last executing test programs:

18m44.808844072s ago: executing program 32 (id=807):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)
socket$kcm(0xa, 0x3, 0x87)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15m8.988172455s ago: executing program 5 (id=2456):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac14"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040006"]}, 0x58}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)

15m8.573100346s ago: executing program 33 (id=2404):
setgid(0xee00)
r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

15m7.859952086s ago: executing program 5 (id=2463):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x200400, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd04, &(0x7f0000000000)="0400000000000000000000003801")

15m5.980263967s ago: executing program 5 (id=2466):
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x110)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="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", 0x4fd}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0)

15m5.45680817s ago: executing program 5 (id=2468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x7}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0)

15m4.599395471s ago: executing program 5 (id=2471):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x7ffffffe)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@user_xattr}, {@dioread_lock}, {@dioread_nolock}, {@orlov}, {@noblock_validity}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@abort}, {@bh}, {@init_itable}]}, 0xfc, 0x579, &(0x7f0000000940)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./my_configfs\x00', 0x80042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

15m3.76865133s ago: executing program 5 (id=2476):
futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), 0xffffffffffffffff)

15m0.906759591s ago: executing program 34 (id=2442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1a1043)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x2000, 0x1, 0x0, r1, 0x0}])

14m54.075726738s ago: executing program 3 (id=2503):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001300010000000000c06cd4a096a8", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="146e00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x0)
close(0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d0000006e3500000000000005000100090000000c000500000000000a000000300000"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056)

14m53.732502065s ago: executing program 3 (id=2504):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x201}, 0x1c)

14m53.574744842s ago: executing program 3 (id=2505):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x3f5, 0x1)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8841, 0x0, 0x0)

14m53.325265043s ago: executing program 3 (id=2506):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x97}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r1)
r2 = timerfd_create(0x9, 0x80000)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
timerfd_settime(r2, 0x1, &(0x7f0000000380)={{}, {0x0, 0x3938700}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKZEROOUT(r3, 0xc01070ce, &(0x7f0000000000)={0x0, 0x40001000})
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x800)

14m52.850948125s ago: executing program 3 (id=2509):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write(r0, &(0x7f0000000100)="306663353a313232373a620afaf6379a248d1d6534518f10951005a36965", 0x1e)

14m51.223644919s ago: executing program 35 (id=2464):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80, 0x6)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000c40)={0x3, 0x0, 0xc, 0x1, 0x124, &(0x7f0000000840)})
r3 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff)
sendmsg(r3, &(0x7f0000000dc0)={&(0x7f0000000200)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="e457f4a3bfb6229a5736db8fe1196cc3bbb89207525a0d70dcdef384f5050f4e5dbe11b4dd70814cb64eb340ef253dd0a525df4d0f9a43659e18d04298ef5ec84b1aaa29734495d0d91157e5daccb2af533a0b8a137bf5aeb63b5e4cc72759cfa245f6b5c70281c731fe7d150c660969caf8effebff32cafbd8cc494f63b0af90920c05a5110fe6bdad4eb8c50", 0x8d}, {&(0x7f0000000740)="df6c9b8f604ec102f3f65d2789b09444ddeab3ec57b7288eec37b68e9af3cb2bdde1d49d1da0c14657ba3d221c8aa8ae9ee2", 0x32}, {&(0x7f0000000780)="d87687a0fbfe9e8adeca0cd4a459be00bc51760457da65b37e526f9a2ebc6c7627edbac044e8a3159253935362e8b34ea65db5f04b3ac214fd781e61bc414d1d8f5832d9928c568321bd07da6d60f0bb992efc8a7e88ba0a1d7859", 0x5b}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1648], 0x670}, 0x40000)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')

14m50.419812471s ago: executing program 3 (id=2513):
setns(0xc9, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

14m49.189936261s ago: executing program 1 (id=2517):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
acct(&(0x7f0000000200)='./tracefs_dir/buffer_size_kb\x00')

14m49.012455701s ago: executing program 1 (id=2518):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
flock(r0, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/4\x00')
pread64(r1, &(0x7f0000000040)=""/17, 0x11, 0x1)

14m48.655671929s ago: executing program 1 (id=2519):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0)
pwrite64(r3, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r4, r4, 0x0, 0xe3aa6ea)

14m48.633291296s ago: executing program 36 (id=2476):
futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), 0xffffffffffffffff)

14m47.277504741s ago: executing program 1 (id=2521):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x1, 0x8, 0x0, 0x1009}, 0x20)

14m46.800232824s ago: executing program 1 (id=2522):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write(r0, &(0x7f0000000100)="306663353a313232373a620afaf6379a248d1d6534518f10951005a36965", 0x1e)

14m45.682681861s ago: executing program 1 (id=2523):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

14m34.369285336s ago: executing program 37 (id=2513):
setns(0xc9, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

14m30.405250391s ago: executing program 38 (id=2523):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12m53.917626194s ago: executing program 6 (id=2912):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14)

12m52.950433347s ago: executing program 6 (id=2918):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2dff)

12m51.903193197s ago: executing program 6 (id=2922):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))

12m51.612066117s ago: executing program 6 (id=2924):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x8001)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000b80)=""/233, 0xe9}], 0x1, 0x100007, 0xfffffc01)

12m51.224801706s ago: executing program 6 (id=2925):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_io_uring_complete(0x0, r0)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

12m50.387158839s ago: executing program 6 (id=2931):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xd, 0x400ffc, 0x0, 0x401, 0x100}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x3}, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0xffffffff, 0x80000000, 0x8000, 0xfdfdffff, 0x2, "fe94b8dfc43c3328eae0cae1f5eba329e6f216"})

12m35.222592836s ago: executing program 39 (id=2931):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xd, 0x400ffc, 0x0, 0x401, 0x100}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x3}, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0xffffffff, 0x80000000, 0x8000, 0xfdfdffff, 0x2, "fe94b8dfc43c3328eae0cae1f5eba329e6f216"})

9.592818286s ago: executing program 9 (id=7911):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

9.414067289s ago: executing program 9 (id=7914):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
socket$unix(0x1, 0x1, 0x0)
close(0x3)

9.29727329s ago: executing program 9 (id=7915):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002)
syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0xe10c, 0x4005, 0x0, 0x40, 0x0, 0x0}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
openat$mice(0xffffff9c, &(0x7f0000000040), 0x41)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}})
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendfile(r7, r6, 0x0, 0xffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)

8.501831021s ago: executing program 2 (id=7921):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

8.229095038s ago: executing program 9 (id=7923):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

7.997423484s ago: executing program 2 (id=7925):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0)

7.092201439s ago: executing program 9 (id=7928):
socket$inet6(0xa, 0x80002, 0x0)
open(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4000840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x3, 0x7, 0xfffffe0000000001, 0xfa11, 0x7f}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x8, 0x12)
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f000000a900)={0x0, 0x0, &(0x7f000000a8c0)={&(0x7f0000000140)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x401)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/64, 0x40}], 0x1, 0x8001, 0x2)

6.893260382s ago: executing program 7 (id=7929):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40010020)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0)

6.326452079s ago: executing program 7 (id=7933):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socket$netlink(0x10, 0x3, 0x12)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.867802544s ago: executing program 7 (id=7936):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f000084c000/0x4000)=nil, 0x4000, 0x6, 0x40010, 0xffffffffffffffff, 0x4ac0b000)
close_range(r0, 0xffffffffffffffff, 0x0)

5.519879059s ago: executing program 2 (id=7937):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

4.91291203s ago: executing program 2 (id=7940):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

4.565290697s ago: executing program 8 (id=7941):
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x22)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
socket(0x10, 0x3, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/50, 0x32, 0x1, 0x16}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

4.152588652s ago: executing program 8 (id=7943):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
socket(0x400000000010, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3.791640144s ago: executing program 2 (id=7945):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r0, 0x0, 0x0)

3.724231978s ago: executing program 8 (id=7946):
socket$nl_route(0x10, 0x3, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
unshare(0xc040480)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x162)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b120500000000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000400000008000500", @ANYRES32, @ANYBLOB="080006"], 0x28}}, 0x0)
lseek(r3, 0xffffffffffffbff8, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
openat$udambuf(0xffffff9c, &(0x7f0000000100), 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'pimreg0\x00'})
write$FUSE_INIT(r6, &(0x7f0000002340)={0x54, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x3, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006)

3.482020977s ago: executing program 4 (id=7948):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socket$netlink(0x10, 0x3, 0x12)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.419950637s ago: executing program 2 (id=7949):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="102a0500000000000c001a805a00028004000180300012800b000100627269646765000020000280080005000100000005002c"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000b0ff8500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000001000000000000000000000000950000000000cc1b9006bf43eb560410f47f39b90000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020)
r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0xc0b00, 0x1ea)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000180)=0x7)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f00000005c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="00242300000048220f041b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000200)=""/142)

3.121956291s ago: executing program 4 (id=7950):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x4002)
syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0xe10c, 0x4005, 0x0, 0x40, 0x0, 0x0}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000440)=<r4=>0x0)
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000))
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
openat$mice(0xffffff9c, &(0x7f0000000040), 0x41)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}})
r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendfile(r7, r6, 0x0, 0xffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)

3.08472389s ago: executing program 0 (id=7951):
r0 = socket(0x8000000010, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="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", 0xfc)

2.781866784s ago: executing program 7 (id=7952):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

2.648712677s ago: executing program 0 (id=7953):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x8caf6d0f9e08690a}, 0x4004045)
r1 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r4, 0x5)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
close(r4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38ffffc7d66386c34", 0xc}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x4040084)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)

2.556934741s ago: executing program 4 (id=7954):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2.369041888s ago: executing program 7 (id=7955):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0xfffff000, 0x0, 0x2})

2.143968809s ago: executing program 4 (id=7956):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat, @flat=@binder={0x73622a85, 0x100}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})

2.038753503s ago: executing program 0 (id=7957):
socket$packet(0x11, 0x2, 0x300)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

1.887933849s ago: executing program 4 (id=7958):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff00000502", @ANYRES8=r0], 0x0)

1.663291101s ago: executing program 8 (id=7959):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
socket$unix(0x1, 0x1, 0x0)
close(0x3)

1.3417103s ago: executing program 8 (id=7960):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
listen(r1, 0x5)
listen(r0, 0x5)

1.140498998s ago: executing program 8 (id=7961):
gettid()
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, 0x0, 0x4000, 0x1, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2)
fsopen(0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)

961.42189ms ago: executing program 0 (id=7962):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socket$netlink(0x10, 0x3, 0x12)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

744.241792ms ago: executing program 0 (id=7963):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x14e})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xe1, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "c29eed2f2bf8143bb4"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x2, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0xf1, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99fe25b8950382"}}}}, 0xef)

411.083738ms ago: executing program 4 (id=7964):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe})
close_range(r1, 0xffffffffffffffff, 0x0)

228.705087ms ago: executing program 0 (id=7965):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
sendmsg$FOU_CMD_DEL(r0, 0x0, 0x8090)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r5 = syz_open_dev$swradio(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f041})

96.614181ms ago: executing program 9 (id=7966):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8c0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

0s ago: executing program 7 (id=7967):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x3, 0xffff, 0x0, 0x2}, {0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

kernel console output (not intermixed with test programs):

 usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1070.451771][T22414] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1070.479089][T22414] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[ 1070.540042][T22414] usb 9-1: config 189 has an invalid interface number: 127 but max is 0
[ 1070.571417][T22414] usb 9-1: config 189 has no interface number 0
[ 1070.593017][T22414] usb 9-1: config 189 interface 127 has no altsetting 0
[ 1070.613081][T22414] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.623400][T22414] usb 9-1: Product: syz
[ 1070.629841][T22414] usb 9-1: Manufacturer: syz
[ 1070.636558][T22414] usb 9-1: SerialNumber: syz
[ 1070.708567][T13683] team0 (unregistering): Port device team_slave_1 removed
[ 1070.786238][T13683] team0 (unregistering): Port device team_slave_0 removed
[ 1070.845888][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'.
[ 1071.049354][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'.
[ 1071.198908][T27022] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.210884][T27022] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.228417][T27022] bridge_slave_1: entered allmulticast mode
[ 1071.251527][T27022] bridge_slave_1: entered promiscuous mode
[ 1071.295810][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'.
[ 1071.468934][T27310] netlink: 'syz.4.6757': attribute type 4 has an invalid length.
[ 1071.476930][T27310] netlink: 'syz.4.6757': attribute type 7 has an invalid length.
[ 1071.486775][T27310] netlink: 'syz.4.6757': attribute type 8 has an invalid length.
[ 1071.500287][T27310] netlink: 'syz.4.6757': attribute type 1 has an invalid length.
[ 1071.509355][T27310] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6757'.
[ 1071.618061][T27022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1071.627059][T22414] usbserial_generic 9-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[ 1071.674212][T22414] usbserial_generic 9-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[ 1071.707087][T27022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1071.744529][T22414] usbserial_generic 9-1:189.127: device has no bulk endpoints
[ 1071.778561][T22414] safe_serial 9-1:189.127: safe_serial converter detected
[ 1071.800441][T22414] safe_serial 9-1:189.127: probe with driver safe_serial failed with error -22
[ 1071.850058][T22414] usb 9-1: USB disconnect, device number 7
[ 1071.883535][T27022] team0: Port device team_slave_0 added
[ 1071.927957][T27022] team0: Port device team_slave_1 added
[ 1072.021096][T13683] IPVS: stop unused estimator thread 0...
[ 1072.048863][T27022] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1072.078432][T27022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.120496][T27290] imon:send_packet: task interrupted
[ 1072.136766][T27290] imon:send_packet: packet tx failed (-512)
[ 1072.151078][T27290] imon:vfd_write: send packet #2 failed
[ 1072.161170][T27022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.213095][T27022] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.249366][T27022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.326614][T22389] usb 1-1: USB disconnect, device number 10
[ 1072.378269][T27022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.803260][T27346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'.
[ 1073.047154][T13683] bridge_slave_1: left allmulticast mode
[ 1073.060361][T27346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'.
[ 1073.079160][T13683] bridge_slave_1: left promiscuous mode
[ 1073.107416][T27349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1073.120189][T13683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.150426][T27360] netlink: 'syz.4.6770': attribute type 4 has an invalid length.
[ 1073.167645][T13683] bridge_slave_0: left allmulticast mode
[ 1073.208006][T27360] netlink: 'syz.4.6770': attribute type 7 has an invalid length.
[ 1073.219442][T13683] bridge_slave_0: left promiscuous mode
[ 1073.245493][T13683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.257890][T27360] netlink: 'syz.4.6770': attribute type 8 has an invalid length.
[ 1073.302824][T27360] netlink: 'syz.4.6770': attribute type 1 has an invalid length.
[ 1073.341543][T27360] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6770'.
[ 1073.504054][T27346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'.
[ 1073.627696][T22414] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1073.822044][T22414] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1073.859560][T22414] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1073.898513][T22414] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.912475][T22414] usb 10-1: Product: syz
[ 1073.924694][T22414] usb 10-1: Manufacturer: syz
[ 1073.936457][T22414] usb 10-1: SerialNumber: syz
[ 1073.949700][T13683] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[ 1073.966229][T22414] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1073.984451][T13683] xfrm1 (unregistering): left promiscuous mode
[ 1074.274285][T13683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1074.299733][T13683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1074.324153][T13683] bond0 (unregistering): Released all slaves
[ 1074.359561][T13683] bond1 (unregistering): Released all slaves
[ 1074.414900][T13683] bond2 (unregistering): Released all slaves
[ 1074.478609][T13683] bond3 (unregistering): Released all slaves
[ 1074.551477][T27022] hsr_slave_0: entered promiscuous mode
[ 1074.569675][T27022] hsr_slave_1: entered promiscuous mode
[ 1074.590196][T27022] debugfs: 'hsr0' already exists in 'hsr'
[ 1074.604406][T27022] Cannot create hsr debugfs directory
[ 1074.775020][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1074.776407][T22414] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1074.828393][T22414] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1074.866029][T22414] usb 10-1: media controller created
[ 1074.890616][T22414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1074.931579][T27389] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1075.756359][T22389] usb 10-1: USB disconnect, device number 8
[ 1075.847075][T27417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1075.880667][T27425] netlink: 'syz.4.6785': attribute type 4 has an invalid length.
[ 1075.903474][T27425] netlink: 'syz.4.6785': attribute type 7 has an invalid length.
[ 1075.930857][T27425] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6785'.
[ 1075.942492][T13683] hsr_slave_0: left promiscuous mode
[ 1075.962916][T13683] hsr_slave_1: left promiscuous mode
[ 1076.010613][T13683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1076.027851][T13683] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.081317][T13683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.094491][T13683] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.127664][T13683] veth1_macvtap: left promiscuous mode
[ 1076.143431][T13683] veth0_macvtap: left promiscuous mode
[ 1076.167006][T13683] veth1_vlan: left promiscuous mode
[ 1076.178580][T13683] veth0_vlan: left promiscuous mode
[ 1076.921756][T13683] team0 (unregistering): Port device team_slave_1 removed
[ 1076.954646][T13683] team0 (unregistering): Port device team_slave_0 removed
[ 1076.977190][T27430] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[ 1077.429951][T27451] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 1077.471601][T27448] syzkaller0: entered promiscuous mode
[ 1077.508306][T27448] syzkaller0: entered allmulticast mode
[ 1077.566829][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1078.164499][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[ 1078.854711][T13186] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1078.905714][T27490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1079.058581][T13186] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1079.108264][T13186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.173413][T13186] usb 5-1: config 0 descriptor??
[ 1079.612959][T13186] hackrf 5-1:0.0: Board ID: 00
[ 1079.628704][T13186] hackrf 5-1:0.0: Firmware version: 
[ 1079.831168][T27488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1079.867470][T27488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1079.887497][T13186] hackrf 5-1:0.0: Registered as swradio24
[ 1079.900798][T13186] videodev: could not get a free minor
[ 1079.920966][T27488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1079.939890][T13186] hackrf 5-1:0.0: Failed to register as video device (-23)
[ 1079.969457][T13186] hackrf 5-1:0.0: probe with driver hackrf failed with error -23
[ 1079.990510][T27488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.620093][T13186] usb 5-1: USB disconnect, device number 10
[ 1080.739685][T27022] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1080.762576][T27022] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1080.808161][T27022] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1080.846954][T27022] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1080.880795][T27022] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1080.908582][T27022] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1080.925719][T27022] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1080.968667][T27022] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1081.083111][T27564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1081.462218][T27022] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1081.537085][T27022] 8021q: adding VLAN 0 to HW filter on device team0
[ 1081.610508][T15321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1081.617769][T15321] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1081.657667][T27597] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6822'.
[ 1081.752065][T15318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.759281][T15318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1082.073200][T27610] dummy0: left promiscuous mode
[ 1082.154190][T27613] validate_nla: 2 callbacks suppressed
[ 1082.154226][T27613] netlink: 'syz.9.6826': attribute type 10 has an invalid length.
[ 1082.273852][T27613] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6826'.
[ 1082.297880][T27618] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6828'.
[ 1082.429177][T27613] dummy0: entered promiscuous mode
[ 1082.661401][T27625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1084.193986][T27672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6837'.
[ 1084.705312][T27022] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1085.117370][T27689] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6841'.
[ 1085.191779][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6836'.
[ 1085.281558][T27694] netlink: 'syz.2.6842': attribute type 10 has an invalid length.
[ 1085.311714][T27694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6842'.
[ 1085.325506][T27694] dummy0: entered promiscuous mode
[ 1085.751460][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1086.132003][T27022] veth0_vlan: entered promiscuous mode
[ 1086.193399][T27022] veth1_vlan: entered promiscuous mode
[ 1086.243411][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6850'.
[ 1086.389699][T27022] veth0_macvtap: entered promiscuous mode
[ 1086.463700][T27022] veth1_macvtap: entered promiscuous mode
[ 1086.558604][T27734] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6854'.
[ 1086.568348][T27022] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1086.619072][T27022] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1086.686125][   T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.723383][   T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.759373][T27740] netlink: 'syz.0.6855': attribute type 10 has an invalid length.
[ 1086.785997][T27740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6855'.
[ 1086.846320][T27740] dummy0: entered promiscuous mode
[ 1086.865628][   T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.909306][ T5920] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.178370][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6866'.
[ 1088.276813][T27787] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6866'.
[ 1088.301275][T27787] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6866'.
[ 1088.401267][T27781] ipip0: entered promiscuous mode
[ 1088.417922][T27781] ipip0: entered allmulticast mode
[ 1088.418103][T27790] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6866'.
[ 1088.619058][T27702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1088.907065][T13683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.943060][T13683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.010665][T27799] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6868'.
[ 1089.102704][T15321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.180506][T15321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.457323][T27809] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6872'.
[ 1090.853877][T27838] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6882'.
[ 1090.895052][ T5617] Bluetooth: hci5: link tx timeout
[ 1090.902549][ T5617] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1090.928693][ T5617] Bluetooth: hci5: link tx timeout
[ 1090.937120][ T5617] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1091.470894][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6888'.
[ 1091.528503][ T5617] Bluetooth: hci5: link tx timeout
[ 1091.533740][ T5617] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1091.604801][ T5617] Bluetooth: hci4: command 0x0406 tx timeout
[ 1091.765368][ T5617] Bluetooth: hci5: link tx timeout
[ 1091.770642][ T5617] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1092.136541][T14906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1092.154959][T14906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1092.165427][T14906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1092.178311][T14906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1092.190635][T14906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1092.354141][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6894'.
[ 1092.572589][T21986] Bluetooth: hci5: link tx timeout
[ 1092.577887][T21986] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1092.964501][T21986] Bluetooth: hci5: command 0x0406 tx timeout
[ 1093.240246][T27899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6903'.
[ 1093.839828][   T30] audit: type=1326 audit(1786328052.227:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27916 comm="syz.7.6908" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4df99e0d9 code=0x0
[ 1094.254411][T26176] Bluetooth: hci6: command tx timeout
[ 1094.887044][T27941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6910'.
[ 1094.973318][ T5920] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1095.011088][ T5920] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.333715][T27952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6915'.
[ 1095.672447][ T5920] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1095.721745][ T5920] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.991575][T27959] syzkaller0: entered promiscuous mode
[ 1096.009883][T27959] syzkaller0: entered allmulticast mode
[ 1096.324658][T26176] Bluetooth: hci6: command tx timeout
[ 1096.871294][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6927'.
[ 1097.005808][T27991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6928'.
[ 1098.409035][T26176] Bluetooth: hci6: command tx timeout
[ 1099.941662][ T5920] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1099.952058][ T5920] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.014573][T28011] syzkaller0: entered promiscuous mode
[ 1100.030208][T28011] syzkaller0: entered allmulticast mode
[ 1100.105267][T28018] tipc: Started in network mode
[ 1100.115385][T28018] tipc: Node identity , cluster identity 4711
[ 1100.132398][T28018] tipc: Failed to obtain node identity
[ 1100.138351][T28018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1100.441774][ T5920] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1100.463588][ T5920] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.484453][T26176] Bluetooth: hci6: command tx timeout
[ 1100.680758][T28047] syzkaller1: entered promiscuous mode
[ 1100.709719][T28047] syzkaller1: entered allmulticast mode
[ 1100.835306][T28036] syzkaller0: entered promiscuous mode
[ 1100.852517][T28036] syzkaller0: entered allmulticast mode
[ 1102.656517][T28103] syzkaller0: entered promiscuous mode
[ 1102.664166][T28103] syzkaller0: entered allmulticast mode
[ 1102.672810][T28108] syzkaller0: entered promiscuous mode
[ 1102.680576][T28108] syzkaller0: entered allmulticast mode
[ 1108.009553][ T5920] bond0 (unregistering): Released all slaves
[ 1108.035249][ T5920] bond1 (unregistering): Released all slaves
[ 1108.056747][ T5920] bond2 (unregistering): Released all slaves
[ 1108.154146][T28156] netlink: 'syz.0.6965': attribute type 3 has an invalid length.
[ 1108.194106][ T5920] tipc: Left network mode
[ 1110.044846][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1110.450079][T28208] syzkaller0: entered promiscuous mode
[ 1110.464432][T28208] syzkaller0: entered allmulticast mode
[ 1115.128497][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.135187][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.327508][T27866] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.334939][T27866] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.342131][T27866] bridge_slave_0: entered allmulticast mode
[ 1116.350831][T27866] bridge_slave_0: entered promiscuous mode
[ 1116.447716][ T5920] hsr_slave_0: left promiscuous mode
[ 1116.465989][ T5920] hsr_slave_1: left promiscuous mode
[ 1116.488487][ T5920] veth1_macvtap: left promiscuous mode
[ 1116.500919][ T5920] veth0_macvtap: left promiscuous mode
[ 1116.517137][ T5920] veth1_vlan: left promiscuous mode
[ 1116.532734][ T5920] veth0_vlan: left promiscuous mode
[ 1117.209109][T26176] Bluetooth: hci2: command 0x0406 tx timeout
[ 1120.505148][T27866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1120.538196][T27866] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1120.562492][T27866] bridge_slave_1: entered allmulticast mode
[ 1120.604640][T27866] bridge_slave_1: entered promiscuous mode
[ 1120.789479][T27866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1120.838025][T27866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1121.001793][T27866] team0: Port device team_slave_0 added
[ 1121.068350][T27866] team0: Port device team_slave_1 added
[ 1121.300752][T27866] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1121.329839][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1121.442328][T27866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1121.478478][T27866] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1121.500003][T27866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1121.616371][T27866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1121.970168][T27866] hsr_slave_0: entered promiscuous mode
[ 1122.001808][T27866] hsr_slave_1: entered promiscuous mode
[ 1122.017562][T27866] debugfs: 'hsr0' already exists in 'hsr'
[ 1122.029929][T27866] Cannot create hsr debugfs directory
[ 1122.208517][T28354] syzkaller0: entered promiscuous mode
[ 1122.246186][T28354] syzkaller0: entered allmulticast mode
[ 1122.914521][T13186] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1123.075449][T13186] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1123.086270][T13186] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.102822][T13186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1123.111402][T13186] usb 1-1: Product: syz
[ 1123.117070][T13186] usb 1-1: Manufacturer: syz
[ 1123.121993][T13186] usb 1-1: SerialNumber: syz
[ 1123.166284][T13186] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1123.594485][T13186] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1123.605886][T13186] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1123.618972][T13186] usb 1-1: media controller created
[ 1123.638693][T13186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1124.923186][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1125.577560][T28394] syzkaller0: left promiscuous mode
[ 1125.609011][T28394] syzkaller0: left allmulticast mode
[ 1127.389303][T13186] usb 1-1: USB disconnect, device number 11
[ 1127.503896][T28424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.511564][T28424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.602912][T28424] bridge0: entered allmulticast mode
[ 1128.254880][T28441] syzkaller0: entered promiscuous mode
[ 1128.273426][T28441] syzkaller0: entered allmulticast mode
[ 1129.595785][ T5728] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1129.768662][ T5728] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1129.790903][ T5728] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.847388][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.855607][ T5728] usb 5-1: Product: syz
[ 1129.859867][ T5728] usb 5-1: Manufacturer: syz
[ 1129.864673][ T5728] usb 5-1: SerialNumber: syz
[ 1129.901405][ T5728] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1130.574435][ T5728] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1130.585036][ T5728] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1130.593327][ T5728] usb 5-1: media controller created
[ 1130.646650][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1131.817541][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'.
[ 1132.220059][T22388] usb 5-1: USB disconnect, device number 11
[ 1132.573099][T27866] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1132.684504][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1132.704964][T28528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7062'.
[ 1132.734188][T27866] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1132.759949][T28528] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1132.781817][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1132.822430][T27866] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1132.897715][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1132.925517][T27866] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1133.053410][T27866] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1133.725890][T27866] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1133.863414][T27866] 8021q: adding VLAN 0 to HW filter on device team0
[ 1133.967347][  T477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.974621][  T477] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1134.061005][T15317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1134.068268][T15317] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1134.263667][T28549] syzkaller1: entered promiscuous mode
[ 1134.321153][T28549] syzkaller1: entered allmulticast mode
[ 1134.509148][T28580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7077'.
[ 1134.580051][T28580] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1135.678568][T22396] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1135.865474][T22396] usb 8-1: Using ep0 maxpacket: 8
[ 1135.875166][T22396] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1135.919571][T22396] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.967484][T22396] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1135.997300][T22396] pvrusb2: **********
[ 1136.009793][T22396] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1136.044854][T22396] pvrusb2: Important functionality might not be entirely working.
[ 1136.066846][T22396] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1136.093776][T22396] pvrusb2: **********
[ 1136.190899][ T2352] pvrusb2: Invalid write control endpoint
[ 1136.191928][T22396] usb 8-1: USB disconnect, device number 2
[ 1136.288225][T27866] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.590564][T28629] syzkaller1: entered promiscuous mode
[ 1136.611328][T28629] syzkaller1: entered allmulticast mode
[ 1136.645046][T22385] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1136.715116][ T2352] pvrusb2: Invalid write control endpoint
[ 1136.733898][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1136.781337][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1136.800012][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1136.815242][T22385] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1136.847028][T22385] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 1136.877295][T22385] usb 5-1: config 0 has no interface number 0
[ 1136.893230][ T2352] pvrusb2: Device being rendered inoperable
[ 1136.906847][T22385] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1136.937962][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1136.963956][T22385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.988839][T22385] usb 5-1: Product: syz
[ 1137.001139][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1137.016187][T22385] usb 5-1: Manufacturer: syz
[ 1137.027084][T22385] usb 5-1: SerialNumber: syz
[ 1137.066595][T22385] usb 5-1: config 0 descriptor??
[ 1137.133485][ T2352] pvrusb2: Attached sub-driver cx25840
[ 1137.135111][T22385] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 1137.154682][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1137.209276][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1137.575595][T27866] veth0_vlan: entered promiscuous mode
[ 1137.656338][T27866] veth1_vlan: entered promiscuous mode
[ 1137.768940][T28687] syzkaller0: entered promiscuous mode
[ 1137.790907][T28687] syzkaller0: entered allmulticast mode
[ 1137.821217][T28685] tipc: Started in network mode
[ 1137.827959][T28685] tipc: Node identity , cluster identity 4711
[ 1137.834075][T28685] tipc: Failed to obtain node identity
[ 1137.858639][T28685] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1137.985805][T27866] veth0_macvtap: entered promiscuous mode
[ 1138.064035][T27866] veth1_macvtap: entered promiscuous mode
[ 1138.141790][T27866] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1138.205114][T27866] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1138.284481][  T138] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.367909][  T138] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.399466][  T138] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.568434][T15317] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.680358][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.711567][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1138.845331][T15318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.894223][T15318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.386382][    C0] usb 5-1: yurex_control_callback - control failed: -2
[ 1139.506747][T22385] usb 5-1: USB disconnect, device number 12
[ 1139.556755][T22385] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 1139.769865][T26176] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1139.791482][T26176] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1139.803075][T26176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1139.812102][T26176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1139.819735][T26176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1140.502779][T28714] syzkaller1: entered promiscuous mode
[ 1140.515371][T28714] syzkaller1: entered allmulticast mode
[ 1140.628344][T28761] tipc: Started in network mode
[ 1140.658658][T28761] tipc: Node identity f28e9ea39b95, cluster identity 4711
[ 1140.695012][T28761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1140.730946][T28754] syzkaller0: entered promiscuous mode
[ 1140.758400][T28754] syzkaller0: entered allmulticast mode
[ 1141.348520][T15318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1141.411212][T15318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.615011][T28754] tipc: Resetting bearer <eth:syzkaller0>
[ 1141.629609][T26176] Bluetooth: hci5: link tx timeout
[ 1141.635118][T26176] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1141.779737][T28754] tipc: Disabling bearer <eth:syzkaller0>
[ 1141.819167][T28802] tipc: Started in network mode
[ 1141.831117][T28802] tipc: Node identity , cluster identity 4711
[ 1141.855188][T28802] tipc: Failed to obtain node identity
[ 1141.880373][T28802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1141.924894][T26176] Bluetooth: hci3: command tx timeout
[ 1141.986688][T22388] tipc: Node number set to 1763417763
[ 1142.146131][T28824] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.153948][T28824] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.288488][T28824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1142.305720][T28824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1142.431822][T26176] Bluetooth: hci5: link tx timeout
[ 1142.437630][T26176] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1142.501509][T15318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1142.514115][T15318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.583088][T28837] syzkaller1: entered promiscuous mode
[ 1142.599505][T28837] syzkaller1: entered allmulticast mode
[ 1142.626095][  T477] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.916372][T15318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1142.931498][T13300] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1142.954056][T15318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.044688][  T138] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.066213][  T138] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.095144][T13300] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1143.106867][T13300] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1143.135353][T13300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1143.143853][T13300] usb 3-1: Product: syz
[ 1143.148767][T13300] usb 3-1: Manufacturer: syz
[ 1143.153447][T13300] usb 3-1: SerialNumber: syz
[ 1143.209240][T13300] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1143.398253][T15318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1143.436677][T15318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.596062][T28869] syzkaller0: entered promiscuous mode
[ 1143.624925][T28869] syzkaller0: entered allmulticast mode
[ 1143.670173][T28869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1143.681945][T28869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1143.709949][T26176] Bluetooth: hci5: command 0x0406 tx timeout
[ 1143.859904][T13300] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1143.916024][T13300] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1143.986244][T13300] usb 3-1: media controller created
[ 1144.025853][T21986] Bluetooth: hci3: command tx timeout
[ 1144.111006][T13300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1144.714030][T28877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.721704][T28877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.865087][T22385] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1145.045880][T22385] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1145.094213][T22385] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1145.150841][T22385] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1145.188922][T22385] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1145.200417][T22385] usb 8-1: Product: syz
[ 1145.239248][T22385] usb 8-1: Manufacturer: syz
[ 1145.251254][T28877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1145.261626][T22385] usb 8-1: SerialNumber: syz
[ 1145.267316][T28877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1145.291336][T22385] usb 8-1: config 0 descriptor??
[ 1145.390046][T22385] usb 8-1: selecting invalid altsetting 0
[ 1145.475105][ T5728] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1145.665296][ T5728] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1145.706921][ T5728] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1145.711941][T22385] usb 8-1: USB disconnect, device number 3
[ 1145.812543][ T5728] usb 9-1: config 0 has no interface number 0
[ 1145.850346][ T5728] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1145.922008][ T5728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.947322][ T5728] usb 9-1: Product: syz
[ 1145.963948][ T5728] usb 9-1: Manufacturer: syz
[ 1145.982254][ T5728] usb 9-1: SerialNumber: syz
[ 1145.997579][  T477] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.076917][ T5728] usb 9-1: config 0 descriptor??
[ 1146.085519][T21986] Bluetooth: hci3: command tx timeout
[ 1146.148914][ T5728] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1146.411665][ T5728] usb 9-1: USB disconnect, device number 8
[ 1146.417829][T22375] usb 3-1: USB disconnect, device number 5
[ 1146.570184][ T5728] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1146.874561][  T138] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.048066][  T477] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.544527][  T477] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.729898][ T5920] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1148.128302][T15318] bridge_slave_1: left allmulticast mode
[ 1148.164121][T15318] bridge_slave_1: left promiscuous mode
[ 1148.173988][T21986] Bluetooth: hci3: command tx timeout
[ 1148.189379][T15318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.256868][T15318] bridge_slave_0: left allmulticast mode
[ 1148.263144][T15318] bridge_slave_0: left promiscuous mode
[ 1148.273081][T15318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.384004][T15318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1149.414785][T15318] bond0 (unregistering): Released all slaves
[ 1149.448634][T15318] bond1 (unregistering): Released all slaves
[ 1149.484468][T22385] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1149.497747][T28955] syzkaller0: entered promiscuous mode
[ 1149.506847][T28955] syzkaller0: entered allmulticast mode
[ 1149.647855][T15318] tipc: Left network mode
[ 1149.679814][T22385] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1149.761259][T22385] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1149.818609][T22385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.861801][T22385] usb 3-1: Product: syz
[ 1149.875502][T22385] usb 3-1: Manufacturer: syz
[ 1149.926039][T22385] usb 3-1: SerialNumber: syz
[ 1150.051957][T22385] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1150.412465][T28750] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.432765][T28750] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1150.440608][T28750] bridge_slave_0: entered allmulticast mode
[ 1150.453123][T28750] bridge_slave_0: entered promiscuous mode
[ 1150.478368][T28750] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.500338][T28750] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.526711][T28750] bridge_slave_1: entered allmulticast mode
[ 1150.550405][T28750] bridge_slave_1: entered promiscuous mode
[ 1150.613771][T28750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1150.641941][T28750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1150.712356][T22385] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1150.742237][T22385] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1150.768102][T22385] usb 3-1: media controller created
[ 1150.812230][T22385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1151.400291][T28750] team0: Port device team_slave_0 added
[ 1151.473628][T28750] team0: Port device team_slave_1 added
[ 1151.914056][T28750] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.937065][T28750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.988383][T28750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1152.116478][T22396] usb 3-1: USB disconnect, device number 6
[ 1152.188816][T28750] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.236945][T28750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.348642][T28750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.473125][T29075] syzkaller0: entered promiscuous mode
[ 1152.501956][T29075] syzkaller0: entered allmulticast mode
[ 1152.559919][T29078] syzkaller0: entered promiscuous mode
[ 1152.576113][T29078] syzkaller0: entered allmulticast mode
[ 1152.599440][T29080] tipc: Started in network mode
[ 1152.615608][T29080] tipc: Node identity ead6a72dd307, cluster identity 4711
[ 1152.642467][T29080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1152.892542][T29082] tipc: Resetting bearer <eth:syzkaller0>
[ 1152.960880][T29073] tipc: Resetting bearer <eth:syzkaller0>
[ 1153.078522][T29073] tipc: Disabling bearer <eth:syzkaller0>
[ 1153.482366][T15318] hsr_slave_0: left promiscuous mode
[ 1153.522035][T15318] hsr_slave_1: left promiscuous mode
[ 1153.557454][T15318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1153.578904][T15318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1154.072002][T15318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1154.111788][T15318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1154.234139][T15318] veth1_macvtap: left promiscuous mode
[ 1154.244600][T15318] veth0_macvtap: left promiscuous mode
[ 1154.264326][T15318] veth1_vlan: left promiscuous mode
[ 1154.297167][T15318] veth0_vlan: left promiscuous mode
[ 1155.387189][T15318] team0 (unregistering): Port device team_slave_1 removed
[ 1155.438806][T29164] binder: 29162:29164 ioctl 4018620d 0 returned -22
[ 1155.458365][T15318] team0 (unregistering): Port device team_slave_0 removed
[ 1158.555533][T29184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1158.563771][T29192] syzkaller0: entered promiscuous mode
[ 1158.577980][T29192] syzkaller0: entered allmulticast mode
[ 1158.618947][T29214] syzkaller0: mtu less than device minimum
[ 1158.671959][T28750] hsr_slave_0: entered promiscuous mode
[ 1158.720274][T28750] hsr_slave_1: entered promiscuous mode
[ 1158.842519][T29192] tipc: Resetting bearer <eth:syzkaller0>
[ 1158.931051][T29192] tipc: Disabling bearer <eth:syzkaller0>
[ 1159.006324][ T5728] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[ 1159.325083][ T5728] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1159.363714][ T5728] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1159.403191][ T5728] usb 8-1: config 0 has no interface number 0
[ 1159.462967][ T5728] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1159.512821][ T5728] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1159.563664][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.630747][ T5728] usb 8-1: config 0 descriptor??
[ 1159.646556][T29216] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1159.730628][ T5728] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1159.985922][T29216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.033114][T29216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.235109][ T5728] usb 8-1: USB disconnect, device number 4
[ 1160.479051][T29253] binder: 29252:29253 ioctl 4018620d 0 returned -22
[ 1160.690964][T29253] binder: 29252:29253 ioctl c0306201 0 returned -14
[ 1160.863447][T29255] syzkaller0: entered promiscuous mode
[ 1160.880944][T29255] syzkaller0: entered allmulticast mode
[ 1165.254471][T29307] syzkaller0: mtu less than device minimum
[ 1167.023106][T29395] syzkaller0: mtu less than device minimum
[ 1169.095423][T28750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1169.158343][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1169.193290][T28750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1169.248165][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1169.285098][T28750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1169.351910][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1169.387131][T28750] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1169.462465][T28750] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1169.732074][T29458] syzkaller0: entered promiscuous mode
[ 1169.737707][T29458] syzkaller0: entered allmulticast mode
[ 1169.904539][ T5728] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1170.128882][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1170.154109][ T5728] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[ 1170.209393][ T5728] usb 3-1: config 189 has an invalid interface number: 127 but max is 0
[ 1170.256027][ T5728] usb 3-1: config 189 has no interface number 0
[ 1170.282103][ T5728] usb 3-1: config 189 interface 127 has no altsetting 0
[ 1170.323608][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.359968][ T5728] usb 3-1: Product: syz
[ 1170.387588][ T5728] usb 3-1: Manufacturer: syz
[ 1170.429149][ T5728] usb 3-1: SerialNumber: syz
[ 1170.784871][ T5728] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[ 1170.843103][ T5728] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[ 1170.877451][ T5728] usbserial_generic 3-1:189.127: device has no bulk endpoints
[ 1170.896292][ T5728] safe_serial 3-1:189.127: safe_serial converter detected
[ 1170.918513][T29482] syzkaller0: entered promiscuous mode
[ 1170.935416][T29482] syzkaller0: entered allmulticast mode
[ 1170.943311][ T5728] safe_serial 3-1:189.127: probe with driver safe_serial failed with error -22
[ 1170.985630][ T5728] usb 3-1: USB disconnect, device number 7
[ 1171.672260][T29499] syzkaller1: entered promiscuous mode
[ 1171.690554][T29499] syzkaller1: entered allmulticast mode
[ 1172.295566][T28750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1172.524477][T28750] 8021q: adding VLAN 0 to HW filter on device team0
[ 1172.548345][T15318] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1172.555584][T15318] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1172.662367][T15320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1172.669562][T15320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1172.963200][   T30] audit: type=1800 audit(1786328131.347:180): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7267" name="file0" dev="fuse" ino=0 res=0 errno=0
[ 1173.006733][ T5728] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1173.186494][ T5728] usb 10-1: Using ep0 maxpacket: 32
[ 1174.189091][ T5728] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1174.232176][ T5728] usb 10-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[ 1174.290043][ T5728] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1174.329433][ T5728] usb 10-1: can't read configurations, error -71
[ 1174.634681][T22389] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1174.818905][T22389] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1174.866550][T22389] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.923176][T22389] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.962126][T22389] usb 9-1: Product: syz
[ 1175.000490][T22389] usb 9-1: Manufacturer: syz
[ 1175.033909][T22389] usb 9-1: SerialNumber: syz
[ 1175.093762][T22389] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1175.783124][T22389] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1175.806509][T28750] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1175.832430][T22389] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1175.874065][T22389] usb 9-1: media controller created
[ 1175.986663][T22389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1176.017025][T29593] syzkaller0: entered promiscuous mode
[ 1176.040375][T29593] syzkaller0: entered allmulticast mode
[ 1176.402512][T22389] usb 9-1: USB disconnect, device number 9
[ 1176.448023][T28750] veth0_vlan: entered promiscuous mode
[ 1176.530176][T28750] veth1_vlan: entered promiscuous mode
[ 1176.567441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.571812][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7293'.
[ 1176.573804][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1176.626596][T29611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7293'.
[ 1176.723770][T28750] veth0_macvtap: entered promiscuous mode
[ 1176.803307][T28750] veth1_macvtap: entered promiscuous mode
[ 1176.909925][T28750] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1176.974111][T29618] syzkaller0: entered promiscuous mode
[ 1176.994175][T29618] syzkaller0: entered allmulticast mode
[ 1177.042099][T28750] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1177.904767][  T477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.965903][T15318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.360784][T29649] syzkaller0: entered promiscuous mode
[ 1178.378458][T29649] syzkaller0: entered allmulticast mode
[ 1178.458591][T29664] binder: BINDER_SET_CONTEXT_MGR already set
[ 1178.489037][T29664] binder: 29663:29664 ioctl 4018620d 200000000040 returned -16
[ 1178.575816][T22375] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1178.755963][T22375] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1178.779770][T22375] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.812303][T22375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.848410][T22375] usb 3-1: Product: syz
[ 1178.869766][T22375] usb 3-1: Manufacturer: syz
[ 1178.887624][T22375] usb 3-1: SerialNumber: syz
[ 1178.911483][T22375] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1178.917215][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7309'.
[ 1178.946482][T29670] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7309'.
[ 1179.551250][T22375] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1179.592516][T22375] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1179.631230][T22375] usb 3-1: media controller created
[ 1179.671788][T22375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1180.238743][T29685] netlink: 'syz.8.7314': attribute type 61 has an invalid length.
[ 1181.735573][T15320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.776031][T29683] all: renamed from macvtap0 (while UP)
[ 1181.885818][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1181.924810][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1181.937213][T13300] usb 3-1: USB disconnect, device number 8
[ 1182.133038][T29700] syzkaller0: entered promiscuous mode
[ 1182.167521][T29700] syzkaller0: entered allmulticast mode
[ 1182.201877][T15318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1182.235975][T15318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1182.347333][T29707] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.373705][T29707] binder: 29706:29707 ioctl 4018620d 200000000040 returned -16
[ 1182.805008][T29721] netlink: 'syz.2.7325': attribute type 10 has an invalid length.
[ 1182.823197][T29721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7325'.
[ 1183.192803][T29719] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1183.204220][T29720] dummy0: left promiscuous mode
[ 1183.310684][T29720] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1183.343052][T29721] dummy0: entered promiscuous mode
[ 1183.377695][T29721] bond1: (slave dummy0): Releasing backup interface
[ 1183.455964][ T6396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.766748][T21986] Bluetooth: hci1: command 0x0406 tx timeout
[ 1183.906045][T26176] Bluetooth: hci5: SCO packet for unknown connection handle 201
[ 1183.929134][T29747] netlink: 'syz.8.7328': attribute type 2 has an invalid length.
[ 1184.055626][T22375] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1184.069000][T29739] syzkaller0: entered promiscuous mode
[ 1184.081203][T29739] syzkaller0: entered allmulticast mode
[ 1184.256414][T22375] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1184.296188][T22375] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1184.340171][T22375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.348380][ T5728] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1184.374106][T22375] usb 3-1: Product: syz
[ 1184.411286][T22375] usb 3-1: Manufacturer: syz
[ 1184.431164][T22375] usb 3-1: SerialNumber: syz
[ 1184.489653][T22375] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1184.555217][ T5728] usb 9-1: Using ep0 maxpacket: 16
[ 1184.579921][ T5728] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1184.638129][ T5728] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1184.691468][ T5728] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1184.724000][ T5728] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.763398][ T5728] usb 9-1: config 0 descriptor??
[ 1184.793007][ T5728] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1184.813840][T29780] binder: BINDER_SET_CONTEXT_MGR already set
[ 1184.823300][T29780] binder: 29779:29780 ioctl 4018620d 200000000040 returned -16
[ 1185.115258][T22375] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1185.130066][T29738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1185.149471][T22375] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1185.166612][T22375] usb 3-1: media controller created
[ 1185.177263][T29738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1185.232257][T22375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1186.233577][T26176] Bluetooth: hci3: link tx timeout
[ 1186.246053][T26176] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1186.836399][T22375] usb 9-1: USB disconnect, device number 10
[ 1186.920808][T26176] Bluetooth: hci3: link tx timeout
[ 1186.926019][T26176] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1188.275474][T22375] usb 3-1: USB disconnect, device number 9
[ 1188.333859][T26176] Bluetooth: hci3: command 0x0406 tx timeout
[ 1189.579298][T29860] syzkaller0: entered promiscuous mode
[ 1189.620671][T29860] syzkaller0: entered allmulticast mode
[ 1189.662065][T29864] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 1189.964958][ T5728] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1189.972726][T22375] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1190.155630][T22375] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1190.168435][ T5728] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1190.180248][ T5728] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.192633][T22375] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.203677][T22375] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1190.220687][T22375] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1190.236614][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.247514][ T5728] usb 3-1: Product: syz
[ 1190.262759][ T5728] usb 3-1: Manufacturer: syz
[ 1190.269206][ T5728] usb 3-1: SerialNumber: syz
[ 1190.279619][T22375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.289148][T22375] usb 8-1: Product: syz
[ 1190.319300][ T5728] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1190.329115][T22375] usb 8-1: Manufacturer: syz
[ 1190.335441][T22375] usb 8-1: SerialNumber: syz
[ 1190.365958][T22385] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[ 1190.651171][T22375] cdc_ncm 8-1:1.0: bind() failure
[ 1190.682767][T22375] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[ 1190.696089][T22375] cdc_ncm 8-1:1.1: bind() failure
[ 1190.714101][T22375] usb 8-1: USB disconnect, device number 5
[ 1190.966994][ T5728] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1191.005028][ T5728] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1191.038866][ T5728] usb 3-1: media controller created
[ 1191.088470][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1191.731661][T22389] usb 3-1: USB disconnect, device number 10
[ 1192.121237][T29934] fuse: Unknown parameter 'default_p'
[ 1192.750414][T22385] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1192.808552][T22385] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 1192.867680][T29951] netlink: 'syz.8.7384': attribute type 10 has an invalid length.
[ 1192.877284][T22385] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1192.908967][T22385] usb 1-1: can't read configurations, error -71
[ 1193.018603][T29951] team0: Port device dummy0 added
[ 1193.934640][ T5625] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1194.176807][ T5625] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1194.242149][ T5625] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1194.325109][ T5625] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.361708][ T5625] usb 10-1: Product: syz
[ 1194.395077][ T5625] usb 10-1: Manufacturer: syz
[ 1194.410146][ T5625] usb 10-1: SerialNumber: syz
[ 1194.534175][ T5625] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1195.074239][T30011] netlink: 'syz.4.7399': attribute type 10 has an invalid length.
[ 1195.162865][T30011] team0: Port device dummy0 added
[ 1195.222810][ T5625] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1195.337400][ T5625] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1195.423399][ T5625] usb 10-1: media controller created
[ 1195.629343][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1195.764756][ T5728] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1195.950647][T30027] syzkaller0: entered promiscuous mode
[ 1195.977499][T30027] syzkaller0: entered allmulticast mode
[ 1196.337564][ T5625] usb 10-1: USB disconnect, device number 11
[ 1197.030066][   T30] audit: type=1326 audit(1786328155.417:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30050 comm="syz.2.7404" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0159e0d9 code=0x0
[ 1197.404724][ T5625] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1197.626569][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1197.655920][ T5625] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[ 1197.699779][ T5625] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1197.801461][ T5625] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 121, changing to 7
[ 1197.861193][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.894844][ T5625] usb 5-1: Product: syz
[ 1197.914401][ T5625] usb 5-1: Manufacturer: syz
[ 1197.930012][ T5625] usb 5-1: SerialNumber: syz
[ 1198.115443][ T5728] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1198.164625][ T5728] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 1198.207345][ T5728] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1198.273780][ T5728] usb 9-1: can't read configurations, error -71
[ 1198.453716][T30075] netlink: 'syz.2.7415': attribute type 10 has an invalid length.
[ 1198.936821][T30054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1198.984039][T30054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1199.293198][T30075] dummy0: left promiscuous mode
[ 1199.321603][T30075] team0: Port device dummy0 added
[ 1199.354491][T15323] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.386260][T15323] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.420834][T15323] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.456802][T15323] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.465918][ T5728] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1199.646308][ T5728] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1199.675320][ T5728] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.698103][ T5728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1199.706613][ T5728] usb 9-1: Product: syz
[ 1199.716532][ T5728] usb 9-1: Manufacturer: syz
[ 1199.734455][ T5728] usb 9-1: SerialNumber: syz
[ 1199.785234][ T5728] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1199.814955][T22414] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1199.862036][ T5625] usb 5-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1199.891552][ T5625] usb 5-1: found format II with max.bitrate = 3, frame size=2353
[ 1199.913208][ T5625] usb 5-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1199.938558][ T5625] usb 5-1: found format II with max.bitrate = 3, frame size=2353
[ 1199.985242][T22414] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1200.002635][ T5625] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1200.027153][T22414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1200.070042][T22414] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1200.107075][T22414] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1200.149279][T22414] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.189913][T22414] usb 10-1: config 0 descriptor??
[ 1200.332477][T30099] macvtap1: entered promiscuous mode
[ 1200.348118][T30099] veth1_to_hsr: entered promiscuous mode
[ 1200.356829][ T5625] usb 5-1: USB disconnect, device number 13
[ 1200.363040][T30099] macvtap1: entered allmulticast mode
[ 1200.383459][T30099] veth1_to_hsr: entered allmulticast mode
[ 1200.409564][ T5728] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1200.442965][ T5728] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1200.482893][ T5728] usb 9-1: media controller created
[ 1200.498739][T28372] udevd[28372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1200.593537][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1200.760808][T30118] syzkaller0: entered promiscuous mode
[ 1200.781671][T30118] syzkaller0: entered allmulticast mode
[ 1200.905229][T22414] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1200.974539][T22414] usb 10-1: USB disconnect, device number 12
[ 1201.140390][T30124] fido_id[30124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 1201.682862][ T5728] usb 9-1: USB disconnect, device number 13
[ 1202.614736][ T5625] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1202.808607][ T5625] usb 9-1: Using ep0 maxpacket: 32
[ 1202.826611][ T5625] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1202.856032][ T5625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.880804][ T5625] usb 9-1: config 0 descriptor??
[ 1203.044224][T22396] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1203.123044][T30162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1203.151516][T30162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1203.176544][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7449'.
[ 1203.222481][T22396] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1203.260000][T22396] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1203.299323][T22396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.307829][ T5625] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1203.326222][T22396] usb 5-1: Product: syz
[ 1203.341252][T22396] usb 5-1: Manufacturer: syz
[ 1203.349496][ T5625] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1203.358464][T22396] usb 5-1: SerialNumber: syz
[ 1203.382402][ T5625] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1203.397864][T22396] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1203.818696][T22396] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1203.889908][T22396] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1203.990649][T22396] usb 5-1: media controller created
[ 1204.090129][T22396] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1204.135408][T30184] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1204.181262][T30183] IPVS: stopping master sync thread 30184 ...
[ 1204.226655][T30187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'.
[ 1204.238835][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7457'.
[ 1204.269888][T30187] netlink: 'syz.2.7458': attribute type 5 has an invalid length.
[ 1204.309463][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7458'.
[ 1204.399303][T30187] geneve2: entered promiscuous mode
[ 1204.423460][T30187] geneve2: entered allmulticast mode
[ 1204.441775][  T138] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 42033 - 0
[ 1204.487821][  T138] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 42033 - 0
[ 1204.581151][  T138] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 42033 - 0
[ 1204.636094][  T138] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 42033 - 0
[ 1204.690624][T22396] usb 5-1: USB disconnect, device number 14
[ 1205.512502][T30218] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1205.769104][T22414] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1205.807390][T30230] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507
[ 1205.839175][T30230] PKCS7: Only support pkcs7_signedData type
[ 1205.946234][T22414] usb 3-1: Using ep0 maxpacket: 32
[ 1205.965811][T22414] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1205.995740][T22414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1206.016719][T22414] usb 3-1: config 0 descriptor??
[ 1206.270662][T30221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1206.305140][T30221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1206.349158][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7471'.
[ 1206.543601][T22414] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1206.636445][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7479'.
[ 1206.677456][T30245] veth1_macvtap: left promiscuous mode
[ 1209.134465][T30301] syzkaller0: entered promiscuous mode
[ 1209.166093][T30301] syzkaller0: entered allmulticast mode
[ 1211.381990][T30340] team0: Port device dummy0 removed
[ 1211.398886][T30340] netlink: 'syz.2.7513': attribute type 10 has an invalid length.
[ 1211.414679][T22396] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[ 1211.425159][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7514'.
[ 1211.437256][T30340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7513'.
[ 1211.461293][T30340] dummy0: entered promiscuous mode
[ 1211.586744][T22396] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1211.607396][T22396] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1211.627394][T22396] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1211.646913][T22396] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1211.656011][T22396] usb 10-1: Product: syz
[ 1211.664660][T22396] usb 10-1: Manufacturer: syz
[ 1211.669352][T22396] usb 10-1: SerialNumber: syz
[ 1211.685689][T22396] usb 10-1: config 0 descriptor??
[ 1211.702160][T22396] usb 10-1: selecting invalid altsetting 0
[ 1211.714625][T22398] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[ 1211.875322][T22398] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1211.908796][T22398] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1211.940445][T22398] usb 5-1: config 0 has no interface number 0
[ 1211.959308][T22398] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1211.974454][T30334] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1211.984615][T22398] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1212.003334][T30334] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1212.019326][T22398] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1212.026383][T30334] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1212.058502][T22398] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1212.072151][T30334] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1212.087619][T22398] usb 5-1: Product: syz
[ 1212.101192][T22398] usb 5-1: SerialNumber: syz
[ 1212.102965][T30334] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1212.129141][T22375] usb 10-1: USB disconnect, device number 13
[ 1212.133588][T22398] usb 5-1: config 0 descriptor??
[ 1212.167972][T22398] cm109 5-1:0.8: invalid payload size 0, expected 4
[ 1212.211801][T22398] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input13
[ 1212.588383][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1212.589041][T22375] usb 5-1: USB disconnect, device number 15
[ 1212.595369][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1212.646387][T22375] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1213.537681][T30381] team0: Port device dummy0 removed
[ 1213.566018][T30383] netlink: 'syz.4.7527': attribute type 10 has an invalid length.
[ 1213.593712][T30383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7527'.
[ 1213.626072][T30383] dummy0: entered promiscuous mode
[ 1213.936035][T30387] tipc: Started in network mode
[ 1213.950392][T30387] tipc: Node identity , cluster identity 4711
[ 1213.964684][T30387] tipc: Failed to obtain node identity
[ 1214.017267][T30387] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1214.073131][T30396] syzkaller0: entered promiscuous mode
[ 1214.094965][T30396] syzkaller0: entered allmulticast mode
[ 1214.132184][T30391] tipc: Started in network mode
[ 1214.153601][T30391] tipc: Node identity d606dea7d703, cluster identity 4711
[ 1214.288567][T30391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1214.378067][   T30] audit: type=1326 audit(1786328172.767:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30374 comm="syz.0.7525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cd7d9e0d9 code=0x0
[ 1214.416300][T30391] tipc: Resetting bearer <eth:syzkaller0>
[ 1214.488049][T30389] tipc: Resetting bearer <eth:syzkaller0>
[ 1214.617928][T30389] tipc: Disabling bearer <eth:syzkaller0>
[ 1215.030740][T30409] tun0: tun_chr_ioctl cmd 1074025675
[ 1215.092201][T30414] netlink: 'syz.8.7536': attribute type 10 has an invalid length.
[ 1215.129679][T30409] tun0: persist enabled
[ 1215.146520][T30411] tun0: tun_chr_ioctl cmd 1074025675
[ 1215.175467][T30411] tun0: persist disabled
[ 1215.203450][T30414] ipvlan0: entered allmulticast mode
[ 1215.276899][T30414] veth0_vlan: entered allmulticast mode
[ 1215.449132][T30414] team0: Device ipvlan0 failed to register rx_handler
[ 1215.752474][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7538'.
[ 1215.851978][T30416] bond1: (slave bond_slave_1): Device is not our slave
[ 1215.889662][T30416] bond1: option active_slave: invalid value (bond_slave_1)
[ 1215.952572][T30416] bond1 (unregistering): Released all slaves
[ 1216.023792][T30414] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1216.030691][T30422] veth1_macvtap: left promiscuous mode
[ 1216.055222][T22398] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[ 1216.242047][T30427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7540'.
[ 1216.245561][T22398] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1216.253422][T30429] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7539'.
[ 1216.425264][T22398] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1216.503664][T22398] usb 1-1: config 0 has no interface number 0
[ 1216.528745][T30439] netlink: 'syz.9.7544': attribute type 10 has an invalid length.
[ 1216.540138][T22398] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1216.572529][T30439] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7544'.
[ 1216.601521][T30439] dummy0: entered promiscuous mode
[ 1216.611275][T22398] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1216.665329][T22398] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1216.705258][T22398] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1216.733642][T22398] usb 1-1: Product: syz
[ 1216.746200][T22398] usb 1-1: SerialNumber: syz
[ 1216.791244][T22398] usb 1-1: config 0 descriptor??
[ 1216.830388][T22398] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 1216.864116][T22398] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input14
[ 1217.063490][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.073194][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.080394][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.087530][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.094754][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.101910][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.109092][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.116641][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.123772][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1217.134478][T22398] usb 1-1: USB disconnect, device number 14
[ 1217.134555][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1217.217300][T22398] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1217.229545][T30445] syzkaller0: entered promiscuous mode
[ 1217.262821][T30445] syzkaller0: entered allmulticast mode
[ 1217.373426][T30448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1217.649609][T30443] tipc: Resetting bearer <eth:syzkaller0>
[ 1217.818523][T30459] netlink: 'syz.8.7548': attribute type 10 has an invalid length.
[ 1217.874086][T30461] netlink: 'syz.8.7548': attribute type 10 has an invalid length.
[ 1218.214426][T22398] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1218.267828][T30470] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7552'.
[ 1218.405696][T30475] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7554'.
[ 1218.417267][T22398] usb 1-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[ 1218.461684][T22398] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[ 1218.477510][T22398] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.495595][T30478] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7555'.
[ 1218.504856][T22398] usb 1-1: config 8 has no interface number 0
[ 1218.512381][T22398] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1218.526718][T22398] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1218.686287][T22398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.695811][T22398] usb 1-1: Product: syz
[ 1218.702692][   T30] audit: type=1400 audit(1786328177.087:183): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD7800150 pid=30471 comm="syz.9.7553"
[ 1218.807363][T22398] usb 1-1: Manufacturer: syz
[ 1218.850132][T22398] usb 1-1: SerialNumber: syz
[ 1218.874221][T30483] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7557'.
[ 1219.048554][T30485] netlink: 'syz.7.7557': attribute type 10 has an invalid length.
[ 1219.065410][T30485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7557'.
[ 1219.490363][T30491] netlink: 'syz.0.7549': attribute type 10 has an invalid length.
[ 1219.663590][T30493] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7549'.
[ 1223.747852][T30443] tipc: Disabling bearer <eth:syzkaller0>
[ 1223.774629][T30461] team0: Port device dummy0 removed
[ 1223.783743][T30461] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1223.792564][T29662] tipc: Node number set to 970041133
[ 1223.812095][T30485] dummy0: entered promiscuous mode
[ 1224.228871][T22375] usb 1-1: USB disconnect, device number 15
[ 1224.409675][T30516] tun0: tun_chr_ioctl cmd 1074025675
[ 1224.442611][T30516] tun0: persist enabled
[ 1224.463327][T30516] tun0: tun_chr_ioctl cmd 1074025675
[ 1224.481499][T30516] tun0: persist disabled
[ 1224.844509][T22375] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1225.023636][T22375] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45
[ 1225.042310][T22375] usb 1-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config
[ 1225.066071][T22375] usb 1-1: config 86 has 0 interfaces, different from the descriptor's value: 2
[ 1225.113176][T22375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.138189][T22375] usb 1-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾
[ 1225.451079][T22375] usb 1-1: USB disconnect, device number 16
[ 1226.080151][T30540] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7573'.
[ 1226.341554][T30542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7574'.
[ 1226.370276][T30542] bond0: (slave dummy0): Releasing backup interface
[ 1227.244228][T30542] netlink: 'syz.8.7574': attribute type 10 has an invalid length.
[ 1227.277975][T30542] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7574'.
[ 1227.296003][T30542] dummy0: entered promiscuous mode
[ 1228.029386][T30564] netlink: 'syz.0.7581': attribute type 10 has an invalid length.
[ 1228.150695][T30564] team0: Port device dummy0 added
[ 1228.204813][T22375] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[ 1228.288899][T30568] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1228.291161][T30567] IPVS: stopping master sync thread 30568 ...
[ 1228.397953][T22375] usb 5-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[ 1228.433899][T22375] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[ 1228.462090][T22375] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.500816][T22375] usb 5-1: config 8 has no interface number 0
[ 1228.531155][T22375] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1228.585470][T22375] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1228.637587][T22375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.659289][T22375] usb 5-1: Product: syz
[ 1228.663772][T22375] usb 5-1: Manufacturer: syz
[ 1228.673920][T22375] usb 5-1: SerialNumber: syz
[ 1228.684159][T30576] binder: 30573:30576 ioctl c0306201 0 returned -14
[ 1228.819797][T30580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7587'.
[ 1229.971465][T30600] fuse: Unknown parameter 'grou00000000000000000000'
[ 1229.984053][T30596] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7591'.
[ 1230.140128][T30605] netlink: 'syz.9.7591': attribute type 10 has an invalid length.
[ 1230.151171][T30562] netlink: 'syz.4.7578': attribute type 10 has an invalid length.
[ 1230.185417][T30605] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7591'.
[ 1230.273618][T30611] netlink: 'syz.2.7595': attribute type 10 has an invalid length.
[ 1230.299561][T30602] dummy0: left promiscuous mode
[ 1230.382947][T30562] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1230.481430][T30562] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1230.529737][T30605] dummy0: entered promiscuous mode
[ 1230.553548][T30611] dummy0: left promiscuous mode
[ 1230.597187][T30611] team0: Port device dummy0 added
[ 1231.180668][T30631] binder: 30630:30631 ioctl c0306201 0 returned -14
[ 1231.338324][T15318] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1232.334119][T30646] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1233.312453][T30657] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7610'.
[ 1233.359565][T30657] dummy0: left promiscuous mode
[ 1233.384470][T30657] netlink: 'syz.9.7610': attribute type 10 has an invalid length.
[ 1233.404574][T30657] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7610'.
[ 1233.429978][T30657] dummy0: entered promiscuous mode
[ 1233.561115][T22375] usb 5-1: USB disconnect, device number 16
[ 1234.065133][T30672] syzkaller0: entered promiscuous mode
[ 1234.077436][T30672] syzkaller0: entered allmulticast mode
[ 1234.105639][T30674] binder: 30673:30674 ioctl c0306201 0 returned -14
[ 1234.213724][T30633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1234.442427][T30682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7621'.
[ 1234.454004][T30680] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1234.631099][T30689] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7624'.
[ 1234.670586][T30689] dummy0: left promiscuous mode
[ 1234.708893][T30689] netlink: 'syz.9.7624': attribute type 10 has an invalid length.
[ 1234.738933][T30689] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7624'.
[ 1234.771698][T30689] dummy0: entered promiscuous mode
[ 1235.231401][T30708] syzkaller0: entered promiscuous mode
[ 1235.262130][T30708] syzkaller0: entered allmulticast mode
[ 1236.387102][T22398] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1236.587205][T22398] usb 8-1: Using ep0 maxpacket: 8
[ 1236.604663][T22398] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1236.624690][T22398] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1236.637638][T22398] usb 8-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1236.649779][T22398] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1236.663763][T22398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.680097][T30728] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1236.692033][T22398] usb 8-1: config 0 descriptor??
[ 1237.159711][T22398] smartjoyplus 0003:6666:8804.0004: unknown main item tag 0x2
[ 1237.179586][T22398] smartjoyplus 0003:6666:8804.0004: item fetching failed at offset 4/5
[ 1237.194885][T22398] smartjoyplus 0003:6666:8804.0004: parse failed
[ 1237.217883][T22398] smartjoyplus 0003:6666:8804.0004: probe with driver smartjoyplus failed with error -22
[ 1237.321307][T22398] usb 8-1: USB disconnect, device number 6
[ 1237.386378][T30742] binder: BINDER_SET_CONTEXT_MGR already set
[ 1237.393499][T30742] binder: 30741:30742 ioctl 4018620d 200000000040 returned -16
[ 1238.006785][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.724767][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.328107][T30774] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1239.914651][T22389] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1240.074981][T22389] usb 8-1: Using ep0 maxpacket: 32
[ 1240.117978][T22389] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1240.166102][T22389] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.177458][T30816] vivid-006: disconnect
[ 1240.229909][T22389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.258146][T22389] usb 8-1: Product: syz
[ 1240.269977][T30813] vivid-006: reconnect
[ 1240.282494][T22389] usb 8-1: Manufacturer: syz
[ 1240.320831][T22389] usb 8-1: SerialNumber: syz
[ 1240.343043][T30809] syzkaller0: entered promiscuous mode
[ 1240.367028][T30809] syzkaller0: entered allmulticast mode
[ 1240.386218][T22389] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1240.411990][T22389] imon 8-1:155.0: unable to initialize intf0, err -19
[ 1240.431618][T22389] imon:imon_probe: failed to initialize context!
[ 1240.447534][T30805] syzkaller0: entered promiscuous mode
[ 1240.466858][T22389] imon 8-1:155.0: unable to register, err -19
[ 1240.481368][T30805] syzkaller0: entered allmulticast mode
[ 1240.938111][T30830] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1241.860795][T30856] vivid-008: disconnect
[ 1241.878075][T30854] vivid-008: reconnect
[ 1242.675506][T30881] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1242.976488][   T29] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[ 1243.167180][   T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1243.212925][   T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1243.241920][   T29] usb 5-1: config 0 has no interface number 0
[ 1243.258320][   T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1243.264044][T22389] usb 8-1: USB disconnect, device number 7
[ 1243.305257][   T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1243.353797][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1243.403985][   T29] usb 5-1: config 0 descriptor??
[ 1243.441062][T30880] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1243.503309][   T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1243.689638][T30880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.706102][T30880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.780297][T22389] usb 5-1: USB disconnect, device number 17
[ 1245.199704][T21986] Bluetooth: hci3: link tx timeout
[ 1245.211003][T21986] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1245.323683][   T30] audit: type=1326 audit(1786328203.707:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30915 comm="syz.2.7698" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0159e0d9 code=0x0
[ 1247.287946][T26176] Bluetooth: hci3: command 0x0406 tx timeout
[ 1248.314747][T30910] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1249.004640][T13300] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1249.285676][T13300] usb 8-1: Using ep0 maxpacket: 32
[ 1249.301119][T13300] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1249.341042][T13300] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1249.356263][T30955] syzkaller1: entered promiscuous mode
[ 1249.366028][T13300] usb 8-1: config 0 has no interfaces?
[ 1249.371721][T30955] syzkaller1: entered allmulticast mode
[ 1249.389577][T13300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.419883][T13300] usb 8-1: Product: syz
[ 1249.453647][T13300] usb 8-1: Manufacturer: syz
[ 1249.482014][T13300] usb 8-1: SerialNumber: syz
[ 1249.537704][T13300] usb 8-1: config 0 descriptor??
[ 1250.659934][T31001] syzkaller0: left promiscuous mode
[ 1250.687036][T31001] syzkaller0: left allmulticast mode
[ 1250.809231][T13300] IPVS: starting estimator thread 0...
[ 1250.926259][T31009] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1251.210109][T31014] syzkaller0: entered promiscuous mode
[ 1251.243987][T31014] syzkaller0: entered allmulticast mode
[ 1251.319725][T31020] openvswitch: netlink: IP tunnel dst address not specified
[ 1251.415654][T30589] usb 8-1: USB disconnect, device number 8
[ 1253.437952][T31076] syzkaller0: entered promiscuous mode
[ 1253.462292][T31076] syzkaller0: entered allmulticast mode
[ 1253.505941][T31076] tipc: Started in network mode
[ 1253.535928][T31076] tipc: Node identity a61d92aa9823, cluster identity 4711
[ 1253.592948][T31076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1253.641255][T31078] tipc: Resetting bearer <eth:syzkaller0>
[ 1253.678081][T31074] tipc: Resetting bearer <eth:syzkaller0>
[ 1253.813006][T31074] tipc: Disabling bearer <eth:syzkaller0>
[ 1253.955658][T31084] syzkaller0: entered promiscuous mode
[ 1254.013067][T31084] syzkaller0: entered allmulticast mode
[ 1254.289723][T31096] syzkaller0: entered promiscuous mode
[ 1254.319806][T31096] syzkaller0: entered allmulticast mode
[ 1254.607482][T22375] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1254.902209][T22375] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1257.013028][T31167] netlink: 'syz.9.7754': attribute type 8 has an invalid length.
[ 1258.556273][T31189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7757'.
[ 1258.666745][T31191] binder: 31190:31191 ioctl 4018620d 0 returned -22
[ 1260.569254][T26176] Bluetooth: hci6: command 0x0406 tx timeout
[ 1260.911749][T31209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1260.918399][T31209] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1260.939061][T31209] vhci_hcd vhci_hcd.0: Device attached
[ 1261.204463][T22375] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[ 1261.279699][T31160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1261.286612][T31163] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7754'.
[ 1261.297616][T31156] syzkaller0: entered promiscuous mode
[ 1261.303370][T31156] syzkaller0: entered allmulticast mode
[ 1261.319709][T31185] IPVS: Error connecting to the multicast addr
[ 1261.438987][T31156] tipc: Resetting bearer <eth:syzkaller0>
[ 1261.592916][T31156] tipc: Disabling bearer <eth:syzkaller0>
[ 1261.921365][T22389] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[ 1262.002771][T22389] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1262.167826][T31239] misc userio: Begin command sent, but we're already running
[ 1262.384570][T31245] binder: 31242:31245 ioctl 4018620d 0 returned -22
[ 1262.625733][T31251] syzkaller0: entered promiscuous mode
[ 1262.647938][T31251] syzkaller0: entered allmulticast mode
[ 1263.476133][T31277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7776'.
[ 1263.637791][T22414] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1263.713417][T22414] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[ 1263.751508][ T5625] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1263.773916][T22414] usb 3-1: USB disconnect, device number 11
[ 1263.843844][ T5625] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1263.896890][T31211] vhci_hcd: connection reset by peer
[ 1263.918953][ T5625] usb 9-1: USB disconnect, device number 14
[ 1263.941759][T15317] vhci_hcd vhci_hcd.2: stop threads
[ 1263.967285][T15317] vhci_hcd vhci_hcd.2: release socket
[ 1264.011611][T15317] vhci_hcd vhci_hcd.2: disconnect device
[ 1264.384744][ T5625] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1264.408587][T31308] binder: 31307:31308 ioctl 4018620d 0 returned -22
[ 1264.579208][ T5625] usb 3-1: Using ep0 maxpacket: 32
[ 1264.587588][ T5625] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1264.601361][ T5625] usb 3-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config
[ 1264.616794][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.626796][ T5625] usb 3-1: Product: syz
[ 1264.631013][ T5625] usb 3-1: Manufacturer: syz
[ 1264.638225][ T5625] usb 3-1: SerialNumber: syz
[ 1264.646196][ T5625] usb 3-1: config 0 descriptor??
[ 1264.659937][ T5625] cdc_ether 3-1:0.0: skipping garbage
[ 1264.667299][ T5625] cdc_ether 3-1:0.0: skipping garbage
[ 1264.672729][ T5625] cdc_ether 3-1:0.0: missing cdc header descriptor
[ 1264.683630][ T5625] usb 3-1: unsupported MDLM descriptors
[ 1264.728644][T22398] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1264.878533][ T5625] usb 3-1: USB disconnect, device number 12
[ 1264.904942][T22398] usb 10-1: Using ep0 maxpacket: 8
[ 1264.921798][T22398] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1264.957347][T22398] usb 10-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1264.977567][T22398] usb 10-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1264.996754][T22398] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1265.003804][T22398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.024936][T22398] usb 10-1: config 0 descriptor??
[ 1265.146456][ T5625] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[ 1265.177151][ T5625] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1265.468778][T22398] smartjoyplus 0003:6666:8804.0008: unknown main item tag 0x2
[ 1265.488455][T22398] smartjoyplus 0003:6666:8804.0008: item fetching failed at offset 4/5
[ 1265.519573][T22398] smartjoyplus 0003:6666:8804.0008: parse failed
[ 1265.551253][T22398] smartjoyplus 0003:6666:8804.0008: probe with driver smartjoyplus failed with error -22
[ 1265.672862][T22398] usb 10-1: USB disconnect, device number 14
[ 1265.905703][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7790'.
[ 1266.204430][ T5625] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1266.365237][ T5625] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1266.392240][ T5625] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1266.410977][ T5625] usb 3-1: config 0 has no interface number 0
[ 1266.424469][T22375] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1266.431851][ T5625] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1266.474171][ T5625] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1266.521727][ T5625] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1266.566076][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1266.584103][ T5625] usb 3-1: Product: syz
[ 1266.599018][ T5625] usb 3-1: SerialNumber: syz
[ 1266.633942][ T5625] usb 3-1: config 0 descriptor??
[ 1266.683879][ T5625] cm109 3-1:0.8: invalid payload size 0, expected 4
[ 1266.716450][ T5625] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input18
[ 1268.840717][    C0] cm109_urb_ctl_callback: 18 callbacks suppressed
[ 1268.840741][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.854431][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.861631][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.868849][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.876926][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.884091][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.891347][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1268.898310][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1268.907371][ T5625] usb 3-1: USB disconnect, device number 13
[ 1268.927350][ T5625] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1270.650761][T31295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1270.667939][T31292] syzkaller0: entered promiscuous mode
[ 1270.687505][T31292] syzkaller0: entered allmulticast mode
[ 1270.729752][T31338] veth1_macvtap: left promiscuous mode
[ 1270.809206][T31381] binder: 31380:31381 ioctl c0306201 0 returned -14
[ 1270.875625][T31304] tipc: Resetting bearer <eth:syzkaller0>
[ 1270.978890][T31304] tipc: Disabling bearer <eth:syzkaller0>
[ 1271.159501][T13300] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1271.225201][T13300] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1271.288921][T31383] Set syz1 is full, maxelem 6117 reached
[ 1271.462745][T31400] fido_id[31400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1272.059786][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7810'.
[ 1272.115231][T31425] binder: 31424:31425 ioctl c0306201 0 returned -14
[ 1272.296912][T31427] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7814'.
[ 1272.594514][T22389] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[ 1272.785087][T22389] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1272.801585][T22389] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[ 1272.817328][T22389] usb 10-1: config 0 has no interface number 0
[ 1272.830865][T22389] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1272.864894][T22389] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1272.883598][T22389] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1272.907238][T22389] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1272.916137][T22389] usb 10-1: Product: syz
[ 1272.928155][T22389] usb 10-1: SerialNumber: syz
[ 1272.957129][T22389] usb 10-1: config 0 descriptor??
[ 1272.968256][T22389] cm109 10-1:0.8: invalid payload size 0, expected 4
[ 1272.981668][T22389] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input19
[ 1273.340853][T22389] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1273.370188][T22389] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1273.521138][T31451] fido_id[31451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1273.997422][T31462] netlink: 'syz.4.7826': attribute type 1 has an invalid length.
[ 1274.075640][T31463] netlink: 'syz.4.7826': attribute type 10 has an invalid length.
[ 1274.084034][T31463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7826'.
[ 1275.231434][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1275.238879][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1275.246243][T13300] usb 10-1: USB disconnect, device number 15
[ 1275.246253][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1275.246278][    C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1275.289931][T13300] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1275.916391][T31462] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1275.998056][T31469] binder: 31466:31469 ioctl c0306201 0 returned -14
[ 1276.601940][T31497] syzkaller1: entered promiscuous mode
[ 1276.613841][T31497] syzkaller1: entered allmulticast mode
[ 1276.744386][T22375] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1276.917993][T22375] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1276.948273][T22375] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1276.985274][T22375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.018413][T22375] usb 8-1: config 0 descriptor??
[ 1277.088782][T31500] random: crng reseeded on system resumption
[ 1277.295427][T22375] ath6kl: Failed to submit usb control message: -71
[ 1277.304473][T22375] ath6kl: unable to send the bmi data to the device: -71
[ 1277.315565][T22375] ath6kl: Unable to send get target info: -71
[ 1277.346207][T22375] ath6kl: Failed to init ath6kl core: -71
[ 1277.353892][T22375] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1277.410850][T22375] usb 8-1: USB disconnect, device number 9
[ 1277.438988][T31510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7840'.
[ 1277.469180][T31513] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1277.897000][T22398] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1278.068492][T22398] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1278.096384][T22398] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 1278.109096][T22398] usb 5-1: config 0 has no interface number 0
[ 1278.122884][T22398] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1278.149483][T22398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.165954][T22398] usb 5-1: Product: syz
[ 1278.177345][T22398] usb 5-1: Manufacturer: syz
[ 1278.189143][T22398] usb 5-1: SerialNumber: syz
[ 1278.233433][T22398] usb 5-1: config 0 descriptor??
[ 1278.298188][T22398] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 1278.469112][T13300] usb 5-1: USB disconnect, device number 18
[ 1278.495695][T13300] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 1278.537718][T22375] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1278.574590][T22414] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1278.704918][T22375] usb 8-1: Using ep0 maxpacket: 16
[ 1278.717207][T22375] usb 8-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01
[ 1278.739342][T22375] usb 8-1: config 3 has an invalid interface number: 117 but max is 0
[ 1278.749853][T22414] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1278.761460][T22375] usb 8-1: config 3 has no interface number 0
[ 1278.771876][T22414] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1278.786311][T31555] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1278.786490][T31553] IPVS: stopping master sync thread 31555 ...
[ 1278.808117][T22414] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1278.823680][T22375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.838105][T22375] usb 8-1: Product: syz
[ 1278.843677][T22414] usb 1-1: string descriptor 0 read error: -22
[ 1278.853605][T22414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.863247][T22375] usb 8-1: Manufacturer: syz
[ 1278.870293][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7856'.
[ 1278.888183][T22375] usb 8-1: SerialNumber: syz
[ 1279.138916][T22375] usb-storage 8-1:3.117: USB Mass Storage device detected
[ 1279.257295][T22375] usb-storage 8-1:3.117: device ignored
[ 1279.443611][T22375] usb 8-1: USB disconnect, device number 10
[ 1279.521801][T22414] usb 1-1: failed to read current rate; disabling the check
[ 1279.890964][T31580] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7864'.
[ 1280.529562][T22414] usb 1-1: USB disconnect, device number 17
[ 1280.774879][T22375] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1280.934384][T22375] usb 8-1: device descriptor read/64, error -71
[ 1281.149229][T31599] IPVS: stopping master sync thread 31513 ...
[ 1281.178743][T31599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7869'.
[ 1281.204666][T22375] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1281.356243][T22375] usb 8-1: device descriptor read/64, error -71
[ 1281.496504][T22375] usb usb8-port1: attempt power cycle
[ 1281.505600][T22414] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1281.674663][T22398] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1281.687080][T22414] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 1281.737964][T22414] usb 1-1: Dual-Role OTG device on HNP port
[ 1281.767748][T22414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.837990][T22414] gspca_main: spca501-2.14.0 probing 0000:0000
[ 1281.868867][T22414] gspca_spca501: reg write: error -32
[ 1281.879698][T22398] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1281.879865][T22414] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 1281.896184][T22375] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1281.911300][T31610] binder: BINDER_SET_CONTEXT_MGR already set
[ 1281.926199][T31610] binder: 31609:31610 ioctl 4018620d 200000004a80 returned -16
[ 1281.940868][T22398] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1281.956441][T22375] usb 8-1: device descriptor read/8, error -71
[ 1281.962859][T22414] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 1281.969605][T22398] usb 3-1: config 0 has no interface number 0
[ 1281.991824][T22398] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1282.032349][T22398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.060554][T31617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7876'.
[ 1282.071582][T22398] usb 3-1: Product: syz
[ 1282.081964][T22398] usb 3-1: Manufacturer: syz
[ 1282.108185][T22398] usb 3-1: SerialNumber: syz
[ 1282.120627][T31620] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7877'.
[ 1282.167608][T22398] usb 3-1: config 0 descriptor??
[ 1282.215989][T22375] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1282.241083][T22398] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[ 1282.258866][T31628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7876'.
[ 1282.271928][T22375] usb 8-1: device descriptor read/8, error -71
[ 1282.405145][T22375] usb usb8-port1: unable to enumerate USB device
[ 1282.431625][T22398] usb 3-1: USB disconnect, device number 14
[ 1282.477548][T31626] bridge0: port 3(hsr0) entered blocking state
[ 1282.496670][T22398] yurex 3-1:0.50: USB YUREX #0 now disconnected
[ 1282.513421][T31626] bridge0: port 3(hsr0) entered disabled state
[ 1282.536735][T31626] hsr0: entered allmulticast mode
[ 1282.565420][T31626] hsr_slave_0: entered allmulticast mode
[ 1282.589323][T31626] hsr_slave_1: entered allmulticast mode
[ 1282.656422][T31626] hsr0: entered promiscuous mode
[ 1282.729161][T22414] cdc_acm 1-1:1.2: ttyACM0: USB ACM device
[ 1283.061270][T31643] IPVS: Error connecting to the multicast addr
[ 1283.356161][T22389] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1283.526783][T22389] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 1283.563277][T22389] usb 3-1: config index 0 descriptor too short (expected 7768, got 18)
[ 1283.583185][T22389] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1283.604466][T22389] usb 3-1: config 0 has no interface number 0
[ 1283.625183][T22389] usb 3-1: too many endpoints for config 0 interface 8 altsetting 91: 227, using maximum allowed: 30
[ 1283.651960][T22389] usb 3-1: config 0 interface 8 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 227
[ 1283.679805][T22389] usb 3-1: config 0 interface 8 has no altsetting 0
[ 1283.696544][T22389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.757965][T22389] usb 3-1: config 0 descriptor??
[ 1284.000198][T22389] usb 3-1: string descriptor 0 read error: -71
[ 1284.089829][T22389] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected
[ 1284.265408][T22389] ftdi_sio ttyUSB0: unknown device type: 0x524d
[ 1284.329082][T22389] usb 3-1: USB disconnect, device number 15
[ 1284.396559][T22389] ftdi_sio 3-1:0.8: device disconnected
[ 1284.545400][T22375] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1284.776349][T22375] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1284.836861][T22375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1284.876067][T22375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1284.901423][T31682] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7892'.
[ 1284.923478][T22375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.945574][T22375] usb 5-1: Product: syz
[ 1284.965813][T22375] usb 5-1: Manufacturer: syz
[ 1284.983645][T22375] usb 5-1: SerialNumber: syz
[ 1285.028448][T22375] usb 5-1: 0:1 : does not exist
[ 1285.055555][T22375] usb 5-1: 0:2 : does not exist
[ 1285.078780][T22375] usb 5-1: unit 0 not found!
[ 1285.354490][T31690] tun0: tun_chr_ioctl cmd 1074025675
[ 1285.402265][T31690] tun0: persist enabled
[ 1285.427134][T31690] tun0: tun_chr_ioctl cmd 1074025675
[ 1285.489939][T31690] tun0: persist disabled
[ 1285.553516][T22375] usb 5-1: USB disconnect, device number 19
[ 1285.593893][T31702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1285.791749][T31702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1285.954812][   T29] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1285.982956][T28268] udevd[28268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1286.174482][   T29] usb 3-1: Using ep0 maxpacket: 16
[ 1286.181361][   T29] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1286.211285][   T29] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[ 1286.228741][   T29] usb 3-1: config 0 has no interface number 0
[ 1286.240820][   T29] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1286.261561][   T29] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1286.323650][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.334575][   T29] usb 3-1: Product: syz
[ 1286.342814][   T29] usb 3-1: Manufacturer: syz
[ 1286.351959][   T29] usb 3-1: SerialNumber: syz
[ 1286.416266][   T29] usb 3-1: config 0 descriptor??
[ 1286.443275][T31706] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1286.466279][T31706] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1286.504609][T22375] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1286.655886][T22375] usb 5-1: device descriptor read/64, error -71
[ 1286.687834][T31706] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1286.725533][T31706] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1286.762439][T31722] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1286.774213][T31720] IPVS: stopping master sync thread 31722 ...
[ 1286.914660][T22375] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1286.940054][   T29] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1287.094826][T22375] usb 5-1: device descriptor read/64, error -71
[ 1287.166616][T31728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7903'.
[ 1287.215219][T22375] usb usb5-port1: attempt power cycle
[ 1287.589218][T22375] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1287.657034][T22375] usb 5-1: device descriptor read/8, error -71
[ 1287.661305][T31736] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7906'.
[ 1287.836909][T31741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7908'.
[ 1287.856011][T31741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7908'.
[ 1287.904410][T22375] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1287.947595][T22375] usb 5-1: device descriptor read/8, error -71
[ 1288.081934][T22375] usb usb5-port1: unable to enumerate USB device
[ 1288.175495][T31754] tun0: tun_chr_ioctl cmd 1074025675
[ 1288.182464][T31754] tun0: persist enabled
[ 1288.188924][T31754] tun0: tun_chr_ioctl cmd 1074025675
[ 1288.199579][T31754] tun0: persist disabled
[ 1288.291330][T31754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1288.302735][T31754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1288.346165][   T29] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1288.372724][   T29] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1288.384091][   T29] asix 3-1:0.34: probe with driver asix failed with error -71
[ 1288.389373][T31760] IPVS: Error connecting to the multicast addr
[ 1288.398971][   T29] usb 3-1: USB disconnect, device number 16
[ 1288.406052][T22389] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[ 1288.566441][T22389] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1288.576721][T22389] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1288.587677][T22389] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.598701][T22389] usb 8-1: config 0 descriptor??
[ 1288.827130][T22389] ath6kl: Failed to submit usb control message: -71
[ 1288.834712][T22389] ath6kl: unable to send the bmi data to the device: -71
[ 1288.852986][T22389] ath6kl: Unable to send get target info: -71
[ 1288.860412][T22389] ath6kl: Failed to init ath6kl core: -71
[ 1288.883477][T22389] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1288.920045][T22389] usb 8-1: USB disconnect, device number 15
[ 1288.953067][T31767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7917'.
[ 1289.024463][T22398] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1289.187420][T22398] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1289.209765][T22398] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1289.233876][T22398] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.269044][T22398] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1289.332956][T22398] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.333157][T31776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7921'.
[ 1289.378929][T22398] usb 9-1: config 0 descriptor??
[ 1289.868203][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1289.883260][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1289.934124][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1289.982004][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.035666][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.054457][T22375] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1290.067417][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.103796][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.133682][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.143843][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.163364][T22398] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1290.307497][T22375] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1290.327803][T22398] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1290.360125][T22375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1290.409981][T22375] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1290.453384][T22375] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1290.455471][T22398] usb 9-1: USB disconnect, device number 15
[ 1290.535973][T22375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.689273][T22375] usb 3-1: config 0 descriptor??
[ 1290.704228][T31800] fido_id[31800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[ 1291.046166][T31809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1291.205331][T22375] waltop 0003:172F:0501.000C: hidraw0: USB HID vff.fe Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0
[ 1291.400270][T30589] usb 3-1: USB disconnect, device number 17
[ 1291.733524][T31817] fido_id[31817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1291.947795][T31827] tun0: tun_chr_ioctl cmd 1074025675
[ 1291.992845][T31827] tun0: persist enabled
[ 1292.037883][T31822] tun0: tun_chr_ioctl cmd 1074025675
[ 1292.075447][T31822] tun0: persist disabled
[ 1292.110002][T31834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[ 1292.140506][T31826] IPVS: stopping master sync thread 31834 ...
[ 1292.191477][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7935'.
[ 1292.432229][T31837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7937'.
[ 1292.450856][T30589] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1292.646012][T30589] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45
[ 1292.692217][T30589] usb 5-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config
[ 1292.725609][T30589] usb 5-1: config 86 has 0 interfaces, different from the descriptor's value: 2
[ 1292.772052][T30589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.803492][T30589] usb 5-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾
[ 1293.104107][T30589] usb 5-1: USB disconnect, device number 24
[ 1294.384532][T30589] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[ 1294.568370][T30589] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1294.602737][T30589] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1294.633779][T30589] usb 9-1: config 0 has no interface number 0
[ 1294.668278][T30589] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1294.718192][T30589] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1294.750006][T30589] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1294.761749][T31885] netlink: 'syz.0.7951': attribute type 12 has an invalid length.
[ 1294.763630][T30589] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1294.787049][T30589] usb 9-1: Product: syz
[ 1294.805886][T30589] usb 9-1: SerialNumber: syz
[ 1294.841148][T31883] IPVS: Error connecting to the multicast addr
[ 1294.851870][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'.
[ 1294.862787][T30589] usb 9-1: config 0 descriptor??
[ 1294.879230][T30589] cm109 9-1:0.8: invalid payload size 0, expected 4
[ 1294.903643][T30589] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input21
[ 1295.019487][T31890] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7952'.
[ 1295.343540][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1295.344109][T22398] usb 9-1: USB disconnect, device number 16
[ 1295.350531][    C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1295.452769][T22398] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1295.747495][T13300] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1295.825357][T30589] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1295.918914][T13300] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1295.945842][T13300] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[ 1295.964719][T13300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1295.985508][T13300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1296.011999][T13300] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1296.014715][T22398] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1296.025188][T30589] usb 3-1: Using ep0 maxpacket: 8
[ 1296.047317][T30589] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1296.060318][T13300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.081964][T30589] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1296.107900][T30589] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1296.108982][T13300] usb 8-1: config 0 descriptor??
[ 1296.126937][T30589] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1296.147111][T30589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.178074][T30589] usb 3-1: config 0 descriptor??
[ 1296.225166][T22398] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1296.260531][T22398] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1296.286391][T22398] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1296.321192][T22398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1296.348715][T22398] usb 5-1: SerialNumber: syz
[ 1296.566345][T13300] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd
[ 1296.593588][T22398] usb 5-1: 0:2 : does not exist
[ 1296.606311][T22398] usb 5-1: unit 5 not found!
[ 1296.622702][T30589] hid_parser_main: 29 callbacks suppressed
[ 1296.622726][T30589] smartjoyplus 0003:6666:8804.000E: unknown main item tag 0x2
[ 1296.669557][T13300] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1296.687291][T29662] usb 1-1: USB disconnect, device number 18
[ 1296.694378][T30589] smartjoyplus 0003:6666:8804.000E: item fetching failed at offset 4/5
[ 1296.729843][T30589] smartjoyplus 0003:6666:8804.000E: parse failed
[ 1296.761005][T30589] smartjoyplus 0003:6666:8804.000E: probe with driver smartjoyplus failed with error -22
[ 1296.842619][T30589] usb 3-1: USB disconnect, device number 18
[ 1296.847052][T22398] usb 5-1: USB disconnect, device number 25
[ 1296.990349][T22389] usb 8-1: USB disconnect, device number 16
[ 1297.629977][T29662] ==================================================================
[ 1297.638090][T29662] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x602/0x7b0
[ 1297.646259][T29662] Write of size 8 at addr ffff88802f36c350 by task kworker/0:0/29662
[ 1297.654321][T29662] 
[ 1297.656639][T29662] CPU: 0 UID: 0 PID: 29662 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1297.656664][T29662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1297.656679][T29662] Workqueue: usb_hub_wq hub_event
[ 1297.656717][T29662] Call Trace:
[ 1297.656727][T29662]  <TASK>
[ 1297.656737][T29662]  dump_stack_lvl+0xe8/0x150
[ 1297.656769][T29662]  print_address_description+0x55/0x1e0
[ 1297.656800][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1297.656832][T29662]  print_report+0x58/0x70
[ 1297.656859][T29662]  kasan_report+0x117/0x150
[ 1297.656892][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1297.656935][T29662]  snd_usb_midi_v2_free+0x602/0x7b0
[ 1297.656974][T29662]  snd_usb_midi_v2_free_all+0x67/0x90
[ 1297.657008][T29662]  snd_usb_audio_free+0x4c/0x100
[ 1297.657035][T29662]  ? __pfx_snd_usb_audio_free+0x10/0x10
[ 1297.657059][T29662]  release_card_device+0xab/0x1b0
[ 1297.657093][T29662]  ? __pfx_release_card_device+0x10/0x10
[ 1297.657125][T29662]  device_release+0xc4/0x1f0
[ 1297.657156][T29662]  kobject_put+0x222/0x550
[ 1297.657181][T29662]  usb_unbind_interface+0x295/0x9f0
[ 1297.657216][T29662]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1297.657243][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657269][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657296][T29662]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1297.657331][T29662]  device_release_driver_internal+0x4f5/0x880
[ 1297.657361][T29662]  bus_remove_device+0x444/0x560
[ 1297.657398][T29662]  ? __pfx_bus_remove_device+0x10/0x10
[ 1297.657433][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657459][T29662]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1297.657483][T29662]  device_del+0x524/0x8f0
[ 1297.657511][T29662]  ? __pfx_device_del+0x10/0x10
[ 1297.657533][T29662]  ? __pfx___mutex_lock+0x10/0x10
[ 1297.657569][T29662]  usb_disable_device+0x3d4/0x8d0
[ 1297.657607][T29662]  usb_disconnect+0x346/0x9a0
[ 1297.657645][T29662]  hub_event+0x1bbb/0x4d30
[ 1297.657685][T29662]  ? register_lock_class+0x31/0x2e0
[ 1297.657717][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657745][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657771][T29662]  ? trace_hrtimer_start+0x82/0x200
[ 1297.657804][T29662]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1297.657830][T29662]  ? __pfx_hub_event+0x10/0x10
[ 1297.657862][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657892][T29662]  ? rcu_is_watching+0x15/0xb0
[ 1297.657933][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.657960][T29662]  ? process_scheduled_works+0xa20/0x14e0
[ 1297.657985][T29662]  process_scheduled_works+0xa8e/0x14e0
[ 1297.658025][T29662]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1297.658052][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.658077][T29662]  ? assign_work+0x3cf/0x5d0
[ 1297.658103][T29662]  worker_thread+0xa47/0xfb0
[ 1297.658129][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.658161][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.658186][T29662]  ? __kthread_parkme+0x71/0x1f0
[ 1297.658219][T29662]  kthread+0x388/0x470
[ 1297.658249][T29662]  ? __pfx_worker_thread+0x10/0x10
[ 1297.658273][T29662]  ? __pfx_kthread+0x10/0x10
[ 1297.658303][T29662]  ret_from_fork+0x514/0xb70
[ 1297.658337][T29662]  ? __pfx_ret_from_fork+0x10/0x10
[ 1297.658367][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1297.658392][T29662]  ? __switch_to+0xc89/0x1420
[ 1297.658420][T29662]  ? __pfx_kthread+0x10/0x10
[ 1297.658451][T29662]  ret_from_fork_asm+0x1a/0x30
[ 1297.658493][T29662]  </TASK>
[ 1297.658501][T29662] 
[ 1297.986444][T29662] Allocated by task 22414:
[ 1297.990844][T29662]  kasan_save_track+0x3e/0x80
[ 1297.995523][T29662]  __kasan_kmalloc+0x93/0xb0
[ 1298.000110][T29662]  __kmalloc_cache_noprof+0x32d/0x660
[ 1298.005478][T29662]  snd_ump_endpoint_new+0x7d/0x3d0
[ 1298.010579][T29662]  create_midi2_ump+0x314/0x7b0
[ 1298.015429][T29662]  snd_usb_midi_v2_create+0x140d/0x4ac0
[ 1298.021064][T29662]  snd_usb_create_stream+0x262/0x630
[ 1298.026346][T29662]  usb_audio_probe+0x1447/0x2280
[ 1298.031278][T29662]  usb_probe_interface+0x653/0xc60
[ 1298.036378][T29662]  really_probe+0x254/0xae0
[ 1298.040875][T29662]  __driver_probe_device+0x1e8/0x360
[ 1298.046153][T29662]  driver_probe_device+0x4f/0x240
[ 1298.051201][T29662]  __device_attach_driver+0x270/0x410
[ 1298.056566][T29662]  bus_for_each_drv+0x258/0x2f0
[ 1298.061422][T29662]  __device_attach+0x2c4/0x450
[ 1298.066180][T29662]  device_initial_probe+0xa1/0xd0
[ 1298.071198][T29662]  bus_probe_device+0x12a/0x220
[ 1298.076046][T29662]  device_add+0x7d7/0xb80
[ 1298.080399][T29662]  usb_set_configuration+0x1ad8/0x2180
[ 1298.085859][T29662]  usb_generic_driver_probe+0x8d/0x150
[ 1298.091354][T29662]  usb_probe_device+0x1c3/0x3b0
[ 1298.096193][T29662]  really_probe+0x254/0xae0
[ 1298.100689][T29662]  __driver_probe_device+0x1e8/0x360
[ 1298.105965][T29662]  driver_probe_device+0x4f/0x240
[ 1298.110980][T29662]  __device_attach_driver+0x270/0x410
[ 1298.116355][T29662]  bus_for_each_drv+0x258/0x2f0
[ 1298.121204][T29662]  __device_attach+0x2c4/0x450
[ 1298.125960][T29662]  device_initial_probe+0xa1/0xd0
[ 1298.130978][T29662]  bus_probe_device+0x12a/0x220
[ 1298.135827][T29662]  device_add+0x7d7/0xb80
[ 1298.140142][T29662]  usb_new_device+0x9aa/0x1690
[ 1298.144904][T29662]  hub_event+0x28e8/0x4d30
[ 1298.149325][T29662]  process_scheduled_works+0xa8e/0x14e0
[ 1298.154860][T29662]  worker_thread+0xa47/0xfb0
[ 1298.159445][T29662]  kthread+0x388/0x470
[ 1298.163520][T29662]  ret_from_fork+0x514/0xb70
[ 1298.168110][T29662]  ret_from_fork_asm+0x1a/0x30
[ 1298.172875][T29662] 
[ 1298.175187][T29662] Freed by task 29662:
[ 1298.179239][T29662]  kasan_save_track+0x3e/0x80
[ 1298.183915][T29662]  kasan_save_free_info+0x40/0x50
[ 1298.188928][T29662]  __kasan_slab_free+0x5c/0x80
[ 1298.193687][T29662]  kfree+0x1c5/0x640
[ 1298.197569][T29662]  snd_rawmidi_free+0x400/0x420
[ 1298.202421][T29662]  snd_rawmidi_dev_free+0x38/0x50
[ 1298.207452][T29662]  snd_device_free_all+0x2c7/0x7a0
[ 1298.212558][T29662]  release_card_device+0x75/0x1b0
[ 1298.217580][T29662]  device_release+0xc4/0x1f0
[ 1298.222211][T29662]  kobject_put+0x222/0x550
[ 1298.226616][T29662]  usb_unbind_interface+0x295/0x9f0
[ 1298.231818][T29662]  device_release_driver_internal+0x4f5/0x880
[ 1298.237880][T29662]  bus_remove_device+0x444/0x560
[ 1298.242829][T29662]  device_del+0x524/0x8f0
[ 1298.247144][T29662]  usb_disable_device+0x3d4/0x8d0
[ 1298.252208][T29662]  usb_disconnect+0x346/0x9a0
[ 1298.256877][T29662]  hub_event+0x1bbb/0x4d30
[ 1298.261317][T29662]  process_scheduled_works+0xa8e/0x14e0
[ 1298.266860][T29662]  worker_thread+0xa47/0xfb0
[ 1298.271450][T29662]  kthread+0x388/0x470
[ 1298.275516][T29662]  ret_from_fork+0x514/0xb70
[ 1298.280108][T29662]  ret_from_fork_asm+0x1a/0x30
[ 1298.284881][T29662] 
[ 1298.287192][T29662] The buggy address belongs to the object at ffff88802f36c000
[ 1298.287192][T29662]  which belongs to the cache kmalloc-4k of size 4096
[ 1298.301239][T29662] The buggy address is located 848 bytes inside of
[ 1298.301239][T29662]  freed 4096-byte region [ffff88802f36c000, ffff88802f36d000)
[ 1298.315115][T29662] 
[ 1298.317427][T29662] The buggy address belongs to the physical page:
[ 1298.323819][T29662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f368
[ 1298.332567][T29662] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1298.341060][T29662] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1298.348596][T29662] page_type: f5(slab)
[ 1298.352568][T29662] raw: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122
[ 1298.361143][T29662] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1298.369729][T29662] head: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122
[ 1298.378404][T29662] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1298.387110][T29662] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1298.395772][T29662] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1298.404426][T29662] page dumped because: kasan: bad access detected
[ 1298.410822][T29662] page_owner tracks the page as allocated
[ 1298.416517][T29662] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4979, tgid 4979 (udevd), ts 32364139837, free_ts 32337733555
[ 1298.436491][T29662]  post_alloc_hook+0x1f9/0x250
[ 1298.441263][T29662]  get_page_from_freelist+0x21fa/0x2270
[ 1298.446810][T29662]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1298.452617][T29662]  allocate_slab+0x79/0x5e0
[ 1298.457105][T29662]  refill_objects+0x2d5/0x350
[ 1298.461771][T29662]  __pcs_replace_empty_main+0x2bf/0x6b0
[ 1298.467317][T29662]  __kmalloc_noprof+0x485/0x720
[ 1298.472163][T29662]  tomoyo_realpath_from_path+0xef/0x640
[ 1298.477705][T29662]  tomoyo_check_open_permission+0x229/0x470
[ 1298.483604][T29662]  security_file_open+0xa9/0x240
[ 1298.488540][T29662]  do_dentry_open+0x4a0/0x1380
[ 1298.493389][T29662]  vfs_open+0x3b/0x340
[ 1298.497539][T29662]  path_openat+0x2e44/0x3830
[ 1298.502132][T29662]  do_file_open+0x23e/0x4a0
[ 1298.506635][T29662]  do_sys_openat2+0x115/0x200
[ 1298.511315][T29662]  __x64_sys_openat+0x138/0x170
[ 1298.516163][T29662] page last free pid 4981 tgid 4981 stack trace:
[ 1298.522474][T29662]  __free_frozen_pages+0xc1e/0xd10
[ 1298.527588][T29662]  __slab_free+0x274/0x2c0
[ 1298.532005][T29662]  qlist_free_all+0x99/0x100
[ 1298.536588][T29662]  kasan_quarantine_reduce+0x148/0x160
[ 1298.542300][T29662]  __kasan_slab_alloc+0x22/0x80
[ 1298.547147][T29662]  __kmalloc_cache_noprof+0x2ab/0x660
[ 1298.552517][T29662]  kernfs_fop_open+0x7e6/0xce0
[ 1298.557281][T29662]  do_dentry_open+0x816/0x1380
[ 1298.562075][T29662]  vfs_open+0x3b/0x340
[ 1298.566225][T29662]  path_openat+0x2e44/0x3830
[ 1298.570819][T29662]  do_file_open+0x23e/0x4a0
[ 1298.575324][T29662]  do_sys_openat2+0x115/0x200
[ 1298.579999][T29662]  __x64_sys_openat+0x138/0x170
[ 1298.584845][T29662]  do_syscall_64+0x174/0x580
[ 1298.589433][T29662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.595318][T29662] 
[ 1298.597626][T29662] Memory state around the buggy address:
[ 1298.603237][T29662]  ffff88802f36c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1298.611286][T29662]  ffff88802f36c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1298.619338][T29662] >ffff88802f36c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1298.627383][T29662]                                                  ^
[ 1298.634044][T29662]  ffff88802f36c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1298.642097][T29662]  ffff88802f36c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1298.650145][T29662] ==================================================================
[ 1298.738255][T31950] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7967'.
[ 1298.877803][T29662] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1298.885049][T29662] CPU: 0 UID: 0 PID: 29662 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1298.894513][T29662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1298.904577][T29662] Workqueue: usb_hub_wq hub_event
[ 1298.909633][T29662] Call Trace:
[ 1298.912918][T29662]  <TASK>
[ 1298.915849][T29662]  vpanic+0x56c/0xa60
[ 1298.919865][T29662]  ? __pfx_vpanic+0x10/0x10
[ 1298.924400][T29662]  ? __pfx___schedule+0x10/0x10
[ 1298.929278][T29662]  panic+0xc5/0xd0
[ 1298.933027][T29662]  ? __pfx_panic+0x10/0x10
[ 1298.937466][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1298.943114][T29662]  ? preempt_schedule_common+0x82/0xd0
[ 1298.948597][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1298.954040][T29662]  check_panic_on_warn+0x89/0xb0
[ 1298.959001][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1298.964396][T29662]  end_report+0x73/0x170
[ 1298.968664][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1298.974064][T29662]  kasan_report+0x128/0x150
[ 1298.978595][T29662]  ? snd_usb_midi_v2_free+0x602/0x7b0
[ 1298.983994][T29662]  snd_usb_midi_v2_free+0x602/0x7b0
[ 1298.989223][T29662]  snd_usb_midi_v2_free_all+0x67/0x90
[ 1298.994607][T29662]  snd_usb_audio_free+0x4c/0x100
[ 1298.999543][T29662]  ? __pfx_snd_usb_audio_free+0x10/0x10
[ 1299.005083][T29662]  release_card_device+0xab/0x1b0
[ 1299.010113][T29662]  ? __pfx_release_card_device+0x10/0x10
[ 1299.015747][T29662]  device_release+0xc4/0x1f0
[ 1299.020460][T29662]  kobject_put+0x222/0x550
[ 1299.024871][T29662]  usb_unbind_interface+0x295/0x9f0
[ 1299.030082][T29662]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1299.035801][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.041444][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.047072][T29662]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1299.052885][T29662]  device_release_driver_internal+0x4f5/0x880
[ 1299.058962][T29662]  bus_remove_device+0x444/0x560
[ 1299.063916][T29662]  ? __pfx_bus_remove_device+0x10/0x10
[ 1299.069385][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.075018][T29662]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1299.080735][T29662]  device_del+0x524/0x8f0
[ 1299.085069][T29662]  ? __pfx_device_del+0x10/0x10
[ 1299.089919][T29662]  ? __pfx___mutex_lock+0x10/0x10
[ 1299.094989][T29662]  usb_disable_device+0x3d4/0x8d0
[ 1299.100025][T29662]  usb_disconnect+0x346/0x9a0
[ 1299.104710][T29662]  hub_event+0x1bbb/0x4d30
[ 1299.109139][T29662]  ? register_lock_class+0x31/0x2e0
[ 1299.114338][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.119970][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.125629][T29662]  ? trace_hrtimer_start+0x82/0x200
[ 1299.130831][T29662]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1299.136200][T29662]  ? __pfx_hub_event+0x10/0x10
[ 1299.140970][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.146657][T29662]  ? rcu_is_watching+0x15/0xb0
[ 1299.151427][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.157055][T29662]  ? process_scheduled_works+0xa20/0x14e0
[ 1299.162766][T29662]  process_scheduled_works+0xa8e/0x14e0
[ 1299.168324][T29662]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1299.174300][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.179929][T29662]  ? assign_work+0x3cf/0x5d0
[ 1299.184517][T29662]  worker_thread+0xa47/0xfb0
[ 1299.189114][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.194751][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.200379][T29662]  ? __kthread_parkme+0x71/0x1f0
[ 1299.205322][T29662]  kthread+0x388/0x470
[ 1299.209393][T29662]  ? __pfx_worker_thread+0x10/0x10
[ 1299.214521][T29662]  ? __pfx_kthread+0x10/0x10
[ 1299.219113][T29662]  ret_from_fork+0x514/0xb70
[ 1299.223710][T29662]  ? __pfx_ret_from_fork+0x10/0x10
[ 1299.228824][T29662]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1299.234456][T29662]  ? __switch_to+0xc89/0x1420
[ 1299.239132][T29662]  ? __pfx_kthread+0x10/0x10
[ 1299.243723][T29662]  ret_from_fork_asm+0x1a/0x30
[ 1299.248498][T29662]  </TASK>
[ 1299.251730][T29662] Kernel Offset: disabled
[ 1299.256045][T29662] Rebooting in 86400 seconds..