x11}, 0x8)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '.@%\\'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
pipe2(&(0x7f00000006c0), 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x62, &(0x7f0000000300)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20024850}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) (async)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8894) (async)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x850) (async)
socket$inet6(0xa, 0x3, 0x7) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000100)={0x11}, 0x8) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) (async)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '.@%\\'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (async)

22.622882923s ago: executing program 0 (id=2519):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x73682a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x10f0}], 0x0, 0x0, 0x0})

22.500149104s ago: executing program 0 (id=2521):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x69, &(0x7f0000000300)={{0x12, 0x1, 0x141, 0x5c, 0x8, 0xe4, 0x20, 0x458, 0x701e, 0x6a55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x20, 0x50, 0xf, [{{0x9, 0x4, 0xf0, 0xa, 0x0, 0xb0, 0xc9, 0x73, 0x0, [@generic={0x45, 0xe, "d6f9a6f216468cbcc44d8e2bd802b7bdeba5bcfb7134a05f3e5683d87d148da36d83d58ef9e2718320a17bfacdccf89a5070212c2dc24b877b24ae73e47c3762e89515"}]}}]}}]}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, &(0x7f00000002c0)=0x6)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x2, 0xfffffff8}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x1}})

20.174225595s ago: executing program 1 (id=2536):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600002008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

20.101483812s ago: executing program 1 (id=2537):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$usbip_server(r2, &(0x7f0000001600)=ANY=[@ANYBLOB="00000003000000020000000000000001000000060000a86f0000000000000000000000090000000600000000000000006ae5a036000000010000000000080000000500000006000000070000000afffffffd000000010000010000000008000001ff000000"], 0xc0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
r3 = socket$inet6(0x2d, 0x2, 0x0)
accept4$inet6(r3, 0x0, 0x0, 0x80800)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendto(0xffffffffffffffff, &(0x7f0000000200)="df4b2f80cf470a58cf1266fdd400222e61d849f5a4fc5d979cf093d933a4a3592687cd79005e844bce0b2f1b4dedf925566188ff25af42b4ab4e4e893c5e6c81b8054f594c76bed542999882eef18a44587498b8cd878adb3a5930a11dffc8253015da65e6c42b9ece5615745dfcd5219aa2933499f9503f915ad519fd78c286b89788eb992c6210a7b7f4795e670f657b2e2a67ab25244a8c2c6d007ab21686e02dafb044ba84ebcbc9221e1b94eaf0df29563a88ecbe1a9196dc83e2659e416b8edac8ac", 0xc5, 0x8001, &(0x7f0000000300)=@ll={0x11, 0x4, r6, 0x1, 0x9, 0x6, @broadcast}, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19.829836925s ago: executing program 1 (id=2538):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x6, {0x2, 0x4e24, @rand_addr=0x64010100}, 'wlan0\x00'})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x556, 0x240, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x20000004}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x2000, 0x21, 0x0, 0x2, 0x7})

19.706732405s ago: executing program 1 (id=2539):
mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
acct(&(0x7f00000000c0)='./file0\x00')
chroot(&(0x7f0000000180)='./file0\x00')
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x5, 0xd, 0x0, 0x1, [@generic="a9"]}, @typed={0x8, 0x136, 0x0, 0x0, @fd}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1138}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000300)="0147305318d4a3a67871c9fa17d4208fc52b144feffb2b44f3d0ce45d213b70a90e80ad7f2965acbbaa69f9eb3d01e8a2d587e910b23c90a20836222094d95dcc291ad359224050ca08040787843451f67242c64333c883ab53279a5e22d63c30670586c572ece15afe8d762093e8bb8a325f4758dc033451741b1fc0c975908e5adb93ea33879672ba2dfa667c9df5c1d010f4af6f87fad512c6743abaa9113e61eae3c3c6c472cb46107d1f7d173d2e9aeb28da0f0be7b785ed7dd500b48beaa086a23", 0xc4}, {&(0x7f0000002800)="9d60b0bc5959780e18374d9e48dbe54285df29099be21df5ba51b2073ab0162b372f85b0ae97e7de45ba49de823ad2a999d22a300839868dad0bd55dbbfd869397ec21b11a176f471976f50df03edf71df4d9399a1089086461784abe4692602e2c0ebb72e7c6076af71879e262c87698f004789cc962a72004e73f179bcfd867f5d94be2de4793d38b8474fd84780bbaa5c01e5d6e8a22cc095a93d7fdc5b6a4d23c7b8478f644138e1acc6ffb31d7dfbac9c9b299c360d12b8608b4857bf0c9d", 0xc1}, {&(0x7f0000002ac0)="df917bc80608f860fcc9c3c7052636635703d5c9dbf622e9e6a776362d73a4e7713d4697531b32ee9753b103e483b5348cdad9481ec974c606000000314f4a76978e62537deb5f4ad52089ebd1f6e059bf12b041ff9ee97f2b18d2786bbb0fae5db0ad94f3a027c2dfec5b40be271cb83ab0cfc462f2a04cceb1735b11ab6e0c823c055af59002a62c840b1fc5642c2e2d0865ec491665c8b6b8b5f6a8262473ca", 0xa1}, {&(0x7f0000000400)="ae592a52b1824137aa689a1241a0a5b9fb1f91c4cb4ebba52941c2d6d855c8877af6b045789e4ba37c32b8b7b65c87b36e1aec9775c59e2e092d9030dc5655527800fd3673819153d334fb8037a3abc2393848983ecda31857b26dd64d8c76c88ec4e8b372b638b36142f331ab3050645933f3d4b287b085e3df8d476bf956cda1587d22a9d5", 0x86}, {&(0x7f0000000500)="f8363e4d884bb65ba40b86d93cb761e253aaf98ea6c81a7d8ed757b6b2dad1c9db4c1b2be027e07b1978819bf6315c4fbfb59e3db0a0c5981213814810c08446cde63999939d693e3e7fe99b68acea26331c26fcfd", 0x55}, {&(0x7f0000000280)="f2eca9f92c7a089f5e2cf10c8a5b476fd121eb84b9950ee937a24c3b4ef8bac13a6b36f1966c21c92d20bf76c781ef6371ea", 0x32}, {&(0x7f0000002900)="a747444ae8db8ab9e4ead96344bd28fe8a43dfde743c7bba832c4a816609b1cfcc1ab82c1a9019bf9b136b123fe00c0385d274206f422de8edae5a5eadb77416ba0bbafe", 0x44}, {&(0x7f0000000600)="9e6c8a1f563a57e335c522c6a8dfd519f83607db74e297efae227fe016a4fb02a301c43742e1a6", 0x27}], 0x8, &(0x7f0000002a00)=[{0x10, 0x10c, 0x2}], 0x10}}], 0x2, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f", 0x69}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x611, 0x0, 0xd}]})
pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00')

19.625532244s ago: executing program 1 (id=2540):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff0000000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x40000000}, {0x0, 0x8}}}, 0xb8}}, 0x0)

19.425189088s ago: executing program 1 (id=2543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000100)={0x4c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff651}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x54)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r5], 0x9)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00', @ANYRESOCT=r2], 0x64}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r7, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r9, @ANYRES32=r9, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$IOMMU_IOAS_IOVA_RANGES(r9, 0x3b84, &(0x7f0000000100)={0x20, r11, 0x1, 0x0, &(0x7f0000000140)=[{}]})
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe803f00000000030360014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f0000000600)="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", 0xfb}], 0x2, 0x0, 0x0, 0x2663}, 0x4020)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14)
listen(r6, 0x1ff)
socket$inet_sctp(0x2, 0x5, 0x84)

19.424751885s ago: executing program 0 (id=2544):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0xd8, &(0x7f0000000800)={@ptr={0x77682a85, 0x0, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

19.261199317s ago: executing program 33 (id=2543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000100)={0x4c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff651}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x54)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r5], 0x9)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00', @ANYRESOCT=r2], 0x64}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r7, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r11=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r9, @ANYRES32=r9, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$IOMMU_IOAS_IOVA_RANGES(r9, 0x3b84, &(0x7f0000000100)={0x20, r11, 0x1, 0x0, &(0x7f0000000140)=[{}]})
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe803f00000000030360014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f0000000600)="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", 0xfb}], 0x2, 0x0, 0x0, 0x2663}, 0x4020)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14)
listen(r6, 0x1ff)
socket$inet_sctp(0x2, 0x5, 0x84)

19.257375065s ago: executing program 0 (id=2546):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x8}}}, 0xb8}}, 0x0)

19.137469891s ago: executing program 0 (id=2549):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x5, 0xf7, 0x0, 0x6}, 0xffffffffffffff55}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"])
r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003c80)={'ip6gre0\x00', 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f00000005c0)='9G', 0x2}, {&(0x7f0000000740)='X\x00\x00', 0x3}], 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x40000000000009, 0xfffffffdfffffffd, 0x800000000, 0x10000, 0x20000002, 0x4002004c2, 0xffe, 0x0, 0x0, 0x2, 0x1, 0x9f5, 0xd57b, 0x0, 0x5], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.53492777s ago: executing program 5 (id=2599):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x218200, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x400000, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x48e8d4545d160e34, <r2=>0xffffffffffffffff, 0x1})
syz_usb_control_io$hid(r1, &(0x7f0000000b40)={0x24, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x7}, @global=@item_4={0x3, 0x1, 0x4, "d75db683"}, @main=@item_012={0x1, 0x0, 0x8, 'l'}]}}, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000001c0))
close(r2)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
close_range(r3, r5, 0x0)
socket$rds(0x15, 0x5, 0x0)

4.121716011s ago: executing program 34 (id=2549):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x5, 0xf7, 0x0, 0x6}, 0xffffffffffffff55}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"])
r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000003c80)={'ip6gre0\x00', 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f00000005c0)='9G', 0x2}, {&(0x7f0000000740)='X\x00\x00', 0x3}], 0x2)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x40000000000009, 0xfffffffdfffffffd, 0x800000000, 0x10000, 0x20000002, 0x4002004c2, 0xffe, 0x0, 0x0, 0x2, 0x1, 0x9f5, 0xd57b, 0x0, 0x5], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.731089932s ago: executing program 5 (id=2608):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x8bec656d8a8ba5b, 0x0, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000f0073000040"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
inotify_init() (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x8bec656d8a8ba5b, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000f0073000040"]) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

3.588630733s ago: executing program 4 (id=2610):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000002280))
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x324}, 0x0)

3.385395424s ago: executing program 4 (id=2612):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x6, {0x2, 0x4e24, @rand_addr=0x64010100}, 'wlan0\x00'})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x556, 0x240, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x20000004}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x4000000, 0x21, 0x0, 0x2, 0x7})

3.384199946s ago: executing program 5 (id=2613):
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c0200002100010000000000010019e7ef108012e5ac54000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000", @ANYBLOB="29ddfbdbf38e2ef530108f815b64d920106bd6f64f13988cae56b720bc78c5c45604ef9b6c224708ec0d8adb2e9bfecbacf7ccec9e5b0da5faddba506e1c27e56009d4f86c4424ddb0d950e1bb0658ce950ef544c7dc460d11b95f766dc19e34beed183be9f0aadd0053fbc8bef752d13549adb2b7c90cc02360a003f74fafb20db92976c357068fc927afebe5a2285fb2e624b7446ec8fb1cab6f959bfca38a0254aee456ec29ce1f631b228864808ca93ffee0b46417c4f1ae782c78fd04ebf7e09a767e45a5d53cb8262cc9a86649630ed5fd921487e4c45a5b50ea020dd2b26ce79564c868411b624706820dab44", @ANYRES16=r0, @ANYBLOB="0000000000000000190211"], 0x27c}}, 0x0)
socket(0x1e, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x5, 0x0)
r2 = socket(0xa, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10)
sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

3.292036424s ago: executing program 4 (id=2614):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000004700ff0200000003000000000000e9ffff004f194e20"], 0x4b)

3.11920101s ago: executing program 4 (id=2615):
set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x6)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x1})
ioctl$TUNGETVNETBE(r0, 0x8927, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r1=>0x0, 0x0, 0x40, 0x6, 0x4, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x20, 0x2, 0x5}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setreuid(0x0, r3)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e21, 0x6, 0x4e20, 0xffff, 0xa, 0x20, 0x80, 0x32, r1, r3}, {0x7, 0x7fffffffffffffff, 0x4, 0x6, 0x2, 0x4, 0x514d, 0xe0a}, {0x1, 0x8000000000000001, 0xcb8e, 0x3}, 0x1, 0x6e6bb2, 0x1, 0x1, 0x3, 0x2}, {{@in=@local, 0x4d2, 0xff}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x0, 0xee, 0x10, 0x9254, 0x97}}, 0xe8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r5 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000002c0)={&(0x7f00000000c0)="43274b71da0c940e04d87221b882481e57dbca21d9dbfdb21c8bb8e04d4d495e23b7844f8407c29ae2a4415f08cd83e356d6390c9998cd8adef28734a72de072dd8f69707e20d6c50671dd1b74af310bebf36029f4042d63f101b968db74", 0x5e, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000300)={r6})

2.881707099s ago: executing program 4 (id=2616):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {0xddffffff}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa})

2.790429981s ago: executing program 4 (id=2617):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
r2 = getpgrp(0x0)
syz_clone3(&(0x7f0000000440)={0x200006200, &(0x7f0000000080), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180), {0x9c}, &(0x7f0000000340)=""/239, 0xef, &(0x7f00000001c0)=""/4, &(0x7f0000000240)=[r2, 0x0], 0x2}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a001540010014", 0x23}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0)
ptrace$getregset(0x4204, r3, 0x4, &(0x7f0000000540)={&(0x7f0000000280)=""/18, 0x12})
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0x6, 0x3}]}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0)
munlockall()
syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[], 0x0)

2.435971111s ago: executing program 5 (id=2620):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0xfff7, 0x4e21, 0x2, 0x2}, {0x6, 0x6, 0xc6b9, 0x5, 0x6, 0x6, 0x8, 0xff}, {0x6b, 0xffffffffffff149d, 0x2, 0xab15}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x1, 0x406}}, 0xe8)
write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000006000ff0200000000000000000000000000014f194e20"], 0xfdef)

2.143946003s ago: executing program 5 (id=2621):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x60}]})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000e80)={0x281})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f000043b000/0x1000)=nil, 0x1000}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x5)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0xfffffffe, 0x13, 0x8, "ffffff7f87680000000000001000007fcb3678", 0x4, 0x200})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x3)
close_range(r0, r0, 0x2)
write$ppp(r0, &(0x7f0000000580)='Di', 0x2)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))

1.76784555s ago: executing program 5 (id=2623):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = socket$inet6(0xa, 0x3, 0x75)
syz_emit_vhci(&(0x7f0000003780)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c910"], 0x15)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffd}}, 0xe8)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0x7, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4})
chdir(&(0x7f0000000080)='./file1\x00')
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a80)="25733e6aab2332d8dad40353b8f07cdce09edb571cc8f8b893f8779e99233267af3bddd5ba1f3e9c4fcbddf8cc8fb26f3b34c180802aee9ba853f5963d73566b172af780d8f708e9caaa209d09642b43ad08e295fbc79aeb4630d650cffce4d9695783a6478c65233b711fd6f289905105c774e89a601f514618973fe4344ed2f798dc46b57993e1193438c035d3472ea7ebbacfce8f226004ea17baec851411b8b10b31684ba886cd2d7c242f6573034d3dde9b182ea2acf55ed3df629f85fa13038026a48214c9516924d8eeeaac4204ea7dffacbf85a167a1bd212303515ad8da1cbf529f08f57700523a67cb8f72f58aea26", 0xf4}, {&(0x7f0000000b80)="7f4be315ab0c23398825686bbb7b1db217c834620e365f00435c62cf41eb9770ebb0ba1395c84cb7375d5efe4195cddce011258328476bb85aa292ae4b10ce4957af17969d79c3cc8158c831ba51f391ef07e78b00ccce467b29819f4c98fc0127f9505056300ad3aeea7ef58501f299499fb7927ee5c351d1d2bb6f093e21b9f4e9e4953c10ed34bc2177fe5cf76f589461c1620d848e04a2205aba0c7e733739ef368a1cfcd93ee5846a7c6d988a3e77fb02b720690879f2c9213a11e3fb1afb17659ebb3f4ed583ce3470c61f52acb669ef607c7bbcda74e6a24f0dfa", 0xde}, {&(0x7f00000006c0)="8dc346dc6197a9fec50300f4d7bb8ea8da1a379e6e054c", 0x17}], 0x3}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14)
setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000880)={r6, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2c}}, 0xc)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x6b, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x4000900, 0x2c48, 0x6, 0x84, 0x6, 0x0, 0x0, 0x80, 0x9}}, 0x50)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a8808809040000010300000009055a0362ac4a"], 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x90, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x40, 0x5, 0x66}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x5, 0x7c, 0x9, 0x8}, 0x9c, &(0x7f0000000300)=ANY=[@ANYBLOB="050f9c00053f100a3bdc9eba5a1ca7da343d048ff9795fb79cdc7f3e0e6e7fdaf9b0469cffc643a0d5a5773f8054d1e5448a246fee4b4ee0d008f57bf702950949c805281410040b71b6b3276d4e2ef93fd10ab374f6ed7414100403ce7b4c98aec5b0075495f457ef962c24100a08e6000000000ff5cb0f0000008f1fff000000000000c000000f00ff003fff00000c100affc0070000000002ef"], 0xa, [{0xd3, &(0x7f0000000980)=@string={0xd3, 0x3, "cead6e19220b63524f800036ce19b3d1b5f4cd11bae9db721b34862f248cc1c149c32d367b9d735a4ee483a299a6c1223d184fa87279749108f20f4942dec6b0dee51bf4fd12c148d6a91db7c7d02b0c051281b380ee9f436a8bd26a14d12f98db3c5202f335bc7579cb3dbd85b3906c1f8d3f824a753395b7a90167789a17c903d945e38bb378bda9f1b769ecbfc99130744e591bbe09000000000000005135c8df0855a3c72f6fb27a98485d9bdd7003f0e3093b9aec25303dc033bef197c584bea2bac4f0c2226cee7041b3de0e6780"}}, {0xfffffffffffffd8b, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x445}}]})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x408, 0x40, 0xfe, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x4, 0x9, 0x8, 0x40, 0x3}, 0xa7, &(0x7f0000000080)={0x5, 0xf, 0xa7, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5c, "354503de4c00"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x5, 0x3, 0x5}, @generic={0x81, 0x10, 0x3, "1fcef68e110054f489bbf77199d92c03d1f289fdca8ef625624244e7fa9946fa69da1714fc463955e69f4df282ada2d1adbf06a6d3da40efa9766ad13ef9198adcdf59012c27587e2bfca1690e36974167bb5c3c4939a1257000dde200d30e8649c6aae28d9e4507c41834a5f5edb9ee4fbabbed63ea381968e10126756a"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x423}}]})

930.103101ms ago: executing program 3 (id=2624):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000004800000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020080003400000000514000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x200288c0)

786.022934ms ago: executing program 3 (id=2625):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0xfffc}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

616.734733ms ago: executing program 3 (id=2626):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xd8c0, 0xa, 0x0, 0xe}, {0x3, 0xff, 0x5, 0x3}, {0x100, 0x7, 0x2, 0x8}, {0xc6, 0x40, 0x3f, 0x2}, {0xc1f, 0x91, 0x1, 0x9}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0xc8a, 0x8009, 0x9, 0x5db, 0x8001, 0x6, 0x7, <r2=>0x0}, &(0x7f0000000200)=0x20) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={<r3=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x7, 0x6}, &(0x7f0000000640)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000680)={<r4=>0x0, 0x8001}, &(0x7f00000006c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={<r5=>0x0, 0x8}, &(0x7f0000000b00)=0x8) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000b40)={<r6=>0x0, 0x5}, &(0x7f0000000b80)=0xc) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000bc0)={<r7=>0x0, @in6={{0xa, 0x4e23, 0x8076, @remote, 0x800}}, [0x1, 0x7, 0x4, 0x30, 0x10, 0x5, 0x2, 0x8, 0x7, 0x10000, 0xb, 0x8000000000000001, 0x1, 0x0, 0x669]}, &(0x7f0000000cc0)=0x100) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000d00)={0xd83, 0x2, 0x200, 0x7fff, 0x6, 0x9, 0xb2d4, 0x4, <r8=>0x0}, &(0x7f0000000d40)=0x20) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000d80)={<r9=>0x0, 0x3, 0xe, 0x800, 0xf4, 0x3ff, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @local}}, 0x3, 0x0, 0x6, 0x3, 0x7}}, &(0x7f0000000e40)=0xb0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001700)={<r10=>0x0, 0x3}, &(0x7f0000001740)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001940)={<r11=>0x0, 0x10}, &(0x7f0000001980)=0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x3, @remote, 0xb8}, 0x1c, &(0x7f0000000180), 0x0, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x5c, 0x8000, 0x3, 0x9, r2}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x40000000}}], 0x70, 0x400c081}, {&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="0c54405cf9b368b5b8cea7645e4e61e74b96407a8c407415d4f03c4257ebfcb3a2708915009127b577955e4b3ff4ce3a765c33f0cab204443d", 0x39}, {&(0x7f0000000440)="67b3dbffa1b3fccb474c8b8b5d618226a33d578fdcf255f2017416334646a3d538959c400cacd85745bfdfb7f1c10246facbee4d7a245c94d10082321edbc1ef45aa0183a6fee4ae4a22f290c3e7ef359c4b72ef4db6dd728931a73c2930029e6fcbc5394866df9e42ef3d8baa9c61e59f7c1ca6e0574f0b4a572dc685e89e03587d196426ee52b741b4d40f1fa19e548b2e2fdd531324b7462de8a6bd1e4942a1fc8fb4072e40bd5067c6cd7eda4a468b511c0dd9836a7ed41c799dc864905866fa401ec888b16519d70c2fc2aa2342c4c793e7e909bdc72d79", 0xda}], 0x3, &(0x7f0000000700)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x5, 0x3, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x202, 0x0, 0x6, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x70, 0x8000}, {&(0x7f0000000780)=@in6={0xa, 0x4e20, 0xdcf4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2515}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000007c0)="fddba06d0c1e7eaf", 0x8}, {&(0x7f0000000800)="ff3f8c631faee1a5473ff6aae940114628717f840360eb65af9aa52d6a3d052447e2e54e88b4d8726da659ab89b5ddf957c9b560b99f7657be471c7b19fdd502347e3ad934f24f0890e3aef3e616549582492343eb4d5dff74a0d6ae61224ec704b0e4343028cde19311ca08d2e27b95af057d3b8d1009ead703a8a059bb53fff148338f99a159a2052b0ab9bd76c982662fb66178ab89417e25c7f595491a1b09effae085e0f27e730afe183d894802413e198976d65bd95536ded829b6b935959e9e54cfdc7cac27948a7d37a1f0b88f6368ff15c26118b994c3ef73312fd1bf952d2417fc65a542864e3a13f70440acd572fa", 0xf4}, {&(0x7f0000000900)="456a01156d68", 0x6}, {&(0x7f0000000940)="4dbd2740f70a81819e52bb68a0a157bbdcef75", 0x13}, {&(0x7f0000000980)="9e2e5b24b180db917d3a762b0fee4fc99a33cc8f38e71ca7c9afc0a8c884caa55bb9c9bcb2a403b77b63e2f5cd0eded3039d4511fe5e30ed0df4a4d2d3c50763d0a31cb59bf521cfbd12b3cb8cc43f7a01652eb45d271527efcda24ff770864c35a765fe8f9f244b8043fa405ee436cd2ed2728869c17765eb15a9148bf8562d8943acc2f23832f55e00ef4143fb45c2fe", 0x91}], 0x5, &(0x7f0000000e80)=[@sndrcv={0x30, 0x84, 0x1, {0xfffb, 0xd, 0xb, 0x3, 0x9, 0x8, 0x7f, 0x200, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x8de9, 0x206, 0x9, 0x35, 0x0, 0x3, 0x8, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x8, 0x8, 0x9, 0x9, 0x7fffffff, 0x1d, 0x1000, r7}}, @init={0x18, 0x84, 0x0, {0xde, 0x2, 0x3, 0x3ff}}, @init={0x18, 0x84, 0x0, {0xb, 0x8000, 0x0, 0x909b}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0xdde, 0x20a, 0x6, 0x7, r8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8, 0x4, 0x400, r9}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x150, 0x4}, {&(0x7f0000001000)=@in6={0xa, 0x4e20, 0x3, @local, 0x9}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001040)="7e4cc822b738ec8231eed9e188f5030e91a1098c4c63e577ad37bff02918d7e94ba168345a5b2e52498dc21136d1ecb96e5f1bfd0229c995ec1dbc35cbc8d54a604c0ece7918b6eea61ae1b10eecdb3b5ea87ce80137992b1fb7e2f6c48a54d1ddef18ae60620fa3202400efbe043588b909886c2389ef6a02cba6cdbf8148fd108053ee83bf96a4f947010510afcc385ff8f4ce8ec7145d52da743d295b1ede2cd22d662e48860bbef11c71fd68fdef88fb08c3099759698cd9ee66df360fb0915e5ecf8bd254599e2687c575f73efe078ffb0d91c5b2089eec986fa7e55982c2c43a0f0b5eec58dc4da788681a05", 0xef}, {&(0x7f0000001140)="6d12eb3a73ac2cc3dde5b6ae672b29259a69d038466510b213d0e1befe95fa8325f967891ada64d6895066e615d21624346e2ba97240fc4edf80e42e760136730d954dd83d3d289d5f463aebc4432ce350a7717263df37d140e6b59a1a4b8ade8c21201b96528492de5740b6f115ea0456483b76aa57e07d53482da12cb0d4ef61dbe7f860badcea2abf778471ae155bd900671ad22817413ef488a4b98bd76781a4c2110e89af717cc6244a905a7372bc5a9abe17924210d71e960fe030f7910ec2fa6a5f3a784a02b0929dc2bd4e33", 0xd0}, {&(0x7f0000001240)="0807883499b96672475c8fc91abc5e3339a224bec6f36185f3e3c549728e14fbc6357f49aade01199d0814cc1593fd60e306f8f21bfa7f5f2dc350e57af83d073a7b16ea0a0694d00781233b39075469279195e02587f28a33a09f77781069ec24bfe7deef90afbf4272c0e5cb79b90cfdfbdf9d7031cb3c1ef6d4fd7b25", 0x7e}, {&(0x7f00000012c0)="ca0e5b93888728fe6a06b435817c1fa06881723097ea713c8a9997530043590c9ec8405e74674c44c482b6f390a2ac20ed578e9f6e7c60058a78513c24bc36164aaa489efb6091643ee00d3058db2a30b0bf46d47609bd5dee1ad8e636fbbd79ffb5a391228ab20086ee03f05abd9133ea374924079ba8eae0be200f3f6f24090d805f783ac1b4c7", 0x88}, {&(0x7f0000001380)="d6a05fcb6e720a54db6779e7bb446d101d09401ec9dd9c6cc0cc0311512c42bd3d411cdb0f23885abde8075c377c34e6f97cc245e6efc4ea0f8cf7e75d1d4b4bee3d02d461a307f0d970e5cae0b7138199099327be8030bb67ebfceac931a82e7285a12e9f2d5ed3765f389519c434841fda8517f856d82c44f89ae542fb80a46a8e106ac734f7d139793e368f29932c4e9f51b566067834850078a86fd1851cbd4d68cd73e6029ecaaedb4d6217dba7ea61bb4c1e61e9a66e1f53abd707c0eb5fd271957453", 0xc6}], 0x5, &(0x7f0000001500)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x248c}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}], 0x68, 0x4081}, {&(0x7f0000001580)=@in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5d}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000015c0)="cfef1da1471cd491c1cc512d538d0de986f04da1aca0b57998dbdbf3a1669931db7e173d6873c6f5bc762ca521670fedbf1e94aa1a6b7f872fbc0adcead8a1a93fe32d2770812d3ef83dcccae23ef6afc970f0cd8e7a1bbd868067641f7609b27878d59d2d9149181d3a691ef148f327c358c7a892e1fa9da7964ae5de1e02d7cd4a45b7b365cd34a3087846fce79ebc788b", 0x92}, {&(0x7f0000001680)="49fd2c263a8d8d5ac5f22f7a6d1d", 0xe}], 0x2, &(0x7f0000001780)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x820f, 0xb6b0, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x4, 0x7, 0x6555, r10}}, @init={0x18, 0x84, 0x0, {0xe08f, 0x1, 0x1, 0x5}}], 0x58, 0x4}, {&(0x7f0000001800)=@in6={0xa, 0x4e22, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001840)="e6fb2a7de73eb30822279e7194809e377e1706aa664ffec3b3dac11c104bb8", 0x1f}, {&(0x7f0000001880)="908bec7a34f1bad4b051d2138ac6da622158e3dc577f1eabb5e4f3decf379f7cf7eeedcef773bd982afdca34ffd6c8cbc6f877b84e89b86255ddf23dbc83ce55d9baeb2e3c51670f86e2f4a71c81a6bb670f202b4253721e9f6c224f6eca22f9ee2d", 0x62}], 0x2, &(0x7f00000019c0)=[@authinfo={0x18, 0x84, 0x6, {0xad}}, @authinfo={0x18, 0x84, 0x6, {0xc2e2}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x0, 0x9, 0x6, r11}}], 0x50, 0x44010}], 0x6, 0x20004010) (async)
r12 = fcntl$dupfd(r0, 0x0, r0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, r13, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7189}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f0000001d00)={<r14=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r12, 0x40082102, &(0x7f0000001d80)=r14)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r12, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, r13, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x454, 0x7c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000)
r15 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000001ec0)={{0x2, 0x4e21, @loopback}, {0x6, @local}, 0x20, {0x2, 0x4e23, @local}, 'bridge_slave_0\x00'}) (async)
ioctl$KVM_X86_SETUP_MCE(r15, 0x4008ae9c, &(0x7f0000001f40)={0x3, 0x5, 0x2})
getsockopt$inet6_opts(r12, 0x29, 0x3b, &(0x7f0000001f80)=""/197, &(0x7f0000002080)=0xc5) (async)
socket$kcm(0x29, 0x3, 0x0)
recvmsg$unix(r12, &(0x7f00000036c0)={&(0x7f00000020c0), 0x6e, &(0x7f0000003580)=[{&(0x7f0000002140)=""/91, 0x5b}, {&(0x7f00000021c0)=""/67, 0x43}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/231, 0xe7}, {&(0x7f0000003340)=""/237, 0xed}, {&(0x7f0000003440)=""/16, 0x10}, {&(0x7f0000003480)=""/19, 0x13}, {&(0x7f00000034c0)=""/184, 0xb8}], 0x8, &(0x7f0000003600)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r18=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x120)
ioctl$AUTOFS_IOC_EXPIRE(r18, 0x810c9365, &(0x7f0000003700)={{0xffffffff, 0x4a83}, 0x100, './file0\x00'}) (async)
ioctl$COMEDI_DEVINFO(r16, 0x80b06401, &(0x7f0000003840)) (async)
ioctl$SIOCSIFHWADDR(r16, 0x8924, &(0x7f0000003900)={'bond0\x00', @remote})
mknodat(r17, &(0x7f0000003940)='./file0\x00', 0x10, 0x6)

509.608331ms ago: executing program 3 (id=2627):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1070, 0xd8, &(0x7f0000000800)={@ptr={0x70742a85, 0x48100000, 0x0, 0xc0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

342.874069ms ago: executing program 3 (id=2628):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f20c53c1d9e36394f3e71872a8295436f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="a001000000000000f9fffffffffffffffcffffffffffffff0200000000000000030000000000000002000000000000000400000008000000060000000000000005000000000000000000000000000000ff0000000000000003000000000000000000000000000000f7f60000570000000300000000c00000ff030000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="fdffffff03000000000000000500000000000000fcffffffffffffff29000000018000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="6c0000001900010000000000fbdbdf251d010900500012804c00f880140033000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000080005800400ce800000"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
setuid(r2) (async)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x71) (async)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x302842, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
fanotify_init(0xf00, 0x40000) (async)
fanotify_mark(r5, 0x48a, 0x5000000a, 0xffffffffffffffff, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async)
r8 = syz_open_dev$vim2m(0x0, 0x4005, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r9=>r7}, './file0\x00'})
sendmsg$rds(r9, &(0x7f00000006c0)={&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000340)=""/73, 0x49}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/59, 0x3b}], 0x1000000000000093, &(0x7f0000000640)=[@rdma_args={0x48, 0x114, 0x1, {{0xe, 0xa}, {&(0x7f00000004c0)=""/99, 0x63}, &(0x7f0000000600)=[{0x0}], 0x1, 0x1a, 0x9}}], 0x48, 0x80}, 0x44000)

121.414608ms ago: executing program 3 (id=2629):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0xb8000000}, {0x0, 0x8}}}, 0xb8}}, 0x0)

114.832164ms ago: executing program 6 (id=2604):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff0000000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0xfffffff0}, {0x0, 0x8}}}, 0xb8}}, 0x0)

0s ago: executing program 6 (id=2631):
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000001103000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

usb 4-1: Manufacturer: syz
[  259.872335][  T798] usb 4-1: SerialNumber: syz
[  259.879439][  T798] usb 4-1: config 0 descriptor??
[  259.887796][  T798] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  260.811125][ T5879] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  260.851980][  T798] gspca_ov534_9: reg_r err -32
[  260.858428][T10847] syzkaller1: entered promiscuous mode
[  260.864393][T10847] syzkaller1: entered allmulticast mode
[  260.979468][ T5879] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  260.993447][ T5879] usb 1-1: config 0 has no interface number 0
[  261.004705][ T5879] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  261.013925][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.022335][ T5879] usb 1-1: Product: syz
[  261.026584][ T5879] usb 1-1: Manufacturer: syz
[  261.031583][ T5879] usb 1-1: SerialNumber: syz
[  261.039533][ T5879] usb 1-1: config 0 descriptor??
[  261.104665][T10851] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.120702][  T798] gspca_ov534_9: Unknown sensor 0000
[  261.120798][  T798] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  261.152294][  T798] usb 4-1: USB disconnect, device number 61
[  261.510867][  T798] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  261.640650][  T798] usb 5-1: device descriptor read/64, error -71
[  261.655957][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.665257][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.763245][T10858] fuse: Bad value for 'rootmode'
[  261.777316][T10858] input: syz0 as /devices/virtual/input/input37
[  261.881856][  T798] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  262.052030][  T798] usb 5-1: device descriptor read/64, error -71
[  262.135234][ T5879] usb 1-1: Firmware version (0.0) predates our first public release.
[  262.147069][ T5879] usb 1-1: Please update to version 0.2 or newer
[  262.161828][  T798] usb usb5-port1: attempt power cycle
[  262.206307][ T5879] usb 1-1: USB disconnect, device number 68
[  262.290632][ T5912] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  262.414901][  T116] usbhid 2-1:0.0: can't add hid device: -71
[  262.421354][  T116] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  262.435087][  T116] usb 2-1: USB disconnect, device number 62
[  262.475338][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.486822][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.497265][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.510322][ T5912] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.519771][  T798] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  262.527505][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.538334][ T5912] usb 4-1: config 0 descriptor??
[  262.561266][  T798] usb 5-1: device descriptor read/8, error -71
[  262.770644][  T116] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  262.801249][  T798] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  262.843048][  T798] usb 5-1: device descriptor read/8, error -71
[  262.923518][  T116] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  262.932494][  T116] usb 2-1: config 0 has no interface number 1
[  262.938657][  T116] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  262.949540][  T116] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  262.962137][  T798] usb usb5-port1: unable to enumerate USB device
[  262.984482][  T116] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  263.001391][  T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  263.010484][  T116] usb 2-1: SerialNumber: syz
[  263.023923][  T116] usb 2-1: config 0 descriptor??
[  263.034805][  T116] uvcvideo 2-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  263.043031][  T116] uvcvideo 2-1:0.199: No valid video chain found.
[  263.151469][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.160240][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.171787][ T5912] usbhid 4-1:0.0: can't add hid device: -71
[  263.180386][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  263.191433][ T5912] usb 4-1: USB disconnect, device number 62
[  263.232373][ T5879] usb 2-1: USB disconnect, device number 63
[  263.340656][  T798] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  263.492613][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  263.504151][  T798] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  263.513452][  T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.521672][  T798] usb 1-1: Product: syz
[  263.525836][  T798] usb 1-1: Manufacturer: syz
[  263.530405][  T798] usb 1-1: SerialNumber: syz
[  263.538385][  T798] usb 1-1: config 0 descriptor??
[  263.840855][  T798] usb 1-1: USB disconnect, device number 69
[  264.138499][T10907] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  264.380718][  T116] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  264.572293][  T116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.600820][  T116] usb 4-1: config 0 interface 0 has no altsetting 0
[  264.625746][  T116] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[  264.644130][  T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.662012][  T116] usb 4-1: Product: syz
[  264.666428][  T116] usb 4-1: Manufacturer: syz
[  264.676373][  T116] usb 4-1: SerialNumber: syz
[  264.684555][  T116] usb 4-1: config 0 descriptor??
[  264.697942][  T116] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  264.712755][  T116] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.724528][  T116] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  264.734612][  T116] usb 4-1: media controller created
[  264.756702][  T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.824751][  T116] DVB: Unable to find symbol tda10046_attach()
[  264.834104][  T116] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  264.839791][T10937] syzkaller1: entered promiscuous mode
[  264.843335][  T116] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  264.851375][T10937] syzkaller1: entered allmulticast mode
[  264.861734][ T5841] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  265.030799][ T5841] usb 1-1: Using ep0 maxpacket: 16
[  265.038408][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.060699][ T5841] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  265.069822][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.088813][ T5841] usb 1-1: config 0 descriptor??
[  265.089617][T10943] netlink: 'syz.1.1854': attribute type 10 has an invalid length.
[  265.277563][T10949] netlink: 'syz.1.1857': attribute type 27 has an invalid length.
[  265.439723][T10959] program syz.1.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.541369][ T5841] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  265.603832][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'.
[  265.910670][ T5912] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  265.932791][ T5841] usb 1-1: USB disconnect, device number 70
[  266.071965][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  266.078864][ T5912] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  266.087132][ T5912] usb 2-1: config 0 has no interface number 0
[  266.093449][ T5912] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  266.103699][ T5912] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  266.113856][ T5912] usb 2-1: config 0 interface 126 has no altsetting 0
[  266.123421][ T5912] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  266.132519][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.140781][ T5912] usb 2-1: Product: syz
[  266.144955][ T5912] usb 2-1: Manufacturer: syz
[  266.149554][ T5912] usb 2-1: SerialNumber: syz
[  266.160345][ T5912] usb 2-1: config 0 descriptor??
[  266.167456][T10967] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  266.174868][T10967] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  266.384869][T10968] CIFS: VFS: Malformed UNC in devname
[  266.394419][ T5912] ir_usb 2-1:0.126: IR Dongle converter detected
[  266.639507][ T5912] usb 2-1: IRDA class descriptor not found, device not bound
[  266.686371][ T5912] usb 2-1: USB disconnect, device number 64
[  266.847355][T10985] netlink: 'syz.4.1870': attribute type 10 has an invalid length.
[  266.894450][T10988] binder_alloc: 10987: binder_alloc_buf size 12560 failed, no address space
[  266.928601][T10988] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  267.125793][  T116] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  267.163717][  T116] usb 4-1: USB disconnect, device number 63
[  267.485871][T11010] syzkaller1: entered promiscuous mode
[  267.491597][T11010] syzkaller1: entered allmulticast mode
[  267.580726][  T116] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  267.588407][ T5886] usb 1-1: new low-speed USB device number 71 using dummy_hcd
[  267.615697][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1881'.
[  267.642003][   T50] tipc: Subscription rejected, illegal request
[  267.740645][ T5886] usb 1-1: device descriptor read/64, error -71
[  267.760657][  T116] usb 4-1: Using ep0 maxpacket: 32
[  267.769180][  T116] usb 4-1: config 0 has an invalid interface number: 155 but max is 0
[  267.790077][  T116] usb 4-1: config 0 has no interface number 0
[  267.797618][  T116] usb 4-1: config 0 interface 155 altsetting 8 endpoint 0x5 has an invalid bInterval 30, changing to 7
[  267.809344][  T116] usb 4-1: config 0 interface 155 has no altsetting 0
[  267.818210][  T116] usb 4-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=28.6d
[  267.827715][  T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.841542][  T116] usb 4-1: config 0 descriptor??
[  267.958561][T11022] netlink: 'syz.4.1885': attribute type 10 has an invalid length.
[  267.982440][ T5886] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  268.026890][T11024] binder: BINDER_SET_CONTEXT_MGR already set
[  268.034185][T11024] binder: 11023:11024 ioctl 4018620d 200000000040 returned -16
[  268.044319][T11024] binder: 11023:11024 ioctl c0306201 2000000001c0 returned -14
[  268.064565][  T798] usb 4-1: USB disconnect, device number 64
[  268.131864][ T5886] usb 1-1: device descriptor read/64, error -71
[  268.240964][ T5886] usb usb1-port1: attempt power cycle
[  268.386782][T11044] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  268.580641][ T5886] usb 1-1: new low-speed USB device number 73 using dummy_hcd
[  268.601390][ T5886] usb 1-1: device descriptor read/8, error -71
[  268.629264][T11054] netlink: 'syz.1.1899': attribute type 10 has an invalid length.
[  268.753635][  T798] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  268.822704][T11064] binder: 11062:11064 ioctl c0306201 2000000001c0 returned -14
[  268.840682][ T5886] usb 1-1: new low-speed USB device number 74 using dummy_hcd
[  268.865628][T11067] netlink: 'syz.1.1904': attribute type 21 has an invalid length.
[  268.866272][T11068] netlink: 'syz.1.1904': attribute type 21 has an invalid length.
[  268.873870][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1904'.
[  268.892224][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1904'.
[  268.903888][ T5886] usb 1-1: device descriptor read/8, error -71
[  268.941089][  T798] usb 5-1: Using ep0 maxpacket: 32
[  268.955058][  T798] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  268.971986][  T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.980170][  T798] usb 5-1: Product: syz
[  268.984646][  T798] usb 5-1: Manufacturer: syz
[  268.989266][  T798] usb 5-1: SerialNumber: syz
[  268.996000][  T798] usb 5-1: config 0 descriptor??
[  269.004375][  T798] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  269.011355][ T5886] usb usb1-port1: unable to enumerate USB device
[  269.060812][ T5911] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  269.086807][T11072] pim6reg1: entered promiscuous mode
[  269.092238][T11072] pim6reg1: entered allmulticast mode
[  269.217040][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  269.225623][ T5911] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  269.237553][ T5911] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  269.247927][ T5911] usb 4-1: config 220 has no interface number 2
[  269.254412][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  269.268035][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0
[  269.275415][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0
[  269.282790][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0
[  269.292943][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  269.302473][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.311951][ T5911] usb 4-1: Product: syz
[  269.316139][ T5911] usb 4-1: Manufacturer: syz
[  269.321193][ T5911] usb 4-1: SerialNumber: syz
[  269.432405][T11076] 9p: Could not find request transport: xen
[  269.601901][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'.
[  269.662747][T11086] overlayfs: missing 'lowerdir'
[  269.671242][T11086] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  269.681606][T11086] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  269.688177][T11086] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.695104][T11086] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  269.702490][T11086] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.709246][T11086] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  269.716360][T11086] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  269.723459][T11086] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.729959][T11086] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  269.736797][T11086] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  269.743387][T11086] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  269.750072][T11086] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  269.756897][T11086] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  269.763618][T11086] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4)
[  269.771481][T11086] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  269.779308][T11086] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  269.785846][T11086] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4)
[  269.793790][T11086] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  269.801726][T11086] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  269.808257][T11086] comedi comedi3: 8255: I/O port conflict (0x1000,4)
[  269.815104][T11086] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  269.821673][T11086] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  269.828142][T11086] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  269.905074][  T798] gspca_ov534_9: reg_w failed -71
[  270.118696][T11094] netlink: 'syz.1.1914': attribute type 10 has an invalid length.
[  270.200657][  T798] gspca_ov534_9: Unknown sensor 0000
[  270.200752][  T798] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  270.218068][  T798] usb 5-1: USB disconnect, device number 54
[  270.783951][T11122] binder: 11121:11122 ioctl c0306201 2000000001c0 returned -14
[  270.880774][T11127] netlink: 'syz.0.1929': attribute type 10 has an invalid length.
[  270.910629][  T798] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  271.070651][  T798] usb 5-1: Using ep0 maxpacket: 16
[  271.077460][  T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.088140][  T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  271.099300][  T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  271.109844][  T798] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  271.119892][  T798] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.134018][  T798] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  271.143179][  T798] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  271.151248][  T798] usb 5-1: Manufacturer: syz
[  271.158609][  T798] usb 5-1: config 0 descriptor??
[  271.290649][ T5841] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  271.369407][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1924'.
[  271.384502][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.395397][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.462557][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  271.490582][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.500421][ T5841] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  271.530606][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.551796][ T5841] usb 1-1: config 0 descriptor??
[  271.798059][T11136] binder: 11131:11136 ioctl 4018620d 2000000000c0 returned -22
[  271.836193][ T5841] usbhid 1-1:0.0: can't add hid device: -71
[  271.849700][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  271.892528][ T5841] usb 1-1: USB disconnect, device number 75
[  271.952510][T11140] syzkaller1: entered promiscuous mode
[  271.961265][ T5911] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  271.968595][ T5911] uvcvideo 4-1:220.0: No valid video chain found.
[  271.975069][T11140] syzkaller1: entered allmulticast mode
[  271.983050][ T5911] usb 4-1: selecting invalid altsetting 0
[  272.005808][ T5911] usb 4-1: selecting invalid altsetting 0
[  272.013637][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  272.032541][ T5911] usb 4-1: USB disconnect, device number 65
[  272.254002][T11155] netlink: 'syz.0.1939': attribute type 2 has an invalid length.
[  272.578109][T11165] binder: 11164:11165 ioctl c0306201 2000000001c0 returned -14
[  272.673751][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'.
[  272.777309][T11172] netlink: 'syz.1.1947': attribute type 10 has an invalid length.
[  272.880666][ T5912] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  273.020653][ T5912] usb 1-1: device descriptor read/64, error -71
[  273.140848][ T5879] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  273.281759][ T5912] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  273.302939][ T5879] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.320576][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0
[  273.330629][ T5879] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  273.350423][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.381823][ T5879] usb 4-1: config 0 descriptor??
[  273.432282][ T5912] usb 1-1: device descriptor read/64, error -71
[  273.550630][  T798] rc_core: IR keymap rc-hauppauge not found
[  273.557158][ T5912] usb usb1-port1: attempt power cycle
[  273.562694][  T798] Registered IR keymap rc-empty
[  273.569078][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.590839][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.604103][ T5879] aquacomputer_d5next 0003:0C70:F014.001C: unknown main item tag 0x0
[  273.612601][ T5879] aquacomputer_d5next 0003:0C70:F014.001C: unknown main item tag 0x0
[  273.620816][ T5879] aquacomputer_d5next 0003:0C70:F014.001C: unknown main item tag 0x0
[  273.633096][  T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  273.647634][ T5879] aquacomputer_d5next 0003:0C70:F014.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0
[  273.671375][  T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39
[  273.695233][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.741147][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.771197][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.790674][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.810720][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.842030][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.870702][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.890819][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.900628][ T5912] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  273.910694][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.921453][ T5912] usb 1-1: device descriptor read/8, error -71
[  273.930893][  T798] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  273.952904][  T798] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  273.961232][  T798] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  273.990218][  T798] usb 5-1: USB disconnect, device number 55
[  274.160724][ T5912] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  274.202219][ T5912] usb 1-1: device descriptor read/8, error -71
[  274.331286][ T5912] usb usb1-port1: unable to enumerate USB device
[  274.588549][T11196] syzkaller1: entered promiscuous mode
[  274.599818][T11196] syzkaller1: entered allmulticast mode
[  274.920621][  T798] usb 4-1: reset high-speed USB device number 66 using dummy_hcd
[  275.070626][  T798] usb 4-1: device descriptor read/64, error -71
[  275.310691][  T798] usb 4-1: reset high-speed USB device number 66 using dummy_hcd
[  275.388462][T11207] fuse: blksize only supported for fuseblk
[  275.450950][  T798] usb 4-1: device descriptor read/64, error -71
[  275.684229][T11216] binder: 11215:11216 ioctl c0306201 2000000001c0 returned -14
[  275.701281][  T798] usb 4-1: reset high-speed USB device number 66 using dummy_hcd
[  275.731261][  T798] usb 4-1: device descriptor read/8, error -71
[  275.741325][   T53] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  275.759147][T11222] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  275.980658][ T5841] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  276.155075][T11236] netlink: 'syz.1.1970': attribute type 10 has an invalid length.
[  276.162775][ T5841] usb 1-1: Using ep0 maxpacket: 16
[  276.170121][ T5841] usb 1-1: config 1 has an invalid interface number: 4 but max is 0
[  276.210652][ T5841] usb 1-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config
[  276.231411][ T5841] usb 1-1: config 1 has no interface number 0
[  276.239354][ T5841] usb 1-1: config 1 interface 4 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  276.256318][ T5841] usb 1-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  276.269727][ T5841] usb 1-1: config 1 interface 4 has no altsetting 0
[  276.279175][ T5841] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  276.302322][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.332483][ T5841] usb 1-1: Product: syz
[  276.336691][ T5841] usb 1-1: Manufacturer: syz
[  276.355421][ T5841] usb 1-1: SerialNumber: syz
[  276.371912][T11219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  276.566380][ T5841] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  276.624712][ T5912] usb 4-1: USB disconnect, device number 66
[  276.743442][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.754551][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.768799][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  276.781930][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  276.791027][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.804224][ T5841] usb 2-1: config 0 descriptor??
[  276.870998][ T5911] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  277.032547][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.044772][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  277.053783][ T5911] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 189, using maximum allowed: 30
[  277.064809][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 189
[  277.081876][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=4845, bcdDevice=d7.34
[  277.112627][   T53] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  277.139296][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.160707][ T5911] usb 5-1: Product: syz
[  277.164900][ T5911] usb 5-1: Manufacturer: syz
[  277.169500][ T5911] usb 5-1: SerialNumber: syz
[  277.217533][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.236838][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.244390][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.251857][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.259260][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.266739][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.274623][ T5841] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0
[  277.300860][ T5841] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  277.401040][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.412059][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.464635][ T5841] usb 5-1: USB disconnect, device number 56
[  277.709036][T11281] can0: slcan on ptm0.
[  277.954063][  T798] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  278.127202][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.148234][  T798] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  278.157866][  T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.169094][  T798] usb 4-1: config 0 descriptor??
[  278.370694][ T5841] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  278.522052][ T5841] usb 5-1: config 2 has an invalid interface number: 194 but max is 0
[  278.530337][ T5841] usb 5-1: config 2 has no interface number 0
[  278.536597][ T5841] usb 5-1: config 2 interface 194 altsetting 6 has an endpoint descriptor with address 0xC3, changing to 0x83
[  278.548402][ T5841] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 89, changing to 10
[  278.559756][ T5841] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid maxpacket 1080, setting to 1024
[  278.571035][ T5841] usb 5-1: config 2 interface 194 has no altsetting 0
[  278.579833][ T5841] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7
[  278.590585][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.598586][ T5841] usb 5-1: Product: syz
[  278.607012][ T5841] usb 5-1: Manufacturer: syz
[  278.611718][ T5841] usb 5-1: SerialNumber: syz
[  278.619291][T11299] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  278.709780][   T43] usb 1-1: USB disconnect, device number 80
[  278.724811][  T798] usb 2-1: reset high-speed USB device number 65 using dummy_hcd
[  278.838430][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.848654][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.868872][ T5841] cypress_m8 5-1:2.194: HID->COM RS232 Adapter converter detected
[  278.880856][ T5841] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  278.893412][ T5841] usb 5-1: USB disconnect, device number 57
[  278.904439][ T5841] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  278.915176][ T5841] cypress_m8 5-1:2.194: device disconnected
[  279.160681][   T43] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  279.312488][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.312510][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.312524][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.312548][   T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.312561][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.314229][   T43] usb 1-1: config 0 descriptor??
[  279.539635][T11316] syzkaller1: entered promiscuous mode
[  279.545472][T11316] syzkaller1: entered allmulticast mode
[  279.577356][ T5912] usb 2-1: USB disconnect, device number 65
[  279.584547][T11318] netlink: 'syz.1.1994': attribute type 10 has an invalid length.
[  279.598040][T11318] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[  279.750394][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'.
[  279.766663][T11326] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  279.780378][   T43] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd
[  279.797518][   T43] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  280.003058][   T53] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  280.075159][   T43] usb 1-1: USB disconnect, device number 81
[  280.499991][T11345] binder: 11344:11345 ioctl c0306201 2000000001c0 returned -14
[  280.557023][T11347] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  280.618496][T11349] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2006'.
[  280.680626][   T43] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  280.841585][   T43] usb 2-1: Using ep0 maxpacket: 32
[  280.853604][   T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  280.866389][   T43] usb 2-1: config 0 has no interface number 0
[  280.884572][   T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  280.894884][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.910632][   T43] usb 2-1: Product: syz
[  280.914907][   T43] usb 2-1: Manufacturer: syz
[  280.919570][   T43] usb 2-1: SerialNumber: syz
[  280.928933][   T43] usb 2-1: config 0 descriptor??
[  280.941310][   T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  281.132307][T11356] syzkaller1: entered promiscuous mode
[  281.138031][T11356] syzkaller1: entered allmulticast mode
[  281.145123][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  281.177491][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  281.252752][   T43] usb 4-1: USB disconnect, device number 67
[  281.455379][T11277] can0 (unregistered): slcan off ptm0.
[  281.545638][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.559182][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.625247][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  281.642605][   T43] usb 2-1: USB disconnect, device number 66
[  281.667013][   T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  281.730298][   T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  281.761389][   T43] quatech2 2-1:0.51: device disconnected
[  282.074280][T11388] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[11388]
[  282.101044][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.251083][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.298598][T11393] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  282.360833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.590879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.855582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.862032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.864202][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  282.872548][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  283.060641][ T5841] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  283.233688][ T5841] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  283.290683][ T5841] usb 4-1: config 0 has no interface number 0
[  283.296919][ T5841] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.330693][ T5841] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.342667][ T5841] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  283.394948][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.415193][ T5841] usb 4-1: config 0 descriptor??
[  283.710459][T11437] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2032'.
[  283.858905][ T5841] usbhid 4-1:0.2: can't add hid device: -71
[  283.873684][ T5841] usbhid 4-1:0.2: probe with driver usbhid failed with error -71
[  283.919938][ T5841] usb 4-1: USB disconnect, device number 68
[  283.970818][  T116] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  284.115308][T11461] syzkaller1: entered promiscuous mode
[  284.141055][  T116] usb 5-1: Using ep0 maxpacket: 16
[  284.141074][T11461] syzkaller1: entered allmulticast mode
[  284.166061][  T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.181933][  T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.202073][  T116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  284.225782][  T116] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  284.257647][  T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.285130][  T116] usb 5-1: config 0 descriptor??
[  284.561041][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.578045][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.586633][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.596831][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.604667][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.655797][T11480] netlink: 'syz.0.2039': attribute type 10 has an invalid length.
[  284.681833][T11480] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[  284.707216][  T116] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max
[  284.746398][  T116] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  284.780666][  T116] microsoft 0003:045E:07DA.001F: no inputs found
[  284.787117][  T116] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway
[  284.915315][ T5841] usb 5-1: USB disconnect, device number 58
[  285.174437][T11494] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  285.275024][T11475] chnl_net:caif_netlink_parms(): no params data found
[  285.361422][T11500] syzkaller1: entered promiscuous mode
[  285.366927][T11500] syzkaller1: entered allmulticast mode
[  285.519773][T11506] binder: 11505:11506 ioctl c0306201 2000000001c0 returned -14
[  285.591730][T11511] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  285.601023][T11511] overlayfs: missing 'lowerdir'
[  285.728105][   T53] Bluetooth: hci1: unexpected event for opcode 0x0809
[  285.757283][T11515] netlink: 'syz.4.2052': attribute type 10 has an invalid length.
[  285.782844][T11475] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.798467][T11475] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.813583][T11475] bridge_slave_0: entered allmulticast mode
[  285.834087][T11475] bridge_slave_0: entered promiscuous mode
[  285.859205][T11515] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[  285.872829][T11475] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.899997][T11475] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.930928][T11475] bridge_slave_1: entered allmulticast mode
[  285.939493][T11475] bridge_slave_1: entered promiscuous mode
[  285.991244][  T798] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  286.044121][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.059672][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.135182][T11475] team0: Port device team_slave_0 added
[  286.145474][T11475] team0: Port device team_slave_1 added
[  286.151661][  T798] usb 1-1: Using ep0 maxpacket: 16
[  286.161948][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  286.183120][  T798] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  286.198158][  T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.206490][  T798] usb 1-1: Product: syz
[  286.211058][  T798] usb 1-1: Manufacturer: syz
[  286.215697][  T798] usb 1-1: SerialNumber: syz
[  286.228880][  T798] usb 1-1: config 0 descriptor??
[  286.249437][  T798] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  286.259827][  T798] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  286.266824][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.273971][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.302116][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.352694][   T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.400845][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.407984][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.436947][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.461057][T11531] program syz.3.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.482098][   T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.608439][   T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.613053][T11535] binder: 11534:11535 ioctl c0306201 2000000001c0 returned -14
[  286.636110][T11475] hsr_slave_0: entered promiscuous mode
[  286.642798][   T53] Bluetooth: hci4: command tx timeout
[  286.651465][T11475] hsr_slave_1: entered promiscuous mode
[  286.658338][T11475] debugfs: 'hsr0' already exists in 'hsr'
[  286.664583][T11475] Cannot create hsr debugfs directory
[  286.694396][   T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.858671][  T798] em28xx 1-1:0.0: chip ID is em2710/2820
[  286.941792][   T50] batadv0: left allmulticast mode
[  286.946993][   T50] batadv0: left promiscuous mode
[  286.952877][   T50] bridge0: port 3(batadv0) entered disabled state
[  286.963398][   T50] bridge_slave_1: left allmulticast mode
[  286.969171][   T50] bridge_slave_1: left promiscuous mode
[  286.975183][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.986402][   T50] bridge_slave_0: left allmulticast mode
[  286.994134][   T50] bridge_slave_0: left promiscuous mode
[  286.999948][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.020696][  T116] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  287.121363][  T798] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  287.135790][  T798] em28xx 1-1:0.0: board has no eeprom
[  287.170781][  T116] usb 5-1: Using ep0 maxpacket: 16
[  287.184108][  T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.196160][  T116] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  287.207614][  T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.213691][  T798] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  287.235784][  T798] em28xx 1-1:0.0: dvb set to bulk mode.
[  287.238593][  T116] usb 5-1: config 0 descriptor??
[  287.260670][ T5912] em28xx 1-1:0.0: Binding DVB extension
[  287.276244][  T798] usb 1-1: USB disconnect, device number 82
[  287.336382][  T798] em28xx 1-1:0.0: Disconnecting em28xx
[  287.375378][ T5912] em28xx 1-1:0.0: Registering input extension
[  287.382881][  T798] em28xx 1-1:0.0: Closing input extension
[  287.403433][  T798] em28xx 1-1:0.0: Freeing device
[  287.610131][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.625366][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.637700][   T50] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface
[  287.650739][    T9] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  287.664571][   T50] bond0 (unregistering): Released all slaves
[  287.702949][  T116] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  287.790276][   T50] tipc: Disabling bearer <udp:s>
[  287.793132][    T9] usb 4-1: device descriptor read/64, error -71
[  287.797605][   T50] tipc: Left network mode
[  288.051290][    T9] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  288.111025][ T5912] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  288.127984][   T50] hsr_slave_0: left promiscuous mode
[  288.137351][   T50] hsr_slave_1: left promiscuous mode
[  288.147804][  T116] usb 5-1: USB disconnect, device number 59
[  288.158129][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.173277][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.185037][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.206926][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.220962][    T9] usb 4-1: device descriptor read/64, error -71
[  288.254122][   T50] veth1_macvtap: left promiscuous mode
[  288.259788][   T50] veth0_macvtap: left promiscuous mode
[  288.266192][   T50] veth1_vlan: left promiscuous mode
[  288.273573][   T50] veth0_vlan: left promiscuous mode
[  288.282742][ T5912] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  288.297318][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.322725][ T5912] usb 1-1: config 0 descriptor??
[  288.332772][    T9] usb usb4-port1: attempt power cycle
[  288.335119][ T5912] cp210x 1-1:0.0: cp210x converter detected
[  288.556451][ T5912] usb 1-1: cp210x converter now attached to ttyUSB0
[  288.690733][    T9] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  288.710743][   T53] Bluetooth: hci4: command tx timeout
[  288.731719][    T9] usb 4-1: device descriptor read/8, error -71
[  288.762685][  T116] usb 1-1: USB disconnect, device number 83
[  288.786258][  T116] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  288.799344][  T116] cp210x 1-1:0.0: device disconnected
[  288.964793][   T50] team0 (unregistering): Port device team_slave_1 removed
[  288.985242][    T9] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  289.023435][    T9] usb 4-1: device descriptor read/8, error -71
[  289.042787][   T50] team0 (unregistering): Port device team_slave_0 removed
[  289.046111][T11575] CIFS mount error: No usable UNC path provided in device string!
[  289.046111][T11575] 
[  289.060269][T11575] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  289.134363][    T9] usb usb4-port1: unable to enumerate USB device
[  289.523721][T11581] hsr0: entered promiscuous mode
[  289.528729][T11581] hsr0: entered allmulticast mode
[  289.533959][T11581] hsr_slave_0: entered allmulticast mode
[  289.539611][T11581] hsr_slave_1: entered allmulticast mode
[  289.551293][T11589] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.650119][T11475] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  289.676714][T11475] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  289.713975][T11475] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  289.742665][T11475] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  289.890443][T11475] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.913837][T11604] netlink: 'syz.4.2078': attribute type 10 has an invalid length.
[  289.950893][    T9] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  289.967859][T11475] 8021q: adding VLAN 0 to HW filter on device team0
[  290.022229][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.029460][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.081984][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.089221][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.113073][    T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  290.136551][    T9] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  290.160345][    T9] usb 1-1: config 150 has no interface number 0
[  290.182422][    T9] usb 1-1: config 150 interface 204 has no altsetting 0
[  290.182844][T11475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.211680][    T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  290.221667][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.235527][    T9] usb 1-1: Product: syz
[  290.243096][    T9] usb 1-1: Manufacturer: syz
[  290.249981][    T9] usb 1-1: SerialNumber: syz
[  290.470238][    T9] xr_serial 1-1:150.204: skipping garbage
[  290.488251][    T9] xr_serial 1-1:150.204: xr_serial converter detected
[  290.495419][T11624] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  290.565642][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.653329][T11475] veth0_vlan: entered promiscuous mode
[  290.684734][T11475] veth1_vlan: entered promiscuous mode
[  290.727154][T11475] veth0_macvtap: entered promiscuous mode
[  290.741657][T11475] veth1_macvtap: entered promiscuous mode
[  290.766058][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.781448][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.790929][   T53] Bluetooth: hci4: command tx timeout
[  290.804917][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.815661][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.831360][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.840226][   T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.936330][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.951414][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.998238][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.007241][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.283268][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.292294][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.301521][    T9] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  291.310261][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  291.332565][    T9] usb 1-1: USB disconnect, device number 84
[  291.342344][    T9] xr_serial 1-1:150.204: device disconnected
[  291.450656][ T5912] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  291.601414][   T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  291.611283][ T5912] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  291.621144][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.634651][ T5912] usb 2-1: config 0 descriptor??
[  291.643969][ T5912] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  291.713374][T11651] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  291.770668][   T43] usb 4-1: Using ep0 maxpacket: 8
[  291.783788][   T43] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  291.793027][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.801572][   T43] usb 4-1: Product: syz
[  291.806440][   T43] usb 4-1: Manufacturer: syz
[  291.811227][   T43] usb 4-1: SerialNumber: syz
[  292.084641][T11643] binder: 11642:11643 ioctl 40046205 0 returned -22
[  292.111915][    T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  292.199139][T11663] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  292.203233][ T5912] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  292.216867][  T984] IPVS: starting estimator thread 0...
[  292.222843][ T5912] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  292.251935][ T5879] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  292.264393][    T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  292.273853][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.282946][    T9] usb 1-1: Product: syz
[  292.287125][    T9] usb 1-1: Manufacturer: syz
[  292.293631][    T9] usb 1-1: SerialNumber: syz
[  292.300729][    T9] usb 1-1: config 0 descriptor??
[  292.312199][T11664] IPVS: using max 31 ests per chain, 74400 per kthread
[  292.313688][    T9] ch341 1-1:0.0: ch341-uart converter detected
[  292.410270][  T984] usb 2-1: USB disconnect, device number 68
[  292.418277][ T5879] usb 5-1: Using ep0 maxpacket: 8
[  292.429447][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.442996][ T5879] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[  292.453536][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.464542][ T5879] usb 5-1: config 0 descriptor??
[  292.474126][ T5879] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  292.513188][    T9] usb 1-1: failed to receive control message: -32
[  292.519843][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[  292.533206][    T9] usb 1-1: USB disconnect, device number 85
[  292.542475][    T9] ch341 1-1:0.0: device disconnected
[  292.673869][ T5841] usb 5-1: USB disconnect, device number 60
[  292.870728][   T53] Bluetooth: hci4: command tx timeout
[  293.279760][T11679] netlink: 'syz.4.2100': attribute type 10 has an invalid length.
[  293.390632][ T5879] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  293.456984][T11685] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  293.523026][ T5841] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  293.573202][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.584437][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.603111][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  293.618818][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  293.628451][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.641794][ T5879] usb 1-1: config 0 descriptor??
[  293.680623][ T5841] usb 2-1: Using ep0 maxpacket: 32
[  293.690099][ T5841] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  293.709951][ T5841] usb 2-1: config 0 has no interface number 0
[  293.726437][ T5841] usb 2-1: config 0 interface 12 has no altsetting 0
[  293.738152][ T5841] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  293.748418][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.770800][ T5841] usb 2-1: Product: syz
[  293.775004][ T5841] usb 2-1: Manufacturer: syz
[  293.779606][ T5841] usb 2-1: SerialNumber: syz
[  293.800407][ T5841] usb 2-1: config 0 descriptor??
[  294.135256][ T5879] usbhid 1-1:0.0: can't add hid device: -71
[  294.144437][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  294.155700][ T5879] usb 1-1: USB disconnect, device number 86
[  294.238428][   T43] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  294.259057][   T43] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  294.268286][   T43] mxuport 4-1:254.0: probe with driver mxuport failed with error -71
[  294.286909][   T43] usb 4-1: USB disconnect, device number 73
[  294.699876][T11713] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  295.029611][T11738] netlink: 'syz.0.2124': attribute type 10 has an invalid length.
[  295.447072][T11757] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  295.652363][   T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  295.776858][T11765] netlink: 'syz.3.2135': attribute type 10 has an invalid length.
[  295.789712][T11765] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link
[  295.810642][   T43] usb 5-1: Using ep0 maxpacket: 32
[  295.822490][   T43] usb 5-1: config 0 has no interfaces?
[  295.828007][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  295.850635][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.878813][   T43] usb 5-1: config 0 descriptor??
[  296.203080][ T5886] usb 5-1: USB disconnect, device number 61
[  297.075206][ T5841] f81534 2-1:0.12: f81534_get_register: reg: 1004 failed: -71
[  297.090725][ T5841] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  297.101622][ T5841] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  297.109356][ T5841] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  297.129652][ T5841] usb 2-1: USB disconnect, device number 69
[  297.135684][    T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  297.195376][T11787] dvmrp12: entered allmulticast mode
[  297.291455][    T9] usb 5-1: Using ep0 maxpacket: 16
[  297.299603][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.312133][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.322608][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  297.338245][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  297.367921][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.382214][    T9] usb 5-1: config 0 descriptor??
[  297.561797][T11807] netlink: 'syz.0.2151': attribute type 10 has an invalid length.
[  297.837917][    T9] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  297.865767][ T5886] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  297.873987][    T9] microsoft 0003:045E:07DA.0021: no inputs found
[  297.880369][    T9] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway
[  297.895024][T11825] syzkaller1: entered promiscuous mode
[  297.902344][T11823] binder: BINDER_SET_CONTEXT_MGR already set
[  297.908775][T11825] syzkaller1: entered allmulticast mode
[  297.915760][T11823] binder: 11822:11823 ioctl 4018620d 200000000040 returned -16
[  298.016322][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.025246][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.050601][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  298.068493][   T43] usb 5-1: USB disconnect, device number 62
[  298.075260][ T5886] usb 1-1: config 255 has an invalid interface number: 94 but max is 1
[  298.094764][ T5886] usb 1-1: config 255 has an invalid interface number: 8 but max is 1
[  298.137753][ T5886] usb 1-1: config 255 has no interface number 0
[  298.144971][ T5886] usb 1-1: config 255 has no interface number 1
[  298.175344][ T5886] usb 1-1: config 255 interface 8 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64
[  298.191694][ T5886] usb 1-1: config 255 interface 94 has no altsetting 0
[  298.198688][ T5886] usb 1-1: config 255 interface 8 has no altsetting 0
[  298.214391][ T5886] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=82.25
[  298.224471][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.232920][ T5886] usb 1-1: Product: syz
[  298.237169][ T5886] usb 1-1: Manufacturer: syz
[  298.242905][ T5886] usb 1-1: SerialNumber: syz
[  298.254483][ T5886] usb 1-1: Interface #94 referenced by multiple IADs
[  298.310629][  T984] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  298.335374][T11841] netlink: 'syz.4.2165': attribute type 10 has an invalid length.
[  298.434367][T11846] xt_l2tp: unknown flags: 51
[  298.472066][  T984] usb 2-1: Using ep0 maxpacket: 16
[  298.486274][  T984] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  298.488570][ T5886] usb 1-1: USB disconnect, device number 87
[  298.506202][  T984] usb 2-1: config 0 has no interface number 0
[  298.519783][  T984] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD
[  298.539756][  T984] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  298.553043][  T984] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  298.564482][  T984] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  298.574910][  T984] usb 2-1: Product: syz
[  298.579092][  T984] usb 2-1: SerialNumber: syz
[  298.588878][  T984] usb 2-1: config 0 descriptor??
[  298.599130][  T984] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  298.651488][ T5879] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  298.756877][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'.
[  298.766126][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'.
[  298.784761][   T53] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[  298.793204][   T53] Bluetooth: hci2: unexpected event for opcode 0x203e
[  298.822632][ T5879] usb 5-1: config 0 has an invalid interface number: 175 but max is 0
[  298.831526][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.843666][ T5879] usb 5-1: config 0 has no interface number 0
[  298.849788][ T5879] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  298.861974][ T5879] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  298.873668][ T5879] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  298.880192][ T5886] usb 2-1: USB disconnect, device number 70
[  298.884117][ T5879] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  298.906650][ T5879] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  298.918175][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.926817][ T5879] usb 5-1: Product: syz
[  298.931049][ T5879] usb 5-1: Manufacturer: syz
[  298.935739][ T5879] usb 5-1: SerialNumber: syz
[  298.943040][ T5879] usb 5-1: config 0 descriptor??
[  298.950229][ T5879] symbolserial 5-1:0.175: symbol converter detected
[  298.959504][ T5879] usb 5-1: symbol converter now attached to ttyUSB0
[  299.052104][ T5841] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  299.157711][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.168385][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.210630][ T5841] usb 4-1: Using ep0 maxpacket: 32
[  299.221740][ T5841] usb 4-1: config 0 has an invalid interface number: 9 but max is 0
[  299.245286][ T5841] usb 4-1: config 0 has no interface number 0
[  299.255007][ T5841] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  299.269952][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.278690][ T5841] usb 4-1: Product: syz
[  299.284168][ T5841] usb 4-1: Manufacturer: syz
[  299.289087][ T5841] usb 4-1: SerialNumber: syz
[  299.315982][ T5841] usb 4-1: config 0 descriptor??
[  299.337391][ T5841] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  299.453895][T11875] cgroup: Unknown subsys name 'cpuset'
[  299.567984][T11860] traps: syz.3.2173[11860] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002
[  299.590801][ T5841] gspca_topro: reg_w err -71
[  299.630619][ T5841] gspca_topro: Sensor soi763a
[  299.653089][ T5841] usb 4-1: USB disconnect, device number 74
[  299.840658][  T984] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  299.991376][  T984] usb 1-1: Using ep0 maxpacket: 8
[  300.002244][  T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.023533][  T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.040400][  T984] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  300.049618][  T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.069412][  T984] usb 1-1: config 0 descriptor??
[  300.305619][ T5841] usb 5-1: USB disconnect, device number 63
[  300.329415][ T5841] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  300.338084][ T5841] symbolserial 5-1:0.175: device disconnected
[  300.560804][ T5879] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  300.720680][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  300.728064][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.739099][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.748908][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.755579][ T5879] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  300.764687][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.776320][ T5879] usb 4-1: config 0 descriptor??
[  301.198773][ T5879] hid (null): report_id 32841 is invalid
[  301.204489][ T5841] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  301.353935][ T5841] usb 2-1: unable to get BOS descriptor or descriptor too short
[  301.373352][ T5841] usb 2-1: unable to read config index 0 descriptor/start: -71
[  301.392260][T11891] netlink: 'syz.3.2184': attribute type 4 has an invalid length.
[  301.397889][ T5841] usb 2-1: can't read configurations, error -71
[  301.425267][T11891] netlink: 'syz.3.2184': attribute type 4 has an invalid length.
[  301.499700][    T9] usb 4-1: USB disconnect, device number 75
[  301.772714][T11918] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  302.000663][ T5911] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  302.160609][ T5911] usb 4-1: Using ep0 maxpacket: 32
[  302.168998][ T5911] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  302.179092][ T5911] usb 4-1: config 0 has no interface number 0
[  302.181741][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  302.181760][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.181778][ T5911] usb 4-1: Product: syz
[  302.181794][ T5911] usb 4-1: Manufacturer: syz
[  302.181811][ T5911] usb 4-1: SerialNumber: syz
[  302.185010][ T5911] usb 4-1: config 0 descriptor??
[  302.188634][ T5911] smsc95xx v2.0.0
[  302.459038][ T5841] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  302.546568][T11944] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  302.626849][ T5841] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  302.637467][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  302.654004][ T5841] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  302.664482][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.691569][ T5841] usb 2-1: config 0 descriptor??
[  302.791800][  T984] usbhid 1-1:0.0: can't add hid device: -71
[  302.803411][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.815448][  T984] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  302.855485][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.860994][  T984] usb 1-1: USB disconnect, device number 88
[  302.873023][   T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  302.883700][   T53] Bluetooth: hci2: Injecting HCI hardware error event
[  302.893194][   T53] Bluetooth: hci2: hardware error 0x00
[  302.893280][ T5911] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  302.921174][ T5841] usb 2-1: string descriptor 0 read error: -71
[  302.949733][ T5911] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  303.007167][ T5911] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  303.028675][ T5841] usb 2-1: USB disconnect, device number 72
[  303.053285][ T5911] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  303.079496][ T5911] usb 4-1: USB disconnect, device number 76
[  303.533785][T11980] netlink: 'syz.3.2217': attribute type 10 has an invalid length.
[  303.794406][T11993] dlm: non-version read from control device 2
[  303.810792][ T5911] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  303.984810][ T5911] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  303.996454][ T5911] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  304.005765][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.028072][T12004] netlink: 'syz.4.2228': attribute type 4 has an invalid length.
[  304.038622][T12004] netlink: 'syz.4.2228': attribute type 4 has an invalid length.
[  304.120943][ T5841] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  304.221026][ T5911] usb 2-1: string descriptor 0 read error: -71
[  304.227684][ T5911] hub 2-1:32.0: bad descriptor, ignoring hub
[  304.234206][ T5911] hub 2-1:32.0: probe with driver hub failed with error -5
[  304.270731][ T5841] usb 1-1: Using ep0 maxpacket: 8
[  304.277971][ T5841] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  304.291476][ T5841] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.305182][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  304.315077][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  304.325081][ T5841] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  304.338165][ T5841] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  304.347486][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.440126][ T5911] usb 2-1: USB disconnect, device number 73
[  304.565668][ T5841] usb 1-1: GET_CAPABILITIES returned 0
[  304.571534][ T5841] usbtmc 1-1:16.0: can't read capabilities
[  304.750612][ T5911] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  304.847097][ T5841] usb 1-1: USB disconnect, device number 89
[  304.906091][ T5911] usb 2-1: config 1 has an invalid interface number: 170 but max is 0
[  304.924379][ T5911] usb 2-1: config 1 has no interface number 0
[  304.931254][ T5911] usb 2-1: New USB device found, idVendor=1cd8, idProduct=8108, bcdDevice=50.a8
[  304.940990][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.950335][T12008] syzkaller1: entered promiscuous mode
[  304.956582][   T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  304.959643][T12008] syzkaller1: entered allmulticast mode
[  305.427207][T12016] netlink: 'syz.0.2233': attribute type 10 has an invalid length.
[  305.680980][ T5911] usb 2-1: string descriptor 0 read error: -71
[  305.706307][ T5911] usb 2-1: USB disconnect, device number 74
[  305.776194][T12029] program syz.0.2239 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  306.215474][T12053] netlink: 'syz.0.2248': attribute type 10 has an invalid length.
[  306.320887][  T798] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  306.420625][  T984] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  306.479347][T12065] afs: Unknown parameter 'dynv/fuse'
[  306.501278][  T798] usb 5-1: Using ep0 maxpacket: 32
[  306.508420][  T798] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  306.517220][  T798] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  306.528631][  T798] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  306.540426][  T798] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  306.560076][  T798] usb 5-1: config 0 interface 0 has no altsetting 0
[  306.569706][  T798] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  306.578895][  T798] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  306.587594][  T798] usb 5-1: Product: syz
[  306.592084][  T798] usb 5-1: Manufacturer: syz
[  306.597148][  T798] usb 5-1: SerialNumber: syz
[  306.603060][  T984] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.615696][  T984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.625710][  T798] usb 5-1: config 0 descriptor??
[  306.639338][  T798] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  306.651845][  T984] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.662435][  T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.670447][  T984] usb 2-1: Product: syz
[  306.675597][  T798] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  306.690810][  T984] usb 2-1: Manufacturer: syz
[  306.698137][  T984] usb 2-1: SerialNumber: syz
[  306.849263][T12074] netlink: 'syz.0.2256': attribute type 21 has an invalid length.
[  306.853031][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.866285][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.874098][T12074] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2256'.
[  306.883593][T12045] overlayfs: missing 'lowerdir'
[  306.892425][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.904348][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.924494][ T5886] usb 5-1: USB disconnect, device number 64
[  306.935916][ T5886] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  307.133912][T12051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.151184][T12051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.170437][  T984] usb 2-1: 0:2 : does not exist
[  307.185084][T12089] netlink: 'syz.3.2262': attribute type 10 has an invalid length.
[  307.582688][ T5886] usb 2-1: USB disconnect, device number 75
[  307.640759][T12111] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  308.151987][ T5886] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  308.294240][T12143] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  308.302068][ T5886] usb 1-1: device descriptor read/64, error -71
[  308.469875][T12149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2288'.
[  308.486646][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'.
[  308.517178][T12153] syzkaller1: entered promiscuous mode
[  308.522962][T12153] syzkaller1: entered allmulticast mode
[  308.540863][ T5886] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  308.641571][T12155] syz.3.2292 (12155): drop_caches: 2
[  308.670631][ T5886] usb 1-1: device descriptor read/64, error -71
[  308.794292][ T5886] usb usb1-port1: attempt power cycle
[  308.973224][T12174] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2298'.
[  309.000111][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'.
[  309.013214][T12178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  309.080099][T12181] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  309.160816][ T5886] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  309.194517][ T5886] usb 1-1: device descriptor read/8, error -71
[  309.263847][   T53] Bluetooth: hci3: unexpected event for opcode 0x1005
[  309.450286][T12203] netlink: 'syz.3.2310': attribute type 1 has an invalid length.
[  309.451148][ T5886] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  309.458488][T12203] netlink: 'syz.3.2310': attribute type 4 has an invalid length.
[  309.475874][T12203] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2310'.
[  309.511166][ T5886] usb 1-1: device descriptor read/8, error -71
[  309.562173][ T5911] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  309.599539][T12209] netlink: 'syz.1.2312': attribute type 10 has an invalid length.
[  309.611161][T12207] Invalid logical block size (6)
[  309.621203][ T5886] usb usb1-port1: unable to enumerate USB device
[  309.634944][T12209] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  309.730608][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  309.737691][ T5911] usb 5-1: config 1 has an invalid interface number: 240 but max is 0
[  309.748463][ T5911] usb 5-1: config 1 has no interface number 0
[  309.754921][ T5911] usb 5-1: config 1 interface 240 has no altsetting 0
[  309.764702][ T5911] usb 5-1: New USB device found, idVendor=0458, idProduct=701e, bcdDevice=6a.55
[  309.774147][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.782254][ T5911] usb 5-1: Product: syz
[  309.786549][ T5911] usb 5-1: Manufacturer: syz
[  309.791591][ T5911] usb 5-1: SerialNumber: syz
[  310.016048][   T30] audit: type=1800 audit(1762417778.806:6): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2305" name="video#" dev="devtmpfs" ino=4600 res=0 errno=0
[  310.678938][T12254] netlink: 'syz.1.2328': attribute type 10 has an invalid length.
[  310.721166][ T5886] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  310.851271][ T5886] usb 4-1: device descriptor read/64, error -71
[  311.090669][ T5886] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  311.142726][T12274] syzkaller1: entered promiscuous mode
[  311.148329][T12274] syzkaller1: entered allmulticast mode
[  311.240664][ T5886] usb 4-1: device descriptor read/64, error -71
[  311.351108][ T5886] usb usb4-port1: attempt power cycle
[  311.362744][   T43] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  311.500795][ T5841] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  311.520657][   T43] usb 1-1: Using ep0 maxpacket: 16
[  311.527746][   T43] usb 1-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config
[  311.538488][   T43] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  311.551672][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  311.561474][   T43] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  311.570683][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.578753][   T43] usb 1-1: Product: syz
[  311.582975][   T43] usb 1-1: Manufacturer: syz
[  311.587593][   T43] usb 1-1: SerialNumber: syz
[  311.595675][   T43] usb 1-1: config 0 descriptor??
[  311.630691][ T5841] usb 2-1: device descriptor read/64, error -71
[  311.690610][ T5886] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  311.723392][ T5886] usb 4-1: device descriptor read/8, error -71
[  311.814493][   T43] usb 1-1: Can not set alternate setting to 1, error: -71
[  311.821802][   T43] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71
[  311.838766][   T43] usb 1-1: USB disconnect, device number 94
[  311.881189][ T5841] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  311.960617][ T5886] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  311.981310][ T5886] usb 4-1: device descriptor read/8, error -71
[  312.010622][ T5841] usb 2-1: device descriptor read/64, error -71
[  312.091394][ T5886] usb usb4-port1: unable to enumerate USB device
[  312.120902][ T5841] usb usb2-port1: attempt power cycle
[  312.281206][ T5911] dvb-usb: found a 'VideoWalker DVB-T USB' in cold state, will try to load a firmware
[  312.301804][ T5911] usb 5-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2
[  312.311541][ T5911] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw
[  312.339988][T12279] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  312.402958][T12283] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2340'.
[  312.406654][T12282] netlink: 'syz.4.2341': attribute type 10 has an invalid length.
[  312.480582][ T5841] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  312.511444][ T5841] usb 2-1: device descriptor read/8, error -71
[  312.760634][ T5841] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  312.781291][ T5841] usb 2-1: device descriptor read/8, error -71
[  312.891207][ T5841] usb usb2-port1: unable to enumerate USB device
[  313.120671][ T5841] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  313.270770][ T5841] usb 1-1: Using ep0 maxpacket: 32
[  313.277511][ T5841] usb 1-1: config 2 has an invalid interface number: 194 but max is 0
[  313.285803][ T5841] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  313.295969][ T5841] usb 1-1: config 2 has no interface number 0
[  313.302268][ T5841] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024
[  313.313910][ T5841] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  313.327049][ T5841] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  313.336168][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.347521][T12307] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  313.556467][ T5841] usb 1-1: string descriptor 0 read error: -71
[  313.573216][ T5841] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  313.658619][ T5841] usb 1-1: USB disconnect, device number 95
[  313.760015][T12318] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  313.802622][T12320] netlink: 'syz.3.2357': attribute type 10 has an invalid length.
[  314.630743][ T5841] usb 1-1: new low-speed USB device number 96 using dummy_hcd
[  314.680619][  T984] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  314.770674][ T5841] usb 1-1: device descriptor read/64, error -71
[  314.803622][T12345] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  314.846427][  T984] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.856423][  T984] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  314.872478][  T984] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  314.883765][  T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  314.891918][  T984] usb 2-1: SerialNumber: syz
[  315.010640][ T5841] usb 1-1: new low-speed USB device number 97 using dummy_hcd
[  315.108658][  T984] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  315.127158][  T984] usb 2-1: USB disconnect, device number 80
[  315.141607][ T5841] usb 1-1: device descriptor read/64, error -71
[  315.174753][T12353] netlink: 'syz.3.2370': attribute type 10 has an invalid length.
[  315.271510][ T5841] usb usb1-port1: attempt power cycle
[  315.297769][T12359] syzkaller1: entered promiscuous mode
[  315.303530][T12359] syzkaller1: entered allmulticast mode
[  315.618442][  T984] hid-generic 0005:0002:5508.0023: item fetching failed at offset 0/1
[  315.631588][  T984] hid-generic 0005:0002:5508.0023: probe with driver hid-generic failed with error -22
[  315.641672][ T5841] usb 1-1: new low-speed USB device number 98 using dummy_hcd
[  315.683037][ T5841] usb 1-1: device descriptor read/8, error -71
[  315.835451][T12379] tipc: Started in network mode
[  315.840442][T12379] tipc: Node identity ac1414aa, cluster identity 4711
[  315.848503][T12379] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  315.857133][T12379] tipc: Enabled bearer <udp:s>, priority 10
[  315.951264][ T5841] usb 1-1: new low-speed USB device number 99 using dummy_hcd
[  315.980722][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  315.990066][ T5841] usb 1-1: device descriptor read/8, error -71
[  316.120614][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.131042][ T5841] usb usb1-port1: unable to enumerate USB device
[  316.207329][T12396] netlink: 'syz.3.2387': attribute type 10 has an invalid length.
[  316.260595][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.400611][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.540610][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.567626][T12416] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  316.680618][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.820608][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  316.962043][   T43] tipc: Node number set to 2886997162
[  317.028529][T12398] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  317.036651][T12398] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  317.043364][T12398] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  317.049505][T12398] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  317.062244][T12398] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  317.100594][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  317.275605][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.353997][T12429] netlink: 'syz.3.2399': attribute type 10 has an invalid length.
[  317.370718][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  317.780304][T12453] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  317.871928][   T43] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  317.883886][T12455] syzkaller1: entered promiscuous mode
[  317.889582][T12455] syzkaller1: entered allmulticast mode
[  318.032307][   T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  318.040864][   T43] usb 2-1: config 0 has no interface number 0
[  318.046979][   T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.060678][   T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.070431][   T43] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  318.085310][   T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  318.094633][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.110753][   T43] usb 2-1: config 0 descriptor??
[  318.310906][   T53] Bluetooth: hci1: command 0x0c1a tx timeout
[  318.380629][ T5841] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  318.532279][ T5841] usb 4-1: Using ep0 maxpacket: 16
[  318.547313][ T5841] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  318.557711][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  318.565934][ T5841] usb 4-1: Product: syz
[  318.571793][ T5841] usb 4-1: Manufacturer: syz
[  318.576437][ T5841] usb 4-1: SerialNumber: syz
[  318.584756][ T5841] usb 4-1: config 0 descriptor??
[  318.728898][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.738648][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.742423][   T43] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0024/input/input44
[  318.792585][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.802238][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.831194][   T43] uclogic 0003:28BD:0042.0024: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1
[  318.857277][ T5841] usb 4-1: USB disconnect, device number 81
[  319.079772][T12489] binder: 12488:12489 ioctl c0306201 200000000240 returned -14
[  319.110786][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  319.117266][   T53] Bluetooth: hci3: command 0x0c1a tx timeout
[  319.726745][T12509] netlink: 'syz.0.2429': attribute type 10 has an invalid length.
[  319.752316][  T984] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  319.839521][T12515] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  319.910786][  T984] usb 4-1: Using ep0 maxpacket: 32
[  319.917522][  T984] usb 4-1: config 1 has an invalid interface number: 240 but max is 0
[  319.926425][  T984] usb 4-1: config 1 has no interface number 0
[  319.932584][  T984] usb 4-1: config 1 interface 240 has no altsetting 0
[  319.942756][  T984] usb 4-1: New USB device found, idVendor=0458, idProduct=701e, bcdDevice=6a.55
[  319.951831][  T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.959810][  T984] usb 4-1: Product: syz
[  319.964414][  T984] usb 4-1: Manufacturer: syz
[  319.969025][  T984] usb 4-1: SerialNumber: syz
[  320.120631][   T43] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[  320.187238][   T30] audit: type=1800 audit(1762417788.976:7): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2427" name="video#" dev="devtmpfs" ino=4600 res=0 errno=0
[  320.284082][   T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  320.295063][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  320.305912][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  320.319216][   T43] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  320.328532][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.340640][   T43] usb 1-1: config 0 descriptor??
[  320.346510][T12517] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  320.655782][ T5841] usb 2-1: USB disconnect, device number 81
[  320.761214][   T43] hid (null): unknown global tag 0xd
[  320.773613][   T43] wacom 0003:056A:00B3.0025: unknown global tag 0xd
[  320.784609][   T43] wacom 0003:056A:00B3.0025: item 0 2 1 13 parsing failed
[  320.793012][   T43] wacom 0003:056A:00B3.0025: parse failed
[  320.799007][   T43] wacom 0003:056A:00B3.0025: probe with driver wacom failed with error -22
[  320.803451][T12524] syzkaller1: entered promiscuous mode
[  320.813545][T12524] syzkaller1: entered allmulticast mode
[  320.964992][ T5841] usb 1-1: USB disconnect, device number 100
[  321.030882][    C1] net_ratelimit: 3 callbacks suppressed
[  321.030905][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  321.191497][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  321.383897][T12545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.603693][T12551] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  321.860852][T12561] netlink: 'syz.1.2452': attribute type 10 has an invalid length.
[  321.905647][T12563] syzkaller1: entered promiscuous mode
[  321.920974][T12563] syzkaller1: entered allmulticast mode
[  322.071459][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  322.421846][    T9] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  322.487695][  T984] dvb-usb: found a 'VideoWalker DVB-T USB' in cold state, will try to load a firmware
[  322.593453][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  322.618477][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.649696][    T9] usb 2-1: config 0 descriptor??
[  322.704157][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'.
[  322.731007][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'.
[  322.798260][T12592] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2467'.
[  322.811243][T12592] openvswitch: netlink: Flow actions attr not present in new flow.
[  322.822330][T12592] netlink: 'syz.3.2467': attribute type 46 has an invalid length.
[  322.827553][T12594] netlink: 'syz.4.2468': attribute type 10 has an invalid length.
[  322.995593][   T43] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  323.077015][    T9] apple 0003:05AC:029F.0026: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.1-1/input0
[  323.110717][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  323.160678][   T43] usb 1-1: Using ep0 maxpacket: 32
[  323.167049][   T43] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  323.175627][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.188184][   T43] usb 1-1: config 0 has no interface number 0
[  323.194380][   T43] usb 1-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.207560][   T43] usb 1-1: config 0 interface 120 has no altsetting 0
[  323.216451][   T43] usb 1-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76
[  323.225540][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.233557][   T43] usb 1-1: Product: syz
[  323.237720][   T43] usb 1-1: Manufacturer: syz
[  323.242362][   T43] usb 1-1: SerialNumber: syz
[  323.248859][   T43] usb 1-1: config 0 descriptor??
[  323.255846][   T43] rndis_host 1-1:0.120: skipping garbage
[  323.261520][   T43] usb 1-1: bad CDC descriptors
[  323.268549][   T43] cdc_acm 1-1:0.120: Zero length descriptor references
[  323.275578][   T53] Bluetooth: hci4: command 0x0c1a tx timeout
[  323.281704][   T43] cdc_acm 1-1:0.120: probe with driver cdc_acm failed with error -22
[  323.466403][   T43] usb 1-1: USB disconnect, device number 101
[  324.067639][T12605] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  324.087634][   T53] Bluetooth: hci1: unexpected event for opcode 0x1005
[  324.150765][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  324.277755][T12612] binder: BINDER_SET_CONTEXT_MGR already set
[  324.277785][T12612] binder: 12611:12612 ioctl 4018620d 200000000040 returned -16
[  324.380669][ T5886] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  324.546923][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  324.581223][ T5886] usb 1-1: config 1 has an invalid interface number: 240 but max is 0
[  324.589423][ T5886] usb 1-1: config 1 has no interface number 0
[  324.610652][ T5886] usb 1-1: config 1 interface 240 has no altsetting 0
[  324.621220][ T5886] usb 1-1: New USB device found, idVendor=0458, idProduct=701e, bcdDevice=6a.55
[  324.633960][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.637682][T12621] syzkaller1: entered promiscuous mode
[  324.657773][T12621] syzkaller1: entered allmulticast mode
[  324.876826][ T5886] usb 1-1: Product: syz
[  324.881242][ T5886] usb 1-1: Manufacturer: syz
[  324.890785][ T5886] usb 1-1: SerialNumber: syz
[  325.178968][ T5841] usb 2-1: USB disconnect, device number 82
[  325.190610][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  325.208040][   T30] audit: type=1800 audit(1762417793.956:8): pid=12608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2471" name="video#" dev="devtmpfs" ino=4600 res=0 errno=0
[  325.363380][   T30] audit: type=1326 audit(1762417794.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.3.2489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff071d8f6c9 code=0x0
[  325.446867][T12649] netlink: 'syz.4.2490': attribute type 10 has an invalid length.
[  325.617350][T12655] syzkaller1: entered promiscuous mode
[  325.623120][T12655] syzkaller1: entered allmulticast mode
[  325.779551][   T30] audit: type=1804 audit(1762417794.566:10): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2495" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=495 res=1 errno=0
[  325.806872][   T30] audit: type=1800 audit(1762417794.596:11): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2495" name="cgroup.controllers" dev="tmpfs" ino=495 res=0 errno=0
[  326.230822][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  326.916887][T12706] netlink: 'syz.4.2506': attribute type 10 has an invalid length.
[  327.119190][ T5886] dvb-usb: found a 'VideoWalker DVB-T USB' in cold state, will try to load a firmware
[  327.185280][T12720] syzkaller1: entered promiscuous mode
[  327.197112][T12720] syzkaller1: entered allmulticast mode
[  327.217433][T12723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2512'.
[  327.270855][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  327.807434][   T53] Bluetooth: hci4: unexpected event for opcode 0x1002
[  327.814596][   T53] Bluetooth: hci4: unexpected event for opcode 0x1002
[  327.861464][   T53] Bluetooth: hci1: unexpected event for opcode 0x1005
[  328.127706][T12770] binder: 12769:12770 ioctl c018620c 200000000580 returned -22
[  328.281182][T12778] netlink: 'syz.1.2525': attribute type 10 has an invalid length.
[  328.310695][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  328.840636][ T5841] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  328.990743][ T5841] usb 2-1: Using ep0 maxpacket: 16
[  328.997829][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  329.008116][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  329.018432][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  329.033455][ T5841] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  329.042986][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.051427][ T5841] usb 2-1: Product: syz
[  329.055772][ T5841] usb 2-1: Manufacturer: syz
[  329.060415][ T5841] usb 2-1: SerialNumber: syz
[  329.068658][ T5841] usb 2-1: config 0 descriptor??
[  329.079908][T12795] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  329.107632][ T5841] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  329.114508][ T5841] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  329.123781][ T5841] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  329.129674][ T5841] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  329.137341][ T5841] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[  329.304270][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.315246][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.331671][ T5912] usb 2-1: USB disconnect, device number 83
[  329.344691][ T5912] mcba_usb 2-1:0.0 can0: device disconnected
[  329.350828][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  330.390787][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  330.893037][T12871] binder: 12870:12871 ioctl c0306201 2000000001c0 returned -14
[  331.202376][T12880] netlink: 'syz.3.2548': attribute type 10 has an invalid length.
[  331.222318][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  331.237807][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  331.246910][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  331.257842][T12882] random: crng reseeded on system resumption
[  331.257917][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  331.276308][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.312125][T12886] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  331.400806][T12890] syzkaller1: entered promiscuous mode
[  331.406426][T12890] syzkaller1: entered allmulticast mode
[  331.440705][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  331.552278][T12883] chnl_net:caif_netlink_parms(): no params data found
[  331.652304][T12883] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.659591][T12883] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.666921][T12883] bridge_slave_0: entered allmulticast mode
[  331.676629][T12883] bridge_slave_0: entered promiscuous mode
[  331.694777][T12883] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.702341][T12883] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.709596][T12883] bridge_slave_1: entered allmulticast mode
[  331.717145][T12883] bridge_slave_1: entered promiscuous mode
[  331.765953][ T3521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.820110][T12883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.835150][T12883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.858402][ T3521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.919512][T12883] team0: Port device team_slave_0 added
[  331.930294][T12902] binder_alloc: 12901: binder_alloc_buf, no vma
[  331.933726][T12883] team0: Port device team_slave_1 added
[  331.964385][ T3521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.045175][T12883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.057694][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.086110][T12883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.109462][ T3521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.124512][T12883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.132306][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.158723][T12883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.206487][T12883] hsr_slave_0: entered promiscuous mode
[  332.213593][T12883] hsr_slave_1: entered promiscuous mode
[  332.384985][ T3521] bridge_slave_1: left allmulticast mode
[  332.392346][ T3521] bridge_slave_1: left promiscuous mode
[  332.398289][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.410342][ T3521] bridge_slave_0: left allmulticast mode
[  332.416603][ T3521] bridge_slave_0: left promiscuous mode
[  332.424061][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.470986][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  333.003566][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.017357][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.031996][ T3521] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  333.041559][ T3521] bond0 (unregistering): Released all slaves
[  333.151650][ T3521] tipc: Disabling bearer <udp:s>
[  333.160892][ T3521] tipc: Left network mode
[  333.327233][T12883] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  333.361631][ T5837] Bluetooth: hci0: command tx timeout
[  333.373714][T12883] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  333.403017][T12883] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  333.443925][T12883] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  333.525278][ T3521] hsr_slave_0: left promiscuous mode
[  333.536894][ T3521] hsr_slave_1: left promiscuous mode
[  333.545814][T12934] binder: 12933:12934 ioctl c0306201 2000000001c0 returned -14
[  333.556349][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.564037][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.582820][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.590230][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.632781][ T3521] veth1_macvtap: left promiscuous mode
[  333.638499][ T3521] veth0_macvtap: left promiscuous mode
[  333.647009][ T3521] veth1_vlan: left promiscuous mode
[  333.652723][ T3521] veth0_vlan: left promiscuous mode
[  334.190813][ T3521] team0 (unregistering): Port device team_slave_1 removed
[  334.231702][ T3521] team0 (unregistering): Port device team_slave_0 removed
[  334.691533][T12883] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.714303][T12883] 8021q: adding VLAN 0 to HW filter on device team0
[  334.734459][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.741692][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.774897][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.782119][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.909689][ T3521] IPVS: stop unused estimator thread 0...
[  335.136241][T12883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.255306][T12974] netlink: 'syz.3.2562': attribute type 10 has an invalid length.
[  335.349502][T12978] binder_alloc: 12977: binder_alloc_buf, no vma
[  335.433158][ T5837] Bluetooth: hci0: command tx timeout
[  335.595095][T12883] veth0_vlan: entered promiscuous mode
[  335.643155][T12883] veth1_vlan: entered promiscuous mode
[  335.720777][T12883] veth0_macvtap: entered promiscuous mode
[  335.743954][T12883] veth1_macvtap: entered promiscuous mode
[  335.773245][T12883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.791708][T12883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.813830][ T3574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.837515][ T3574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.856994][ T3574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.866312][ T3574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.969134][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.992954][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.029405][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.038242][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.399862][T13013] tipc: Started in network mode
[  336.412595][T13013] tipc: Node identity ac1414aa, cluster identity 4711
[  336.420189][T13013] tipc: Enabled bearer <udp:s>, priority 10
[  336.476023][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2570'.
[  336.880643][ T5841] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  336.967430][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  336.978491][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  336.991293][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  336.999259][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  337.007202][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  337.059120][ T5841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.110193][ T5841] usb 6-1: config 1 interface 0 has no altsetting 0
[  337.139930][ T5841] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  337.160300][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.176208][ T5841] usb 6-1: Product: syz
[  337.191091][ T5841] usb 6-1: Manufacturer: syz
[  337.195727][ T5841] usb 6-1: SerialNumber: syz
[  337.515845][ T3521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.520668][   T53] Bluetooth: hci0: command tx timeout
[  337.550699][ T5912] tipc: Node number set to 2886997162
[  337.574758][T13022] chnl_net:caif_netlink_parms(): no params data found
[  337.724863][ T3521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.828087][ T3521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.882589][T13022] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.889893][T13022] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.903577][T13022] bridge_slave_0: entered allmulticast mode
[  337.915064][T13022] bridge_slave_0: entered promiscuous mode
[  337.927067][T13022] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.934723][T13022] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.943652][T13022] bridge_slave_1: entered allmulticast mode
[  337.953288][T13022] bridge_slave_1: entered promiscuous mode
[  337.979622][ T3521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.052428][T13022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.073368][T13022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.168493][T13022] team0: Port device team_slave_0 added
[  338.178573][T13022] team0: Port device team_slave_1 added
[  338.234287][T13022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.241517][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.271363][T13022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.284844][T13022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.292058][T13022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.322937][T13022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.402812][T13022] hsr_slave_0: entered promiscuous mode
[  338.410226][T13022] hsr_slave_1: entered promiscuous mode
[  338.418521][T13022] debugfs: 'hsr0' already exists in 'hsr'
[  338.425230][T13022] Cannot create hsr debugfs directory
[  338.849279][T13035] syzkaller1: entered promiscuous mode
[  338.855437][T13035] syzkaller1: entered allmulticast mode
[  339.020142][T13037] binder: BINDER_SET_CONTEXT_MGR already set
[  339.026259][T13037] binder: 13036:13037 ioctl 4018620d 200000000040 returned -16
[  339.034060][   T53] Bluetooth: hci4: command tx timeout
[  339.196642][ T3521] bridge_slave_1: left allmulticast mode
[  339.203697][ T3521] bridge_slave_1: left promiscuous mode
[  339.212890][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.234779][ T3521] bridge_slave_0: left allmulticast mode
[  339.240453][ T3521] bridge_slave_0: left promiscuous mode
[  339.246820][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.569071][ T5841] pxrc 6-1:1.0: Could not find endpoint
[  339.592401][   T53] Bluetooth: hci0: command tx timeout
[  339.627513][ T5841] usb 6-1: USB disconnect, device number 2
[  339.657386][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'.
[  339.901394][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.914269][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.927236][ T3521] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface
[  339.937386][ T3521] bond0 (unregistering): Released all slaves
[  340.079419][ T3521] tipc: Disabling bearer <udp:s>
[  340.094544][ T3521] tipc: Left network mode
[  340.140338][ T3521] IPVS: stopping backup sync thread 11326 ...
[  340.407178][   T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  340.455104][ T3521] hsr_slave_0: left promiscuous mode
[  340.462983][ T3521] hsr_slave_1: left promiscuous mode
[  340.469216][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.478382][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.486811][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.499415][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.525139][ T3521] veth1_macvtap: left promiscuous mode
[  340.531091][ T3521] veth0_macvtap: left promiscuous mode
[  340.536776][ T3521] veth1_vlan: left promiscuous mode
[  340.542709][ T3521] veth0_vlan: left promiscuous mode
[  340.572119][   T43] usb 6-1: Using ep0 maxpacket: 32
[  340.586959][   T43] usb 6-1: config 0 has an invalid interface number: 222 but max is 0
[  340.598211][   T43] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  340.616432][   T43] usb 6-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config
[  340.640310][   T43] usb 6-1: config 0 has no interface number 0
[  340.656065][   T43] usb 6-1: config 0 interface 222 altsetting 70 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  340.686797][   T43] usb 6-1: config 0 interface 222 has no altsetting 0
[  340.705472][   T43] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[  340.720535][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.728787][   T43] usb 6-1: Product: syz
[  340.734158][   T43] usb 6-1: Manufacturer: syz
[  340.738899][   T43] usb 6-1: SerialNumber: syz
[  340.753101][   T43] usb 6-1: config 0 descriptor??
[  340.974373][   T43] snd_usb_variax 6-1:0.222: Line 6 Variax Workbench found
[  340.981882][   T43] usb 6-1: selecting invalid altsetting 1
[  340.987645][   T43] snd_usb_variax 6-1:0.222: set_interface failed
[  340.995518][   T43] snd_usb_variax 6-1:0.222: Line 6 Variax Workbench now disconnected
[  341.003867][   T43] snd_usb_variax 6-1:0.222: probe with driver snd_usb_variax failed with error -22
[  341.023002][   T43] usb 6-1: USB disconnect, device number 3
[  341.102533][ T3521] team0 (unregistering): Port device team_slave_1 removed
[  341.111183][   T53] Bluetooth: hci4: command tx timeout
[  341.143329][ T3521] team0 (unregistering): Port device team_slave_0 removed
[  341.544159][T13022] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  341.560940][T13022] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  341.593728][T13022] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  341.604399][T13022] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  341.737381][T13022] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.762203][T13022] 8021q: adding VLAN 0 to HW filter on device team0
[  341.775286][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.782674][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.813802][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.821073][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.106042][T13022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.481984][T13113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.500415][T13113] netlink: 'syz.5.2581': attribute type 6 has an invalid length.
[  342.516012][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2582'.
[  342.691607][T13123] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  342.724109][T13022] veth0_vlan: entered promiscuous mode
[  342.751259][T13022] veth1_vlan: entered promiscuous mode
[  342.822830][T13022] veth0_macvtap: entered promiscuous mode
[  342.846668][T13022] veth1_macvtap: entered promiscuous mode
[  342.896425][T13129] netlink: 'syz.5.2585': attribute type 10 has an invalid length.
[  342.913228][T13022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.923059][T13129] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2585'.
[  343.191946][   T53] Bluetooth: hci4: command tx timeout
[  343.196867][T13022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.280560][   T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.299696][   T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.315348][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.324586][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.588465][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.615976][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.662652][T13156] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2592'.
[  343.674170][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.688917][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.778154][T13162] binder_alloc: 13161: binder_alloc_buf, no vma
[  343.878461][T13167] syzkaller1: entered promiscuous mode
[  343.886707][T13167] syzkaller1: entered allmulticast mode
[  345.070604][  T798] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  345.105245][T13189] tipc: Started in network mode
[  345.110153][T13189] tipc: Node identity ac1414aa, cluster identity 4711
[  345.118418][T13189] tipc: Enabled bearer <udp:s>, priority 10
[  345.243289][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  345.254503][  T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.266210][  T798] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  345.275788][  T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.280735][   T53] Bluetooth: hci4: command tx timeout
[  345.295848][  T798] usb 6-1: config 0 descriptor??
[  345.340460][T13195] netlink: 556 bytes leftover after parsing attributes in process `syz.4.2603'.
[  345.719650][  T798] isku 0003:1E7D:319C.0027: item fetching failed at offset 6/7
[  345.727701][  T798] isku 0003:1E7D:319C.0027: parse failed
[  345.733920][  T798] isku 0003:1E7D:319C.0027: probe with driver isku failed with error -22
[  345.922103][ T5841] usb 6-1: USB disconnect, device number 4
[  346.110603][  T798] tipc: Node number set to 2886997162
[  346.247447][   T30] audit: type=1326 audit(1762417815.036:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.271267][   T30] audit: type=1326 audit(1762417815.036:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.293862][   T30] audit: type=1326 audit(1762417815.036:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.317909][   T30] audit: type=1326 audit(1762417815.036:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.345958][   T30] audit: type=1326 audit(1762417815.036:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.370153][   T30] audit: type=1326 audit(1762417815.036:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.395088][   T30] audit: type=1326 audit(1762417815.036:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.418338][   T30] audit: type=1326 audit(1762417815.036:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.448840][   T30] audit: type=1326 audit(1762417815.036:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.449227][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.482226][   T30] audit: type=1326 audit(1762417815.036:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.4.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f978f6c9 code=0x7ffc0000
[  346.482894][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.514327][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.524115][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.534538][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.914471][T13219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(76)
[  346.921456][T13219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  346.940959][T13219] vhci_hcd vhci_hcd.0: Device attached
[  347.024725][T13227] netlink: 556 bytes leftover after parsing attributes in process `syz.5.2613'.
[  347.064873][T13202] chnl_net:caif_netlink_parms(): no params data found
[  347.094892][T13229] syzkaller1: entered promiscuous mode
[  347.100380][T13229] syzkaller1: entered allmulticast mode
[  347.190209][T13202] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.197582][T13202] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.201618][  T798] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  347.209400][T13202] bridge_slave_0: entered allmulticast mode
[  347.243916][T13202] bridge_slave_0: entered promiscuous mode
[  347.254644][T13202] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.261949][T13202] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.269377][T13202] bridge_slave_1: entered allmulticast mode
[  347.279259][T13202] bridge_slave_1: entered promiscuous mode
[  347.320363][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.332964][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.376015][T13202] team0: Port device team_slave_0 added
[  347.386634][T13202] team0: Port device team_slave_1 added
[  347.456285][T13221] vhci_hcd: connection reset by peer
[  347.459717][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.474845][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.500776][   T50] vhci_hcd vhci_hcd.3: stop threads
[  347.500812][   T50] vhci_hcd vhci_hcd.3: release socket
[  347.500868][   T50] vhci_hcd vhci_hcd.3: disconnect device
[  347.517278][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.530384][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.538465][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  347.568341][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.609178][T13239] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2617'.
[  347.656195][T13202] hsr_slave_0: entered promiscuous mode
[  347.663923][T13202] hsr_slave_1: entered promiscuous mode
[  347.670440][T13202] debugfs: 'hsr0' already exists in 'hsr'
[  347.679128][T13202] Cannot create hsr debugfs directory
[  347.742533][T13241] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  348.217343][T13202] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  348.253901][T13202] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  348.361334][T13202] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  348.376019][T13202] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  348.638901][   T53] Bluetooth: hci3: command tx timeout
[  348.660411][T13202] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.694050][T13202] 8021q: adding VLAN 0 to HW filter on device team0
[  348.709147][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.716294][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.788634][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.795876][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.920069][   T53] Bluetooth: Unexpected continuation frame (len 16)
[  349.152015][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.173870][ T5879] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  349.332415][ T5879] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA
[  349.370583][ T5879] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 74, changing to 10
[  349.402789][ T5879] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 42082, setting to 1024
[  349.451209][ T5879] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  349.460574][ T5879] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  349.468837][ T5879] usb 6-1: Manufacturer: syz
[  349.486192][ T5879] usb 6-1: SerialNumber: syz
[  349.488884][T13202] veth0_vlan: entered promiscuous mode
[  349.503224][T13275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  349.535557][T13202] veth1_vlan: entered promiscuous mode
[  349.597149][T13202] veth0_macvtap: entered promiscuous mode
[  349.614956][T13202] veth1_macvtap: entered promiscuous mode
[  349.650193][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.682649][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.727504][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.728996][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.765182][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.768242][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.807970][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.832671][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.860427][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.884761][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.919339][ T5879] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  349.948671][ T5879] usb 6-1: USB disconnect, device number 5
[  349.974680][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.007467][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.058540][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.068470][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.079605][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  350.355366][ T5835] ------------[ cut here ]------------
[  350.360960][ T5835] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560, CPU#0: syz-executor/5835
[  350.371625][ T5835] Modules linked in:
[  350.375554][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  350.385294][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  350.395631][ T5835] RIP: 0010:free_nsproxy+0x415/0x560
[  350.401036][ T5835] Code: 85 ed 0f 8e be 00 00 00 e8 58 22 33 00 48 8b 3d f1 88 31 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 c1 14 8e 00 e8 3c 22 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 2e 22 33 00 4c 89 ff be 03 00 00 00 e8
[  350.420760][ T5835] RSP: 0018:ffffc900040bfa90 EFLAGS: 00010293
[  350.420942][T13338] tipc: Started in network mode
[  350.426846][ T5835] RAX: ffffffff818e4b84 RBX: ffff888065bfe6e8 RCX: ffff88807e7f1e80
[  350.426866][ T5835] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  350.426880][ T5835] RBP: 00000000ffffffff R08: ffff888063588803 R09: 1ffff1100c6b1100
[  350.426895][ T5835] R10: dffffc0000000000 R11: ffffed100c6b1101 R12: dffffc0000000000
[  350.426911][ T5835] R13: 0000000000000009 R14: ffff8880635885b0 R15: ffff888063588800
[  350.472805][T13338] tipc: Node identity ac1414aa, cluster identity 4711
[  350.473708][ T5835] FS:  0000000000000000(0000) GS:ffff888125a8b000(0000) knlGS:0000000000000000
[  350.489726][ T5835] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  350.496416][ T5835] CR2: 00007fe352331020 CR3: 0000000065386000 CR4: 00000000003526f0
[  350.501345][T13338] tipc: Enabled bearer <udp:s>, priority 10
[  350.504454][ T5835] Call Trace:
[  350.513647][ T5835]  <TASK>
[  350.516584][ T5835]  do_exit+0x6b8/0x2300
[  350.520832][ T5835]  ? do_raw_spin_lock+0x121/0x290
[  350.525883][ T5835]  ? __pfx_do_exit+0x10/0x10
[  350.530619][ T5835]  do_group_exit+0x21c/0x2d0
[  350.535229][ T5835]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.540476][ T5835]  get_signal+0x1285/0x1340
[  350.545922][ T5835]  arch_do_signal_or_restart+0x9a/0x7a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  350.554425][ T5835]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  350.560678][ T5835]  ? exit_to_user_mode_loop+0x55/0x4f0
[  350.566161][ T5835]  exit_to_user_mode_loop+0x87/0x4f0
[  350.571551][ T5835]  ? rcu_is_watching+0x15/0xb0
[  350.576339][ T5835]  do_syscall_64+0x2e9/0xfa0
[  350.581670][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.587763][ T5835]  ? clear_bhb_loop+0x60/0xb0
[  350.592594][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.598500][ T5835] RIP: 0033:0x7ff071d8e0dc
[  350.603021][ T5835] Code: Unable to access opcode bytes at 0x7ff071d8e0b2.
[  350.610046][ T5835] RSP: 002b:00007ffd511912e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  350.618600][ T5835] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007ff071d8e0dc
[  350.626622][ T5835] RDX: 0000000000000030 RSI: 00007ffd511913a0 RDI: 00000000000000f9
[  350.635026][ T5835] RBP: 00007ffd5119134c R08: 0000000000000000 R09: 0079746972756365
[  350.643053][ T5835] R10: 00007ffd51190ca0 R11: 0000000000000246 R12: 0000000000000258
[  350.651824][ T5835] R13: 00000000000927c0 R14: 00000000000557fe R15: 00007ffd511913a0
[  350.659833][ T5835]  </TASK>
[  350.663723][ T5835] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  350.671017][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  350.680512][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  350.690564][ T5835] Call Trace:
[  350.693841][ T5835]  <TASK>
[  350.696760][ T5835]  dump_stack_lvl+0x99/0x250
[  350.701347][ T5835]  ? __asan_memcpy+0x40/0x70
[  350.705933][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.711133][ T5835]  ? __pfx__printk+0x10/0x10
[  350.715725][ T5835]  vpanic+0x237/0x6d0
[  350.719698][ T5835]  ? __pfx_vpanic+0x10/0x10
[  350.724186][ T5835]  ? is_bpf_text_address+0x26/0x2b0
[  350.729386][ T5835]  panic+0xb9/0xc0
[  350.733094][ T5835]  ? __pfx_panic+0x10/0x10
[  350.737543][ T5835]  __warn+0x334/0x4c0
[  350.741528][ T5835]  ? free_nsproxy+0x415/0x560
[  350.746198][ T5835]  ? free_nsproxy+0x415/0x560
[  350.750866][ T5835]  report_bug+0x2be/0x4f0
[  350.755191][ T5835]  ? free_nsproxy+0x415/0x560
[  350.759862][ T5835]  ? free_nsproxy+0x415/0x560
[  350.764539][ T5835]  ? free_nsproxy+0x417/0x560
[  350.769212][ T5835]  handle_bug+0x84/0x160
[  350.773466][ T5835]  exc_invalid_op+0x1a/0x50
[  350.777971][ T5835]  asm_exc_invalid_op+0x1a/0x20
[  350.782815][ T5835] RIP: 0010:free_nsproxy+0x415/0x560
[  350.788092][ T5835] Code: 85 ed 0f 8e be 00 00 00 e8 58 22 33 00 48 8b 3d f1 88 31 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 c1 14 8e 00 e8 3c 22 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 2e 22 33 00 4c 89 ff be 03 00 00 00 e8
[  350.807698][ T5835] RSP: 0018:ffffc900040bfa90 EFLAGS: 00010293
[  350.813767][ T5835] RAX: ffffffff818e4b84 RBX: ffff888065bfe6e8 RCX: ffff88807e7f1e80
[  350.821732][ T5835] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  350.829695][ T5835] RBP: 00000000ffffffff R08: ffff888063588803 R09: 1ffff1100c6b1100
[  350.837674][ T5835] R10: dffffc0000000000 R11: ffffed100c6b1101 R12: dffffc0000000000
[  350.845648][ T5835] R13: 0000000000000009 R14: ffff8880635885b0 R15: ffff888063588800
[  350.853626][ T5835]  ? free_nsproxy+0x414/0x560
[  350.858326][ T5835]  do_exit+0x6b8/0x2300
[  350.862500][ T5835]  ? do_raw_spin_lock+0x121/0x290
[  350.867536][ T5835]  ? __pfx_do_exit+0x10/0x10
[  350.872145][ T5835]  do_group_exit+0x21c/0x2d0
[  350.876740][ T5835]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.881942][ T5835]  get_signal+0x1285/0x1340
[  350.886454][ T5835]  arch_do_signal_or_restart+0x9a/0x7a0
[  350.892000][ T5835]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  350.898159][ T5835]  ? exit_to_user_mode_loop+0x55/0x4f0
[  350.903612][ T5835]  exit_to_user_mode_loop+0x87/0x4f0
[  350.908885][ T5835]  ? rcu_is_watching+0x15/0xb0
[  350.913654][ T5835]  do_syscall_64+0x2e9/0xfa0
[  350.918251][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.924313][ T5835]  ? clear_bhb_loop+0x60/0xb0
[  350.928982][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.934950][ T5835] RIP: 0033:0x7ff071d8e0dc
[  350.939349][ T5835] Code: Unable to access opcode bytes at 0x7ff071d8e0b2.
[  350.946347][ T5835] RSP: 002b:00007ffd511912e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  350.954770][ T5835] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007ff071d8e0dc
[  350.962756][ T5835] RDX: 0000000000000030 RSI: 00007ffd511913a0 RDI: 00000000000000f9
[  350.970729][ T5835] RBP: 00007ffd5119134c R08: 0000000000000000 R09: 0079746972756365
[  350.978697][ T5835] R10: 00007ffd51190ca0 R11: 0000000000000246 R12: 0000000000000258
[  350.986665][ T5835] R13: 00000000000927c0 R14: 00000000000557fe R15: 00007ffd511913a0
[  350.994642][ T5835]  </TASK>
[  350.997916][ T5835] Kernel Offset: disabled
[  351.002229][ T5835] Rebooting in 86400 seconds..