last executing test programs:

42m22.263042868s ago: executing program 1 (id=18):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd6)
r0 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95)
read$FUSE(r4, &(0x7f0000008bc0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50)

42m17.832305693s ago: executing program 1 (id=21):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)

42m15.073364338s ago: executing program 1 (id=27):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
io_uring_setup(0x21b4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, &(0x7f00000006c0)=0x8)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x280, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x2, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd413, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

42m9.238673918s ago: executing program 1 (id=33):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803)
syz_open_pts(0xffffffffffffffff, 0x2800)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8980, 0x0)
ioctl$FBIOGET_FSCREENINFO(r6, 0x4602, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

42m5.705212174s ago: executing program 1 (id=36):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x24000051)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

42m1.415185978s ago: executing program 1 (id=40):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0xc06c4124, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(0x0)

41m44.500983342s ago: executing program 32 (id=40):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0xc06c4124, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(0x0)

40m10.869829655s ago: executing program 2 (id=232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
syz_emit_ethernet(0xb8, &(0x7f0000000300)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "001708", 0x7e, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "2f49a2006eaf07477ba0755fc8d162b1e8acc9a3e976b60aecf4f54dbd31cf221a5701f33469be5041ac14492eddf82b34bdd28e2fdfd2f76341"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x8000000, 0x4}}}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000)

40m10.163029559s ago: executing program 2 (id=234):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc)

40m10.030008546s ago: executing program 2 (id=235):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x11, 0x800000003, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
r0 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xe2}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x9, 0x0, 0x10, 0x7}, 0xf8, &(0x7f00000004c0)=ANY=[@ANYBLOB="050ff8000503100bc31003ab2bf6688256a07b45295f4b9c0228409bf65165aafad0edef4e138f256fc4ea897c4935d80c409971f64faa0639b838ff81108cc26c2ba7cb336f84a96377d8dea78f132e3d53fd3f55dddb21d251c6d32a5abc0c04d2e280ed0de619dd52e7115461d4acd59bbb55a403a93de2b917fa45e24b266f9423b13d153c7dd16b4a9360ed4e0c1eb1028c78f6cc4b020000005d88362c2b00dcb469c430acbb0f756aba3c9ea40e4445400afd2851ef6452f2231e1915bd05682d8be381793beaf00a1003000200060601001c100a00a40000000f0f4947c0000000f03f00005fc0ff0000c0000007100210340000"], 0x3, [{0xd4, &(0x7f0000000600)=@string={0xd4, 0x3, "483ca017024a31572ed73bf915d1311347f19bed243e0a1adca6d4caebb9e7ff7c0711f60520bc1ed166e84560e1e2815c7e13e61de36706cebb3640ad0ffab0db70262a524dd10254811c46afc6fc1a1908043ded7ce3a32411f11e8f2d21e51929bbb82fd64815d4e68767fc48882ad010874016a029d48bd7bed4d5e14f540112eaba6efd1f97ce6164e0736c03ec6925d62d71e329c036fbcae51edb2787d78252fe10d5295c8d9073747b64af49e085c4c396f79be31d152cec8c8579c5eeb8ec760145a47168ad9cf6d9372c0b1ae6"}}, {0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "17b26f492c601e29aec9ffdb67a85525de2c705b9fd3dfa4f2517aba63881b9fb9e53251f729daa7290a66832b4a6a3d31243b48915e1a38950f66709c8c56ad48127523ac35df7b35c499a7bef0bad4d5452fafee2acff8525011d8f963d0702911d754a457944418f7"}}, {0x2d, &(0x7f0000000180)=@string={0x2d, 0x3, "129fcf8f148e8ae1c01a5814e1cb22cf49a16515e5a13c7ad63984733927d44cafa8cd187a098e6e6568af"}}]})

40m6.79646575s ago: executing program 2 (id=240):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_GET_IO_FLUSHER(0x4)
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(0x0)
creat(&(0x7f0000000440)='./file0\x00', 0x0)

40m5.173644645s ago: executing program 2 (id=243):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f00000001c0)={0x10, 0x1, r3})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000180)={0x30, r3, 0x0, 0x0, 0xb, 0x0, 0x0, &(0x7f0000000100)=""/6})

40m4.383903507s ago: executing program 2 (id=247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
unshare(0x2040400)
r1 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r1, 0x0, 0x0)
unshare(0x62000000)

39m49.109759155s ago: executing program 33 (id=247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
unshare(0x2040400)
r1 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r1, 0x0, 0x0)
unshare(0x62000000)

31m36.385793322s ago: executing program 4 (id=1153):
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400d0)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

31m35.642174398s ago: executing program 4 (id=1155):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
setitimer(0x0, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, r1})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x2, 0x1, 0xb, 0x0, 0x1}, 0x20)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)=@llc={0x1a, 0xfffa, 0x25, 0x80, 0x8, 0xf5, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="ea36beaf0630f5d080aefcb7cd4f215d9a574726e1fefe80e572b3860959a96a9428229e046b463a19f00af1479045eea433d64d4695952146a02440b9a88cf203fdca88381f08087814490fb7dfeac355cd8b3f7e7c057ad7587672a77fc199b585d43fadf54913544ee8d980699f24dacc076e8b436b5bcd94105ed5287f298106f9f8b5cf813c96d23fa48dd226745cf31a28bbc059edb38547616a914b5693d47937134776673bd7685d3937a7cbb2470e30aa5262b4c82bb50fb5c7894d2e1de198e6356353fd", 0xc9}, {&(0x7f00000005c0)="f8428d1b86624258fdf30d643a9ade7517870e790e7c9438b4226b8499e07d24aeae8875497379ad292ad12af2fcf6ddad3fbd51690e256068ba23e2d48bb11af669ee4e28dda6bc737040ddee7fbf1dc11812840caf637bfd6493c722a29b7544fd6695dd5cd1395499584d68b459bbbe776868d806e9baa679d00558bee50df12a3cac704e7f88e958749e017fa969b6833c70", 0x94}, {&(0x7f0000000680)="34ab77a7666eec6c524a79c58f83bc520a2701116f42a5eb3a847011b35f60891078a4c5287dff8242398163d699582038714980423c6a13a79e59c3b670d118cb9ba7ace8a6ae1f0880f5ac54d4ea1312c49c35492ca79499c4ab5f618ecded514598b1c078dcbfce906b9381ca10b4ee6bbd3714e74385cb8c99397c2515eaa7ed841a109cdfdfe6b6b3da7b3284546edebbb24839bcfac7cec479c4d211a15d37bd090ea1f0b65bff587c261e9a0d140a02b84cb373ba2cb7319cc7ffe938dbbc870966d5075c65b4fe02b0d731b74311990905810d166bba9007cafc397221dfcf55927cc0ccedb16fa78ac4c6808b40eb7e09df6c7f93c5d0f426e22efd86b8df29f54dfe3777b9d7e0d7c7d0125d32a9f88cd9227376abf3e459b7a55b56766e3b2b5f4d9732cac95fb6e635aecfa60dc60bc8a1403ceac57366d463e158577a52f9578579ca86891c1883fc119647a12283411d20c787418e62daa829c0080daf89981481150363d03a2d963c7994b1f47f55883a95f610941588c30869beecfacee627e8139eb30e966f3f3da5674672cd96e440497701096d50acbb67b55523ee1fa11a34fe75902b0ce0424cb09a71d13956006b2388a5aa44ff33f34a6e56b5d2e807b26e454d232a414135cecaec4301b47d74ecc278102d6b6a6c657d1ea3e5ff32c5194205513d76e79c4bb0f9478e729d792c6fc11199e927e84663ce5394918676fdb41e1d0489eb71f6f8bd17740c1bf98fcb5ced872a4b10c2c6711b2f7597b8731288c1b589deaff0cebca3e0b80856aa333237bccff0544977121ec9aeaf31672772e4b553eccab1cc18547901ee2f4ec3f9a504ff30bc0eee089170ad6f6b404cd1111e2cb351c21a7df22f834e058615162f9bb7a6b41d5ada717fd7cb74165ae62e6da8fb7ab33e2f3638face876c626a7e67870bd94d142e197bb5ecc13e2456de5763be7f04eb9e4f95b43bdedf5ed71ff9f93287e4625beaaef92490d6b60970baf8ed9eb182823df958b4944ca7c1723815e92ebae9db8922e09b3327c63eab9581d9492718c6575fe0c6008a9207d863dfd41e5954bf9b3744ce9cd1a896dfaca7fd31ebffb082c64fbd3da89a7c1e063d64a8f8005f921fd172cff7917c331f3e6e5da9cccbf22845e052487bdc85fb28aabd7e45613863aca5bac552bdf6fe3d5b3040c880f28a484275025b4e5413b2daa4a9dac16552b078a8072f9ac176165d6266077be1b3e4241b5e24a588b779832abffe45dc3fc6b619cfe5cbfd6449864dc2e365a313bf14b63a8ac1ba914e0153f4053886bbb2c45510897aed7a781e527a709870369c7c7402cc8630878124c78db374376317c93f42b09904b53572c639d8e1b073e98e1ba06bcb9233c362ab8bac516964e16b52485a3d30b275ba50752db6716e622a133531348e5751e98f9e4a07e5f97914c4761abe13b8a52b84b9cb26f8f138b0f1247753dadedf9b48a041b5836ace012c82f5bda76047733372e54361479c455f9270a2a99f89abd3dbc86fb1f25b0bf9954ecc19fbe2c4f66e788cefab0126d22a866357e02525a1940e1b158311be4029207952defe23d09d66f135726ea90773631c21ecc2271f28d722aa564b9c972de7e55b11962973f97ba12595481d614c011d87cd549dd0c5d5022e51c2f17bddac6e760e7e19b21f0c59b187aae11318092f7fedaa352d418201081ea607bcc0d4dea55d3ad2e7e10ba6a3bab21c505459df34bb5ce98f20134a61883e5ea5758799393b2f3e15eabae289633368d8b5b2d9a5b8bd4e0765a44632265a2369378b0f8bf216d1ed7a3d9a9c9a3558f4234d39b70cea2d10e614b5d5f216c887a82ee70ed3cc7e4cca237faedb1e634dd44367f5bc49762e1d4e6f6541e2cf6d26d11b372b78d2d3eca120ce91b85c958c9d2630f8d0011d4a2d13c434799df87bc0650ffedd5711a14590e264414e67daa63f7f9042a61cd0fdf91006e53da199f0973b605a20d1ecf4c94bf0369de513096ce084bc53a7b85ab305d23a03e2b30af81bc52885dd9846c78d779437f3d72b018129e822c28de172ac610053e842b3cba6964a0d9b34bc64b4ed42c166e1665c951fe06591e527e8e66a70cceb351f56447d42a9ab7386b65d209cf4983036422b883c83321b23419e3c28887862309f531ed60fc977fd147dcfa2cf2636bebc960c17dd5ea1ee74fdb464759aa4bc52eeed7fb166e8c8c528be813169f373c01bd235780af81b8ce3904771aba81274196b769aeb5bd3bfddc86cf5059f5a6073881408701df3871948a57dd2b04ab0dfd52354bae8712605fce56bc26fce9b44ef9926f75256c8fbb1666ed15c974d9fc704761902145e40ad4c44d0113b9936c50c2dfb995ba5bca6fc303333e02368c348b2c220454a5e07f80d2d691761d840ebca1aecb45b4b9e36d46114507edf804db9c0297e17e51a0b07c74c5ed5b768bd6a36725667baff89daee4dc6c26e2c48535e0d874c7d2f87d119ed53a724991b126f8075b4081f1218d2459ead51a9a1efa23f74d4c9491d3ba18292af8dfe5303514c78063223d75f8ffa146319d1dffebf6a48922eb0d0b4c9f484f00e4bd60ed27a33294d671c26a7f18dadfb4b104a62c5dba5f017f820265e81b82cd6ba7eff8fa206e638ecd52d91aee65389590283aeb890214fa19aa020ea02bdca02333ace9e46191cc56d13f157dd6e106de6f01ad105a31914b44215c38d0ae83d329367717aa0237dba6ba12d72c4af97df1a9db92a36750391bcd059101b38c466fdf033097ed8a5f088eece2660b697fc6c5f7d97bf8ded9dae0753cf0e22266a8abd238f1dca58ada0b7e39a3611888e562a3ca258f19d6fedf8baa7462b80f00cb8c08d1fb832698523e56f6c4d1ef8abb548032c9d5705effd4720d63acc647c84b22136c99c067d554d3845d80bef380eb02df375e53d40f657aa82f93670e4e6522efc9f7cbceae94ac96d50f4828158309049ea5bb556de34b83538ce4365850679e1199f718256fed5d603e683f6fda420d58807130beb4d45f36a67b8a37122b64485c43c3e5d72d9ef3c7b691c0293c6049a4e2f6087b272afa38877df0ba7b595eb8ac05c5589dcf88083298e67274e420c198259c501a0fad8b808fd0d24d373dcf2d542078139e63f8d7e4f6e17390564436860568a1315f9dc8f4ec227784826fbbef94655f2971399406c9e1c643d6a0f28bedc501a5f423f8427b2cff8485421d1a2ce1b236b8fde421051021f9418c560d39c85bdb0571738e55f1094a16372b8193f7b26a023f48c8dfb9b973c41d16352dc2a04a0024341618e766b2d7d4fd38b07b9c6d6cb4d947e6b33cf5d847196aa3d916f6288636303f70d39b05b032dfaf58b8662d7277183da5ad0c2ff5441f314068bd42a0738d06f04d644ace8960e204e6616d2692722eb04516615398e30c34d8024c64b4ee3502be12e21c1f520ed34aebdc0eeeb3dbab198cc8d0bb11ede0db6b3b2ff83b8316d0d862fe1461307ac552a54da3bb7b59e4522147693f62c0a3e03e873c74dedb53055cad15659b734f82383dfcca920c7cb915cda3ed3bdd35fdbd4462da8dd19bc87ba247acaec4e14caf7215922e1dc066d4ce6dea2fcde375c2ff6dc33445a81f839094d4ea2c2e5734854839762f7d0218e0021c06d0f8a49c78d7f4ab08bb96294ee721a3677611629919a6c9d31ce5ccaec3dcc46ae00f256bb5a4d3ef8528790eef6ba8fadfebc81810e184cfa3ad60861f22b421561c02f3ba4f535fc90995f05d296414d4b64e0193f46809cf84b29e9288d66cad1604d434d0d741a01f0e3d124787b8cbbd11949cda614e175cc8ad717d455a66ae68b035471433492b16cff8e081db4e4ba9a36f5805c5242968d43ed32604d9fbf920c7eadd96be2cbe750b5f16805fa7b7f5290cae1b4bacba3f932dd0b2ae49cabfbbed851d55cb61c1d36935d99cce05efed594cf2c5cc8a13d7d40cc8c49ed82001e6746b44fe2602128e62335c476e9ae454b4a7e60e63ba169a4d8b5d8df4fd7a246bfdb3ff61d4cfa67155fa79de308f91e6614c82472bdad4e6b51d6a355aeb84c3b967a237e9c8f0be7691a8fd099cbab4f5e8d6b4df0c1933f4d5d56d4ba676e29e09c9d48c07b32a668b684b5bbc99f91cd38d26bc258afc146ee4ea7227bcebcebc9759bfd742f462da19cade2c1b84043778562797b6109eaef44347c4cc4b44d92d1cfb8d20d5fdb09410efc872ecb13f69206aef3a30ea8880ec1d20764853396ee7e24520d80c7647129b92f6ab12ad1f8057680783ee929c1c6cd35e0f6c2e2db8c991a2012b9e8a48b97387889e9a2eac1cd3c15a0134d7edfe1b70602ddb38baae85085ed21b69dc8bdb7d3058cd76358f41855f16138adeab1fb32007bd32bb792fb21d9d1d85cbe1c81c20e8a6c9cd05b20b73b743b7ce410b0d737229c8248ed88999c7f1bcec4afd099284104c60a5d3e8bea1ec64985accc1006d156c6749b3e635625c1a5aa5752c965f9022b9d6980e84231b27e1234057a2a4a30cdc1dddd8e26225c18df418e19ff8b489462d8c9bade461ff757072f00b193cb087359330b0f08a670c5439599bfee239a33c2e31422c19b387cb2f2bd2b5cad5597d84434f0590c6828011887017d7fbfd8a6b1b8d75227b1b576c6a384b21bb5ca29eefb05faba420a937449c26b8f6cb2a36d6fc67ca074a8df087cad1c9a0fe950d559ca84cde7b5d5621458447340cf971ab1d38ce149aa466a913ee857bfb40de5805aebddb7007b7cdce7ba467724ea70064cbd6d84587df4d2986b4189b907ee7d5107559a7ab9a5800493eb3ebfc62e5526e66d9dcee317174e782364e8324361c0af95b0f7caf7178e67b79268de4017182f04117d4d9e11a4a5f01f7798d19548e9cf95860b526b8ff26ea28b6f2c48e0fdc5b2c6988dc9af79aec630f1e4b124f8d6ef9123b37f5e3efe19f834ec73586c5f7a2b2cb2bf795b8b6c5aaef58a7dd94650f44552838a632f1818f087067adea8b48aa3d0d573cbf31abd4dd6f8e579eed593762f07e7fc377e2f468bf8e6f43eefbf57572896543d5e2485b0cd4ad0bdae712f0ed490a3aea0bdddf3e40152938fb9bc3ae747ef33f26521a59b7937fe0a02d9b01cbb10e05d353486246a84ada385355c729fca96d2103f0a82bf3561f91b91f57ebb3a550357f51d8e909f85357b31bfa75db71f9626104c1b76dd84355b86b61da325db7c59008735c3f95d8061f3fdf89261926f24630019e8f18bc32dfe0fac9c1141c07a984f0c0a8366b3a636e3898e2b75b78f1309c9c8fbcb8a629732b60bb43fb8236f7ccecfea425b9c5e33ba50b50573b436984299191209d27df618b97c8629d6da9737bb2f575885fabf7ccebb30f1f6f57fae28d7f688f519bdd060bc5f55f38608b43e047146ddc376e09bb304aad762519a018c65043255f01717baee70210899d38ee6083a6163ec39303ef946790211e33e0ebbbb91d2443c65c6ae0c9917d97deda0e8b381c97d35ced7c6ab8624308b1e25c7b736f97f1edd2f3749767eaed1ff60a90ad8240ea29b56493f532c4ee7135e863b0ade4518ecd1f7ee2e41c21fa758262e7cc517f505fbe4908a3e81e221a0b15dfbddd0e5b2d8d9b759956a4cd65675e44022d0a817dd9afac86915a113601de06c4bb7e71c796a357dbe682faf35989a6d79af802e2f1828eb67d03d7e659a3a269475c12107476e51f54db0719e2a8f56708f", 0x1000}, {&(0x7f0000001680)="9bfec1a770df218ac5de64d7664e6f3c5dbb60223d5fabee8abd2083e26d4a0e829046d8382cad14f402699142d51f9acdfcdfc3d6aa0760079030e5156a73a227481e169216add437fd7fb3e7779d6057123701088cc2e6c2465f62a7b80758e16c596f0fbff6db767c2ab1d065310655f5f1111d167f5c14870e8e2215721b8d5bce274bf9a1bd0e1b39e7f89e464af6061c4610503aa6ee40f745c58d071fc45d0fd3dc3b56a663", 0xa9}], 0x4, &(0x7f000001b000)=[{0x100, 0x1, 0x2, "66ce433692574f70af49abe9f663172a82384f917536a18ce26de0f1f0e5f8a640999599112cf3159e3b109045c9d9df0d336bf321249652a60aab7128739c9436dbe5fc2d248c0823b3766cd2520e36a2fd61588d661d2cadfe6a169611b47b63873e6c154760f47ae5f4edcf69eb055a7678ec555339ee218ac7a6ffc3a70817ef7090609d4b928a240e8133770670c41a6ad90e27fdcee6faccfd23b54d4e46052dbcf73f30b532ce514d07b6af3064b96eb8601c32077467add5f361244ec46721533fa0926c1836b02d5843ac1ea3e56047dcffa539d0608baf6467fadadfaaf76f7f262129dd4091"}, {0xf8, 0xfe, 0x8, "f28563b0abcc91df3ef59b81102e857a2f11752d9fe6922167a434178a2c4228b584d93de22cad331e3ecd0b05c7d5a0775745dfe6962a3ed208e981373462e8b9381a9c4e8b9a35b0a955be34e838e1dafe093ee0fc6ad0013c9fe58c18e1a27a5e0f350947f9337facb3c8db8168aab8cc2e7d6ee41a71ab37999b3bf310e66604d4681d39b2b20ed000256db2299724d65f6d9ad2925f778128770eefaac04a9ec3ba7881f98ea594956fd80ce391935d8e9ff29089b17045155a1eee778f3b428a7c16f7f7f3ad2b8ed163b8698be58276b107e53290f12eedb47faa76912cf16918"}, {0x1010, 0x103, 0x8, "a77623669dbe893452c87011baec35213dc2e2baf48882352385cc84a946a552bb8395c3ea94b601c283f15b0c1bde25b594085227e8482d426048b39ed6d498477c0fad232087d833ca7a2f8f07b2f307cce53de44cffaaf33a11ae433f279a5c6a169b0c2183a7a55f461395bc8c781ecb382a6eb9878ce661331967211ddca957d81ceaf2a2ea39ea187752f361701a79d6abe1cdb97e75603b8517a6cfa6e7320afc577a72c9abda26ab64370053af56bbb0de8220113f65b185b7ca757047382768ca70b9e29890a05a10f8f71678f9d9f4520885e67e591b5c4a70d097dbcce27430ab06de9ef7b75433a5c0d348ca29301401d615676507f79fb2cee98484b929c04f13a8f5cd5f1344c4addcd29fb6531cd08cda815a7e20411fa6a4d99ddf14c269ef300b16e6f1d26dadc7a6fb24272f03ca672e1ac69d7aaf003e6c9193ad8bf748d4dca6c8438d7d80cb08c6a230d6006019483cf8a47eeefd15741a09666838032b08682461771f7e807f4ef0794bb7ee1486e355e195a6ea11f24edcae580ea01aad4e056830f14d5f045fdcb259cc1e501e5829e58357ba361192d11c8bc863e4bc476824064fda318fa06a2599a6050dff5c837c69991f38348955c5efbf7f8be140a1516a44e25712c296369dd4b8b315173c5322eb795fc130c60772c0eda0582991b4f78563e17d41d1b7dc4ee5b891acc7b77aa158e96a6da0889eafd36875dee6306fada178aace237ce438d10c379b61f4821dd1916d66fc44f30f60168cf29f947a600d1d3315e06991d860e724b94175c2362517528b7d9ad936e9fdf71f49b351f95a76d09883fcc667eff27da19d47eb3c9427422b2d40ef6034b3e1b94db391b4103bd756d5fdefeb6e26b0d4eccda81c723a041512db0e01b8b098783f61fd73cb9fa6faa00496a13be27bf601a43e058a94dc140cffd2e0a5521a9888b8ed354bc203f6d0b5698b73571ecef6ac642de9379ca53b77461c4dab6c45701838f5113e036db3c47e774b66ec155a097288208cafebde802840bef29d2e8f8e47845c94d998dca7d52b3f630094aea85bc62c4a13883e29314f179193b7582cef7af40740261d7e0bbec012ce27649efae41ee9b0d137edec9d1b699cd7f571ed7934498b465b4e4d78f5de6fa74eea044bf8e9ea1689111498b6fedfdb0d751b83096ee27bbc929caf4b5063ff16e86620e2defb8ac2444cd910e5bfddb5e10c991867c7f87e49117b3bb60e60d98fd23758e9d8b66b9766df1b793d97c6bf3b55e31936283c41dfd969e7ca5e15ba11fdb2373139a82cfcdf75188944398f21bed0935b7f45e3ff33faed8f133d07a6eb4abfdd0c5d38ee6cb67bc0422f6dcce3ad69868d1e872e3431d48fc12705bf2307048ce01b0cd21f91f8b4f27d8bfabfe725eb8b9d384d4790dc4ac61412e502bb6d27aab46770390ffbab69b9b4f736f8bbea7eaed7cf375c16ed1633c1c50eb3299196eb0d3d8b4aa1536f78cfe2dd3c31ac4608d4c1a4513081d82a175d67d8f57a514ecd0f3b184e08005c466f672d752abbce665ff95047aba6938716736d74db82045b416f18c02f4a2f869607988cad1e06a67c1de5478020d237ffdd2b85cdc33d72587291c7a8adf454f0e0548cffb81ffc70c7c740327e0d88f5616d36a5b4c31578c8d66006141267b36b7482d0b5366f94ebd1f3ba268b25cbb6e612bf88bf354333e6dba7dcc6cfbbb6262215b20a4d235c936750ad10d88a3e1db17e98692c89e7e5c94dce2324798ac3adff2de4b2ad0e010cefb696bc908554c43af88a7018f29aaa75d37f014731c4be64f7601df2e3912ec9a1151de2e16e946026f5f4f31de3c85b5e2f6bb6d74cb796455a6a8488f136b6ad78ea570269eb1d8bc731148096ee5f1067729cbafbb28e56f923f84e9e19e3b7a9b80d9cb241fe69e500b5768ae4fe03d282020b7bae9af9010f190282e6e794e82a6bb4f1495ee40bf3449787821f7692bfb13326b6cc28128aea4e51016ff797f99fe8c93ea388c9349526c6a61b40f4280cffcf4fb262465fc4c4193a601dfc788796496f0d92fa8348a4d190d06f0897bfe31dae0b3dd2d1b07eeaf53c816c990614a0fed9814a712c3fd6d0ff166d4b2e6d5854dabada4805f2ceb027628935212bc2f4e7a859e09122278b512845b87a6019af437fdc89a313e029bdb3db25ec92f0a2cbc12f4e8aa95e5170f90fe1018f4af5227fad242924f2728a8364ee8fbedbd997b2512d891681a529343873a93f285576bac31479a55de1b573224d745727225c42bd695d084a49829c6ca1ef06579cbfac40b537128d78fb32c59890b5340c4486073f9a64a4d6555f63cb07a7e69d9067b9cd9795c8085a4a8df0268a29a0071af621c5039d5902cb3e0760cd5ef4fa71ef292de66e714caec80a9b7974abd2b6bd88cfdc8549848fa392802023f78d133976a12eec51b1a3a70875eb69eb7148b02b43424693a231d55c7a5ba09fb7f87eba38f37f084f0c9f62ac9ba4fd089ed05211dc52d5c439ca3ca095ae92aa1d17eecc6315e1b2dc4e106e6172d83703b520bd8aee8706848296dc13b50654d60e53aa1d11affe81d299201f41c98e8bab360c0eed3f41aea7dd79526bdb077c65fe3b8b23705cbff0c8f9fd03624e002bdc06134fd3b534756a7e38158b1abc60b04dee3613eb97ba4e835d9bb8c3b5a133d31bdbe9d62a9e7c6fdd6ccb519ff18bc88b9a5b84ce4abace719203285798ce4e2e832818c1bc29aa223cb7f7013eee70631c8011ac844ba3120e5d5de071a5a0b8ca6d751f30cb1617270ea5d4c5d78b52c26ddd6db90f47716981db99067d0e28b00cc74462593b9ca1351484d29a799443b58a3a2a7545449a4428802d13e1fe9a9b494334ab627ceb565f4ffe95162b16b2f2c0b252d3ea04bb25a4a160929df4e651ba740ef48b0f7e160ad4659fa87f2b09721e88ab7d118e879f473b9380ee11c56bcc000778731c8369d4b129dbbe15a2cae4c8083b475383615df72162167499a1786b2912ad46e22a8aceefe73c0d86905a62fd6edae14d490aea5aab3fa70dfa79bbdece53bd3771daca58c68d666c3a192d3a4bb7047ea3cc7aa24a31c48fbd42f4f9f6c608bdec6c1173ab10389b3b0f3081d24599fab56a9bf7baad9e1d7e4d7351fbafce099e95a9b72d31c59f3ab7c1804a246c95ac13603b2f2918cd4038c0b62d0efae894679e12d7310b56553489e4653da9500aa6979d17ee4681c9418b42a33994b518aa5bf94f70e64a124ed024d628be0c1cd8ce729c749a4296533272f6e192ce5f1b428e7fefa589f9c2e9f95d7781c6c63517a8e53b215cdecf99e44c1dc9870659802f13893d1d64ce799cab757cbb54bbe58d7cb0834f6d07845eb6cef1719b4f295a3744c850e8b2e6cd9cebe449974a4858de6f439208273775b2752fb85c9db5086b5b3e28e09399da2097e248e3a8e6d94606ce141318937fa627be80e4a10806c5bb8d8480863cf1fd591509e8c87325c37ec56d11a58d69975d5f555b65b7892dce9936d8ccd0d1ecb47384abd169c4931708f03eb6279fed16750b8638dbebd68aade717fb0632493037528162b5cc96ff4acd127fdfab201d34aa8ef916fbba9700f20514e59e5000967527bd4a14c3bde5067bdd64e84be5ce92d1f3632035095108fba69ba3dc78bd2cd5dc2a6a3f8bb6e9ec52fe859b938b059860afaceb9bc65c865314de7e90464ab4193b7fc9aed381520f31f68701d5cbb9e9d210a42fa34401bfda6f6372f49612fbe2c74e1d9583c5f6a672dd1a01ee1dfde9f0d80978b6b191d2b58740fdcfff983036f67c20aaf5e09b114e3c1b4b1d94d1c1985ba899f8dc20cec6f9aa1fdddbc36b1c39552ffcebaf4f9f433b3f94b7b75a62d10556c774a2fc4478aba96045c063c9d5db93b094ab9e25aaebe45e752a2f52f983430a6bf17256f19519d701da261d9a196b2a0bf4fdf952ee23be93d661ddcf9b85dc4300b1f1ba17e9152af0d0a959b57e3f7966e14e1e0a340bd0757745895d20bd3d5daf0cb77b7aa5322f924a4dd69241bc5cc9b2d761529373ef019c4be20c1e753663c245e396ac30fec69b321c8f9d1295b81713465ff40f138befb0f8e5cf2334081e450ef2a4875c6e843f713a973432d151f64153b2548961b6f4a78e46aef004ea5ee0c72435a5cf2cfa6556854b761fd350c8032880c843bf349a85786f7c4687caf76f0702224d721baa16a17d3bd79db86a456e0736faafe58a3de1e2b94c3a838dd389dc1095c9a5640e7dffe9557174300846154e2cbe07fdbc274a6ecb3607f3ce8d454f7035210e975b9deb9799147279bbdf079fe1ab1e9af167fdf2560e5bd7eb31b899dfa23cac2b6aac970f500f724fcdb41e9e43908d4b104b5395c1a2b5067495088e4e799bd6e5dc4bc682c301b3811d051df735ed8e48efa6f9e929e2b448408500e618f48bfd215781f6f0728fc22cb95e9b2422a483b0e6b9ae886d1c3e24d748d5b674c2330b80edecd8e0e507a89178d6476de033d70f490e221630dcbec9ed6cde93e145348b9875647928d3e2916af256ecaa9a29f4af199a7c1d64ff91f293b5ec95aa6503485c96b159da13c67c155facd57bed9f4a924f7c4050ce851745694f34885596663b72abd073cde89f425b16a050b471956f4330a0774c45a8dfb1f39cc25bbd07515210635e07e7ccdeba07747c6cb19044344f547e4a24d936db1a85a1b69c35924df08ea38c1b6be5f80420ce66f010baf970b80f307df37ad64021f6af70fd80a6012b31a3e70112918306c757323c5b9b9a028ea73b9f376360f88245e8f8e80de7768baa1d549c6cf5378bae121198e0059d8092d612131a649c0a64ff05c4e2933e92b66960a5f574b120e3173868677e12159af2df4e6988293dfc8ae6ab60b58a1fdd5a14cf78fc0918a9f6d07c0c10aa27997ec38782f4fe40534008f6788e8c31efef42eb788410c9b28349574e3a38b5499706ee4ff7e0084d3e958be501d0cab28479bed4b0fe248d3ff5470397e17543fae20498e161166f87c15d726bb168ba0c7943642a621809e387ffc1591286ac790376f45b85af53096afb8aa3578b78fa0a6373bcfd3eedf020c365d7cd9f3956c1cff376030a23d86441c23f86063bef85f136fd8a90c1e577f04f33467aa1d90910aaed20f15ff147afd4567a0a2e88e6bed154c7f6759cf654c0f9192f248ac09048975fe423bd63210b2fd2519e3019a2a16575e75efac0a879e907d39b45b7d941cc598d6ba999fb6a1aff301ab7ea143bf7d019e3f6740f8e15fecaa5de412dc404fa2b6f2aedc0ee9cd3d6e0f81ae7aa2677af270cee906495cdb00837c4f85f3ab81b4aa07021373442e046c16e4d5b302bb818974db7a216dd8f93a0f15852b6f532af25b55ac02b6ac306aeec39f0437c8a0a1fa15cda90cfb0faad9f2e30fad5c71c51401eb01a33254d298f6323cad7724f9e9bba77cbf42510904073b3a84553d5542c936e354b9b87d8981de593c6b77bb947a77163b6d24be4ce37e4d2c0e64ec937ca00b3924e626eb7c3171e698ca3ef357cff29d5c52e07bfc1d956f67d92aa2e44444f9ca64a8f6fb9956965c6d533785c91c43e03cf91aaf0e3c35c24575b7b67a9a51babbb9d57495d4794b1c0a80435956da8a76bbaee4d75347a1601dbde81f704a0a8e8f97aad22fc90a93e81c3cdc68c1c65adf20c344c4731dcae2cd1d124a228831a69ddba6d105a9c328209d79f"}, {0x80, 0x1, 0x7, "2743fe42ae6d2c36bbeaa8706a555bce9e2880a1c26b6a520442ca356e2def83cfcb12151aeb67c1bf9f3c9817b340c3874b66a88f59e9d07cbd5317de5a04d325b1e42981bb4895a6a98a4f1524b1ccd393ca9b2f2a4fab8e956add31fe46aa363e3d16ba1323cc71dec52733"}, {0x50, 0x10c, 0xaa, "c766e5ac1f9ccebd960eebc01f56b44dbf386b337ed795e46eb36e931c11eed6fc0b5f63309874899f39743b9c18cb79f25582e0ee6d541d0acf4ccb9af0"}, {0x18, 0x116, 0x7, "57d98b1077d73052"}, {0xd8, 0x1, 0x2dcc1f47, "33a98ac34582e1b367a1a2cefc98deba95c695ae9ac12e8fd76fd44abb2c76c3c8d1421e87c79ec645cc7d73f29f7a6494bd3a4bd0a79e501eb70ed0c46cf7db9a2bd5356e4f863dc81540905e3e4132fc5cb2e095a59eaadcbaa379afb817caf66435f7526c5b0d28bb88e0c49bca173d2ca1720f85bdebbcff9ccb9899d729479ae2a1cb19e37cf948245b5b9413b23c81a4cd747ad1b455df9af14ae3d3c61e7df4572d370f081b0af47a135738876756c90876f70e1d5b32c8628b137bc5de00ac1edb"}, {0x58, 0x108, 0xe, "f6f64ff042e6e1e69f53ea175dc08d67b3ae54a2e741994c7e2c3f822b3c88c4209f0adce3d984560260d5a5deef14521699babd9ae03d73ed18b67e55a2621f2daa49b6"}, {0x50, 0x10a, 0x1, "b67871f6e686eb52d67ef0d6d731601f1aa0651c795e6e4a0113e19b47e61f830baf804abda02cfd3905d56415e0d414d9f831fef9c5bf8be3071d7aa3ee2508"}], 0x1470}}], 0x1, 0x4001)

31m34.712806039s ago: executing program 4 (id=1158):
syz_open_dev$sndctrl(0x0, 0x2, 0x2a803)
syz_open_pts(0xffffffffffffffff, 0x2800)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8980, 0x0)
ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000300))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

31m33.450531227s ago: executing program 4 (id=1159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffe0}, {0xfff2, 0xe}}}, 0x24}}, 0x4800)
getpgrp(r1)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002)
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0xf000000, 0x7f, 0x191200, 0xffffffffffffffff, 0x0, 0x0})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000240)=@pptp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/183, 0xb7}], 0x4, &(0x7f0000000580)=""/191, 0xbf}, 0x60)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9b5"], 0x1c}}, 0x40000)

31m31.513508566s ago: executing program 4 (id=1164):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = getpgid(0x0)
setpgid(0xffffffffffffffff, r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})

31m31.292699459s ago: executing program 4 (id=1165):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0xe4, 0x9})
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
dup3(r2, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000840)="98e0e92dca5988648f4929be5b077b69bb3fab38a340cec31ad89d1ff25172deae1229e2e65abcaee693d885629b4b08a759c18b8c667fcb0d30b2a18af425512fbbfffc8bab595573779aa09c64a5f748badb3f2c92", 0x56}, {&(0x7f00000008c0)="08c1fdc3498ae137632c40a9e6415ebcbdecf049a3ec0908c8edbba153a5e6ff33b75c6b321a0a75555098041fb1f5d8bc00c28f2a013432ebb82086bd3370c6a4dcaa04920a76a669ff13b43bf49f4140a9b33b2864511019ce50eda42a615495a65f8deeb79da452a18d8de3333bd1a489707068fdae0a44b3a3d6fc47cd06955f48eb47c571f53993ad7f7509a5cac5d5f4b9945d5a4977a2ee9d8936e7bb29197950b98761c49f69c8d97b96210d9c07dfe56c83a004d7e63acd4a23dc616008d9134a0b579728a8f3375421d7dafc51c06968f72fd4199046aba3703d738f2586f683bdf21e718286f6d43d3a1103191f", 0xf3}, {&(0x7f00000009c0)}], 0x3}}], 0x2, 0x810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002bbd7000ffdbdf250a000079090000041f0001001400e7fffc02000000000000000000060000000008001700"], 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x1854)
alarm(0x1000000001)
alarm(0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0f0000001000038e28bd700000000000000100011f609e1832c0fca4ae8a6341eed271c67a4930369bcf1018008ce37226432075434adfa7b9c58d5613cbfc2df44569e4effa23f6dace537c42e90528b7d0db74ae7a8dc9086d50de8b9f4e93e9616e35ac57675284bc664b0c72de47ed51a58e740e80386abfe16a114f7d67c55e0c62f3", @ANYRES32=r4, @ANYBLOB="8b800000000000002000128008000100677265001400028008000600ac14143a08000700e000030a"], 0x40}}, 0xc4)

31m16.128477009s ago: executing program 34 (id=1165):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0xe4, 0x9})
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
dup3(r2, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @local, 0x4}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000840)="98e0e92dca5988648f4929be5b077b69bb3fab38a340cec31ad89d1ff25172deae1229e2e65abcaee693d885629b4b08a759c18b8c667fcb0d30b2a18af425512fbbfffc8bab595573779aa09c64a5f748badb3f2c92", 0x56}, {&(0x7f00000008c0)="08c1fdc3498ae137632c40a9e6415ebcbdecf049a3ec0908c8edbba153a5e6ff33b75c6b321a0a75555098041fb1f5d8bc00c28f2a013432ebb82086bd3370c6a4dcaa04920a76a669ff13b43bf49f4140a9b33b2864511019ce50eda42a615495a65f8deeb79da452a18d8de3333bd1a489707068fdae0a44b3a3d6fc47cd06955f48eb47c571f53993ad7f7509a5cac5d5f4b9945d5a4977a2ee9d8936e7bb29197950b98761c49f69c8d97b96210d9c07dfe56c83a004d7e63acd4a23dc616008d9134a0b579728a8f3375421d7dafc51c06968f72fd4199046aba3703d738f2586f683bdf21e718286f6d43d3a1103191f", 0xf3}, {&(0x7f00000009c0)}], 0x3}}], 0x2, 0x810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000200001002bbd7000ffdbdf250a000079090000041f0001001400e7fffc02000000000000000000060000000008001700"], 0x38}, 0x1, 0x0, 0x0, 0x8884}, 0x1854)
alarm(0x1000000001)
alarm(0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0f0000001000038e28bd700000000000000100011f609e1832c0fca4ae8a6341eed271c67a4930369bcf1018008ce37226432075434adfa7b9c58d5613cbfc2df44569e4effa23f6dace537c42e90528b7d0db74ae7a8dc9086d50de8b9f4e93e9616e35ac57675284bc664b0c72de47ed51a58e740e80386abfe16a114f7d67c55e0c62f3", @ANYRES32=r4, @ANYBLOB="8b800000000000002000128008000100677265001400028008000600ac14143a08000700e000030a"], 0x40}}, 0xc4)

29m48.165792891s ago: executing program 3 (id=1342):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\a:'], 0x0, 0x0, 0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000a80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, &(0x7f0000000000)="a0f1b901f1d64ac0833ee20dea974d643a251e3bc207a9b4a0b3e91e818fd110fb69ac69061fedf8a7a7330047d914bb0a18a301370e7150545fafaefd1cec0221bee6d5a8ab4a2843ad31db8d549038b42a844625d6602922888e48d4ae3882a70c8da8cb1d410be1bd3ee99833f66fbb9094e13dab877b9d37edcb1f02a77751ac6121", 0x0, 0x4, 0x1000000}, 0x50)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'wg1\x00', 0x200})
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000b002f7b131b079fceb0e000000fcffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000b703000000000000850000008c00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x3}, 0x800)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={<r6=>0x0, @in6={{0xa, 0x4e22, 0x4, @local, 0x7}}, 0x5, 0x4, 0x3, 0x4, 0x40, 0x200, 0x5}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0700ef00fc9011d0719acb95e0f3b4ac314e1968805df94ba9744d5a6e1572d1e3fa38c29c127e33879ae22a4897bf9e5307067aa0835fc5e3c3c4003c89c8a769da8a436d4f668b77442b9c6379d579897aa87354fcc7e70aa77fb06dbfa1efd20bff0a9f4600de7730d5347bbda5593e5ea8d4649010359fe1f7ddc3af9a10267239f9cacfcaa77be0d81ad8f8879e53b5ae0f3630a5cbfbc1bc8ee6d00e431a16b9590b2bf2f98eb024f8d67525c9dc63a348752f6e8c167c9a824e2e124f9fd5ceed4f4938fd7bf06a15c952325c4a493d332aefe67a8edc4162133d75a620b19c60ba557d50cadf26c16c6937161e1e4f"], 0xf7)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000004c0)={r6, 0x7fff}, 0x8)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80012, r8, 0x180000000)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
write$P9_RMKNOD(r9, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c)
shutdown(r9, 0x1)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r6, 0x3}, &(0x7f0000000480)=0x8)

29m41.545651786s ago: executing program 3 (id=1344):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'none\x00', 0x3, 0xb6bc, 0x5b}, 0x2c)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x1, [{0x400, 0x7}]}})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)

29m37.223335589s ago: executing program 3 (id=1346):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@rights={{0x24, 0x1, 0x1, [r0, r2, r1, r1, r0]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48, 0x8000}}], 0x1, 0x0)

29m36.94907092s ago: executing program 3 (id=1347):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r1 = io_uring_setup(0x6cfd, &(0x7f0000001280)={0x0, 0x200023d4, 0x800, 0xfffffffc, 0x87})
r2 = eventfd2(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000001300)="11608dbee49b5840d0757d852b875a52e4017bc906d38fa8d2ee006a598d13ad5d747964763ead334238f652dd94d96126235d9e0b534c98240694c567f83bb76df2abebce0b6cc12ac566ffb4f42e533652ec37d2faf146ca39a0ca8460f029e2aeccf0472ec57ce962a2021b5d24849ff411349d17699517193330d8b2bf5948b66d44c26baf04b99fc74a424c6361d7b275bad4e460aeb028", 0x9a}, {&(0x7f00000013c0)="299e126240679afe825fd49b071c90291bb20999ad4f1bd24c64567851588f4b2bddecbc7f55376841abd650896c195e171e40b11fb1fae2f1f270f3af93f27aed1dfb91021971497b4aa237a4b2eb342e0a4e3b59f3eef24e531951ff1070e4c914780306bf5b0513f59599b6bd54d0108833f392a2c2e37a3e289d5f928889fc023bc8a9114ff782337621396a53cf35894b96054a8f4d52d4a7e59b20301d5742a777fc3d3b26e449d86f20c4ddf1e3142de686f6ac5a6eea70432f167c3dcc3ec60a3b1510e642b81cb5c752d8a2260b2a17e460b1b20cc713e5798d2cac2fe7c158b1f264614291347d13", 0xed}], 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54bd700018dc01250aff80000000000000000400", @ANYRES32, @ANYRESOCT=r5], 0x54}}, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

29m36.606604009s ago: executing program 3 (id=1349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x38, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) (async)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x106) (async)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001)
linkat(r2, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x400)
setpgid(0xffffffffffffffff, 0x0) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18769c604b1925ffdf004f0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x64}}, 0x48010) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x8901, 0x400, 0x0, 0x39f}, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 64)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (rerun: 64)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r5, 0x100000001, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r9, 0x84, 0x1, 0x0, &(0x7f0000000440)=0x14)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

29m34.34996105s ago: executing program 3 (id=1354):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r1, r1]}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x8000}}], 0x1, 0x0)

29m33.856216132s ago: executing program 35 (id=1354):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg$unix(r1, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r1, r1]}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x8000}}], 0x1, 0x0)

13m0.264860996s ago: executing program 7 (id=5210):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
socket$inet(0x2, 0x3, 0x2)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x800)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x3, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)

12m55.65927571s ago: executing program 7 (id=5217):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40046)
recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}], 0x1}, 0x2001)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1)

12m55.326165433s ago: executing program 7 (id=5218):
r0 = dup(0xffffffffffffffff)
ioctl$PTP_PEROUT_REQUEST2(r0, 0xc0403d15, 0x0)

12m55.033491975s ago: executing program 7 (id=5219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000600)='ext4_shutdown\x00', r1, 0x0, 0x6}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
set_mempolicy(0x4000, &(0x7f00000005c0)=0x3ff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000df1f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r5, @ANYBLOB="46c8abf161064c9c0857d60de14bf54345c6a85690353ce5f75ceb2d2be77baf1ae2adbfbf2e3860add497a199a55054caffa98994dadb8cb4e90d533b3fbb36c36dcf22a13c017d3553e65a2e0804afc888f497a9ce925e0e74b8017b901298c8a8ba4ec634dc7b3ac51dbeac6579339dccbc24e78737a21682010e0d4eccf6e26feda7af810e579cd509c132de8ac5c16f01188f446fc784d1ea15c543573f91295711f2657b4ad1e80d653ab55a7522011d0dc946f085500e70e3a7f876312ffd6d18fcf7c59f5711859db1f5ab6bf6107d2f2b749dcd25cfc644ffa1081c1eca528ce1fa5da5c288ff6489a4cc2c95489a9a1b27a82d", @ANYRESHEX, @ANYBLOB="24e06ac5545333830819f5cab6863a85f28a1c2e3e9383e85190594b197073ede2dd44eb280b909f19475a51d53fdff657ecf3bea851cca6434396674f9ff1545d8bdd6c1cee9c886ca7f70587ba7a", @ANYRES16, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000ac0)={'tunl0\x00', <r9=>0x0, 0x10, 0x8000, 0x0, 0xf3c0000, {{0x34, 0x4, 0x2, 0xf, 0xd0, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x10, [@loopback, @dev={0xac, 0x14, 0x14, 0x35}, @remote, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2]}, @generic={0x83, 0x2}, @generic={0xc0, 0xf, "1ad809f84547de8340e98a866b"}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x1, 0x2}]}, @ssrr={0x89, 0x23, 0xbe, [@rand_addr=0x64010102, @rand_addr=0x64010102, @broadcast, @remote, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x3c, 0x4d, 0x1, 0x0, [{@multicast2, 0x1}, {@remote, 0x8000}, {@empty, 0x5}, {@local, 0xc}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@local, 0xfffffff0}]}, @end, @timestamp_addr={0x44, 0x14, 0xec, 0x1, 0x8, [{@broadcast, 0xffffffff}, {@multicast1, 0x2}]}, @ssrr={0x89, 0x7, 0xea, [@rand_addr=0x64010102]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r9, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000080)=[0x3ff, 0x1, 0x7fffffff], 0x8000000000000}}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)

12m54.597439256s ago: executing program 7 (id=5220):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

12m54.313567895s ago: executing program 7 (id=5222):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x80111500, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
setns(r1, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

12m38.987229831s ago: executing program 36 (id=5222):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x80111500, 0x3)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
setns(r1, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)

33.210016206s ago: executing program 6 (id=7649):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bind$inet(r6, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f000001f580), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})

29.004873562s ago: executing program 6 (id=7658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

28.328047597s ago: executing program 6 (id=7660):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x5, &(0x7f0000000240)={0x1c, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}})

26.429982544s ago: executing program 6 (id=7665):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
tkill(r2, 0x100)
r3 = syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)=<r4=>0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0)
io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x14, 0x0, r1, 0x0, &(0x7f0000001180)="696bda8ad850a3b73618e968f5178ae597f54cda64fd5c5885bf20d53f42c2b9e7dcbb916cee64d7a1a9b5b19f34a8f93428364deed09a98c1439a9c0e08c670bd979958ff9e62ca93b1c1d831fd285f7428d898e21ebd618174de30148cb5589df14ee330f775a44cdb8785ea5e481066429f13901c2339bffbe686257bc4f8e59255caab6cece7f45a3293b792de9641870cc363cd4799107e572e1ca57c942ca6c59f2fabc3ad8a44d6da38d4e2c97cd56f58bf2ffa610d11e2f93bac2132584fe71693e5da277cde6bf44eb0cba0a6cfce3c1e3f04ed", 0xd8, 0x20044085, 0x1})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r5=>0x0)
tgkill(r5, r2, 0x22)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
inotify_init1(0x80800)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7277, 0x0, 0x0, 0x0, 0x0)

24.325093327s ago: executing program 6 (id=7672):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000600)='./file0\x00', 0x100401, 0x7a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(r0, r1, 0x0, 0x6)

24.223291542s ago: executing program 6 (id=7673):
socket$inet(0x2, 0x3, 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x87, 0x80000000})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x3ff, 0x8})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x3, 0x1, 0x0, &(0x7f0000000100)=""/241, 0x0, 0xdddd0000})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

15.512829953s ago: executing program 5 (id=7704):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_uring_setup(0x4a86, 0x0)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, 0x0})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)

15.417216518s ago: executing program 8 (id=7705):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xfc, 0x65, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x54, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

14.331640272s ago: executing program 5 (id=7707):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000b0000000b00d0e4c3a66cb0162a38"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$LINK_DETACH(0xf, &(0x7f0000000140), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12.957310853s ago: executing program 9 (id=7713):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

5.753777728s ago: executing program 8 (id=7715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

5.727432397s ago: executing program 9 (id=7716):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r0, r0, 0x0, 0x4)

5.629265924s ago: executing program 8 (id=7717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x55a97588810c4848, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303"], 0x328}}, 0x84)

5.579611091s ago: executing program 5 (id=7718):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x5)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1}, 0x38)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/200, 0x1d)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x541b, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x3e7882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r5)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
unshare(0xa000400)
syz_emit_ethernet(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})

5.525997133s ago: executing program 9 (id=7719):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200402152ee03451035db90a10e1607e57a0b3ad9a962c55f619e719576b2b665f67852", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf253100000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x98002, 0x0)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0)
setrlimit(0x9, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

4.951143525s ago: executing program 9 (id=7720):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})

4.429381714s ago: executing program 9 (id=7722):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040239"], 0x3c)

4.130329672s ago: executing program 9 (id=7723):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x400c00, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0xd}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8)
getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB])
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="060000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.200903725s ago: executing program 0 (id=7725):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffff4}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

2.401116194s ago: executing program 0 (id=7726):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={<r3=>0x0}, &(0x7f00000007c0)=0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, r3, 0x4, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', ',\'\x92*\x00', '+\x00'], 0xf})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})

1.845998621s ago: executing program 0 (id=7727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.60833077s ago: executing program 5 (id=7728):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, <r1=>0x0}, 0xfffffe5d)
syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8412060, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}}, 0x50)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x7, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xddd2, 0x4, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0, 0x0)

1.46423071s ago: executing program 0 (id=7729):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x43, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
writev(r1, 0x0, 0x0)

1.442014568s ago: executing program 8 (id=7730):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7bf4ff", 0x42}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9ec146680bce11c0b82", 0x74}, {&(0x7f0000001040)="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", 0x405}], 0x4}}], 0x2, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.105177508s ago: executing program 5 (id=7731):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, &(0x7f0000000180))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x7, 0x0, &(0x7f0000000080)="f4b84de4115d64", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000b00)=0x6)
read(r5, &(0x7f0000000a40)=""/141, 0x8d)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00', 0xa7c}, 0x0, [0xfffffffffffffe00, 0x2000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200000000000, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x100000000, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3e56, 0x0, 0x0, 0x6e9c21f9, 0x200000000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='wlan0\x00', 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="18", 0x1)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r6, 0x400, 0x1)

999.093237ms ago: executing program 0 (id=7732):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040239"], 0x3c)

997.717578ms ago: executing program 8 (id=7733):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x6)

786.036086ms ago: executing program 0 (id=7734):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
tkill(r2, 0x100)
r3 = syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)=<r4=>0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0)
io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x14, 0x0, r1, 0x0, 0x0, 0x0, 0x20044085, 0x1})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r5=>0x0)
tgkill(r5, r2, 0x22)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
inotify_init1(0x80800)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7277, 0x0, 0x0, 0x0, 0x0)

116.36918ms ago: executing program 5 (id=7735):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pwritev(r1, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2)

0s ago: executing program 8 (id=7736):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000007c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x4, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', ',\'\x92*\x00', '+\x00'], 0xf})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})

kernel console output (not intermixed with test programs):

8337][T28544] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6743'.
[ 2392.369484][   T38] audit: type=1326 audit(1759578298.828:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369542][   T38] audit: type=1326 audit(1759578298.828:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369593][   T38] audit: type=1326 audit(1759578298.828:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369644][   T38] audit: type=1326 audit(1759578298.828:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369692][   T38] audit: type=1326 audit(1759578298.838:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369745][   T38] audit: type=1326 audit(1759578298.838:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369795][   T38] audit: type=1326 audit(1759578298.838:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369849][   T38] audit: type=1326 audit(1759578298.838:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369896][   T38] audit: type=1326 audit(1759578298.838:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2392.369946][   T38] audit: type=1326 audit(1759578298.838:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28542 comm="syz.9.6743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042688eec9 code=0x7ffc0000
[ 2393.305678][T28561] netlink: 'syz.5.6746': attribute type 10 has an invalid length.
[ 2393.594264][T28561] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2393.603561][T28560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2394.084733][T23654] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 2394.238551][T23654] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2394.238582][T23654] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2394.240152][T23654] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2394.240183][T23654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2394.240205][T23654] usb 10-1: SerialNumber: syz
[ 2394.556874][T23654] usb 10-1: 0:2 : does not exist
[ 2394.776082][T23654] usb 10-1: USB disconnect, device number 29
[ 2398.530766][T28611] netlink: 'syz.5.6763': attribute type 1 has an invalid length.
[ 2399.022858][T28611] bond11: (slave veth31): Enslaving as an active interface with a down link
[ 2399.494703][T26232] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2399.624732][   T44] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2399.655662][T26232] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2399.655691][T26232] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2399.658249][T26232] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2399.658280][T26232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2399.658300][T26232] usb 7-1: SerialNumber: syz
[ 2399.794748][   T44] usb 6-1: Using ep0 maxpacket: 8
[ 2399.808294][   T44] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 2399.808395][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2399.869325][   T44] usb 6-1: config 0 descriptor??
[ 2400.124886][T26232] usb 7-1: 0:2 : does not exist
[ 2400.323945][   T44] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 2400.323969][   T44] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 2400.324187][   T44] asix 6-1:0.0: probe with driver asix failed with error -32
[ 2400.338314][T26232] usb 7-1: USB disconnect, device number 41
[ 2400.853304][T28630] program syz.6.6769 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2401.297933][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6770'.
[ 2401.487497][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6770'.
[ 2402.534133][T20654] usb 6-1: USB disconnect, device number 42
[ 2403.087351][T28653] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 2404.597438][T28669] netlink: 'syz.6.6778': attribute type 12 has an invalid length.
[ 2404.597457][T28669] netlink: 'syz.6.6778': attribute type 29 has an invalid length.
[ 2404.597468][T28669] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6778'.
[ 2404.730691][T28671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6779'.
[ 2404.730716][T28671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6779'.
[ 2407.273456][T28691] netlink: 'syz.5.6785': attribute type 1 has an invalid length.
[ 2407.434444][T20654] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 2407.661089][T20654] usb 10-1: Using ep0 maxpacket: 8
[ 2407.663504][T20654] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 2407.663528][T20654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2407.703077][T20654] usb 10-1: config 0 descriptor??
[ 2407.916270][T28693] veth33: entered promiscuous mode
[ 2408.158934][T20654] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 2408.158960][T20654] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 2408.159157][T20654] asix 10-1:0.0: probe with driver asix failed with error -32
[ 2408.318225][T28691] bond12: (slave veth35): Enslaving as an active interface with a down link
[ 2408.759790][T28705] netlink: 'syz.6.6789': attribute type 12 has an invalid length.
[ 2408.759807][T28705] netlink: 'syz.6.6789': attribute type 29 has an invalid length.
[ 2408.759819][T28705] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6789'.
[ 2408.964711][T20654] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 2409.116928][T20654] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[ 2409.116960][T20654] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2409.116983][T20654] usb 6-1: config 0 has no interface number 0
[ 2409.120581][T20654] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2409.120615][T20654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2409.120630][T20654] usb 6-1: Product: syz
[ 2409.120640][T20654] usb 6-1: Manufacturer: syz
[ 2409.120651][T20654] usb 6-1: SerialNumber: syz
[ 2409.205437][T20654] usb 6-1: config 0 descriptor??
[ 2409.429927][T20654] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[ 2409.430099][T20654] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82
[ 2409.452786][T20654] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[ 2409.452855][T20654] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[ 2409.452912][T20654] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[ 2409.489817][T20654] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2409.505095][T20654] usb 6-1: USB disconnect, device number 43
[ 2409.514254][T20654] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2409.530709][T20654] keyspan 6-1:0.133: device disconnected
[ 2410.212468][   T44] usb 10-1: USB disconnect, device number 30
[ 2411.370033][T28733] lo speed is unknown, defaulting to 1000
[ 2411.403607][   T44] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 2411.554716][   T44] usb 10-1: Using ep0 maxpacket: 16
[ 2411.557392][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2411.557428][   T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2411.557469][   T44] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2411.557495][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2411.657300][   T44] usb 10-1: config 0 descriptor??
[ 2411.670100][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 2412.089944][   T44] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0
[ 2412.089982][   T44] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0
[ 2412.090013][   T44] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0
[ 2412.090051][   T44] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0
[ 2412.090966][   T44] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0
[ 2412.173363][T28742] netlink: 'syz.8.6800': attribute type 12 has an invalid length.
[ 2412.173393][T28742] netlink: 'syz.8.6800': attribute type 29 has an invalid length.
[ 2412.173408][T28742] netlink: 148 bytes leftover after parsing attributes in process `syz.8.6800'.
[ 2412.302090][T13552] usb 10-1: USB disconnect, device number 31
[ 2412.314669][T26232] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 2412.497952][T26232] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2412.498037][T26232] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2412.498066][T26232] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2412.498125][T26232] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2412.498151][T26232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2412.695610][T26232] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 2412.699666][T26232] usb 7-1: invalid MIDI out EP 0
[ 2413.006268][T28743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2413.011033][T28743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2413.025392][T28743] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6801'.
[ 2413.344509][T28753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2413.345722][T28753] syzkaller0: entered promiscuous mode
[ 2413.345749][T28753] syzkaller0: entered allmulticast mode
[ 2413.353743][T28753] tipc: Resetting bearer <eth:syzkaller0>
[ 2413.393026][T28752] tipc: Resetting bearer <eth:syzkaller0>
[ 2413.738668][T28752] tipc: Disabling bearer <eth:syzkaller0>
[ 2413.798259][T26232] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2414.065867][T28762] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6806'.
[ 2415.550123][T28774] netlink: 'syz.8.6811': attribute type 10 has an invalid length.
[ 2415.782624][T28774] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2415.821859][T13552] usb 7-1: USB disconnect, device number 42
[ 2415.871347][T28777] netlink: 'syz.9.6812': attribute type 12 has an invalid length.
[ 2415.871371][T28777] netlink: 'syz.9.6812': attribute type 29 has an invalid length.
[ 2415.871387][T28777] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6812'.
[ 2416.115617][T28783] fuse: Invalid rootmode
[ 2416.160015][T28784] syzkaller0: entered promiscuous mode
[ 2416.160044][T28784] syzkaller0: entered allmulticast mode
[ 2416.965885][T26232] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 2417.234641][T26232] usb 7-1: Using ep0 maxpacket: 16
[ 2417.238701][T26232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2417.238746][T26232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2417.238776][T26232] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2417.238793][T26232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2417.250337][T26232] usb 7-1: config 0 descriptor??
[ 2417.881257][T26232] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0
[ 2417.881298][T26232] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0
[ 2417.881329][T26232] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0
[ 2417.881359][T26232] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0
[ 2417.881388][T26232] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0
[ 2417.882419][T26232] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 2418.165701][T26232] usb 7-1: USB disconnect, device number 43
[ 2419.498877][T28814] netlink: 'syz.0.6825': attribute type 10 has an invalid length.
[ 2419.796001][T28814] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2419.801195][T28813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2420.125039][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2420.762348][T28851] netlink: 'syz.5.6834': attribute type 1 has an invalid length.
[ 2420.935338][T28851] veth37: entered promiscuous mode
[ 2420.938665][T28851] bond13: (slave veth37): Enslaving as an active interface with a down link
[ 2422.127536][T13552] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 2422.174668][   T44] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2422.281919][T13552] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 2422.283599][T13552] usb 10-1: config 63 has an invalid interface number: 66 but max is 0
[ 2422.283628][T13552] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 2422.283649][T13552] usb 10-1: config 63 has no interface number 0
[ 2422.283698][T13552] usb 10-1: config 63 interface 66 has no altsetting 0
[ 2422.290065][T13552] usb 10-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[ 2422.290100][T13552] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2422.290121][T13552] usb 10-1: Product: syz
[ 2422.290132][T13552] usb 10-1: Manufacturer: syz
[ 2422.290143][T13552] usb 10-1: SerialNumber: syz
[ 2422.358697][   T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2422.358726][   T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2422.394911][   T44] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2422.394953][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2422.394975][   T44] usb 6-1: SerialNumber: syz
[ 2422.627417][T13552] uvcvideo 10-1:63.66: probe with driver uvcvideo failed with error -22
[ 2422.630633][T13552] usb 10-1: USB disconnect, device number 32
[ 2422.668941][   T44] usb 6-1: 0:2 : does not exist
[ 2422.754784][   T44] usb 6-1: USB disconnect, device number 44
[ 2427.195178][T20654] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[ 2427.225163][T28924] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6859'.
[ 2427.305803][T28919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2427.306080][T28919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2427.375529][T20654] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[ 2427.375560][T20654] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.375581][T20654] usb 7-1: config 0 has no interface number 0
[ 2427.380269][T20654] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2427.380291][T20654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2427.380306][T20654] usb 7-1: Product: syz
[ 2427.380317][T20654] usb 7-1: Manufacturer: syz
[ 2427.380328][T20654] usb 7-1: SerialNumber: syz
[ 2427.435072][T20654] usb 7-1: config 0 descriptor??
[ 2427.681249][T20654] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected
[ 2427.681511][T20654] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82
[ 2427.711680][T20654] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81
[ 2427.711804][T20654] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1
[ 2427.711899][T20654] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2
[ 2427.744380][T20654] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2427.755486][T20654] usb 7-1: USB disconnect, device number 44
[ 2427.760042][T20654] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2427.760496][T20654] keyspan 7-1:0.133: device disconnected
[ 2428.348194][T28919] wg1: left promiscuous mode
[ 2428.348216][T28919] wg1: left allmulticast mode
[ 2428.743277][T28919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2428.799583][T28919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2430.928189][T28919] ip6gre1: left promiscuous mode
[ 2430.998749][T28919] veth3: left promiscuous mode
[ 2431.168804][T28919] vlan2: left allmulticast mode
[ 2431.168830][T28919] veth1: left allmulticast mode
[ 2431.317666][ T1466] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2431.620698][T28958] fuse: Unknown parameter 'use00000000000000000000'
[ 2431.683628][ T1466] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2431.683754][ T1466] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2431.683796][ T1466] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2434.094904][   T44] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 2434.510008][   T44] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2434.510069][   T44] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2434.510090][   T44] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2434.510121][   T44] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2434.510138][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2434.550177][   T44] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 2434.551407][   T44] usb 9-1: invalid MIDI out EP 0
[ 2434.745541][T28985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2434.749707][T28985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2434.758270][T28985] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6878'.
[ 2435.020099][   T44] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2436.131813][T29005] netlink: 'syz.6.6885': attribute type 10 has an invalid length.
[ 2436.645009][T29005] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 2437.940432][T20654] usb 9-1: USB disconnect, device number 70
[ 2443.884686][T26232] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 2444.074686][T26232] usb 10-1: Using ep0 maxpacket: 8
[ 2444.077877][T26232] usb 10-1: config 0 has an invalid interface number: 31 but max is 0
[ 2444.077907][T26232] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2444.077929][T26232] usb 10-1: config 0 has no interface number 0
[ 2444.081231][T26232] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 2444.081262][T26232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2444.081284][T26232] usb 10-1: Product: syz
[ 2444.081300][T26232] usb 10-1: Manufacturer: syz
[ 2444.081316][T26232] usb 10-1: SerialNumber: syz
[ 2444.091358][T26232] usb 10-1: config 0 descriptor??
[ 2444.331146][T26232] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 2444.331196][T26232] uvcvideo 10-1:0.31: No valid video chain found.
[ 2446.241319][T26232] usb 10-1: USB disconnect, device number 33
[ 2448.044653][T26232] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2448.194684][T26232] usb 7-1: Using ep0 maxpacket: 8
[ 2448.202934][T26232] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2448.203965][T26232] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 2448.203993][T26232] usb 7-1: can't read configurations, error -71
[ 2448.615535][T29181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6944'.
[ 2452.222746][T29223] netlink: 592 bytes leftover after parsing attributes in process `syz.8.6960'.
[ 2452.244700][T13552] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 2452.464696][T13552] usb 7-1: Using ep0 maxpacket: 8
[ 2452.475589][T13552] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2452.476714][T13552] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 2452.476752][T13552] usb 7-1: can't read configurations, error -71
[ 2456.584691][T20654] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 2456.735072][T20654] usb 9-1: Using ep0 maxpacket: 8
[ 2456.741478][T20654] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 2456.742356][T20654] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 2456.742381][T20654] usb 9-1: can't read configurations, error -71
[ 2458.841929][T29307] netlink: 'syz.5.6982': attribute type 1 has an invalid length.
[ 2459.097808][T29307] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2459.175624][T29309] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 2460.409115][T29318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2460.413126][T29318] syzkaller0: entered promiscuous mode
[ 2460.413154][T29318] syzkaller0: entered allmulticast mode
[ 2460.605647][T29317] tipc: Resetting bearer <eth:syzkaller0>
[ 2460.786562][T29317] tipc: Disabling bearer <eth:syzkaller0>
[ 2461.287236][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2462.599057][T29352] fuse: Bad value for 'fd'
[ 2466.376189][T29414] netlink: 592 bytes leftover after parsing attributes in process `syz.9.7023'.
[ 2469.016460][T29444] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7032'.
[ 2469.877742][   T44] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 2470.034694][   T44] usb 9-1: Using ep0 maxpacket: 16
[ 2470.055156][   T44] usb 9-1: config 0 has no interfaces?
[ 2470.057764][   T44] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2470.057804][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2470.057825][   T44] usb 9-1: Product: syz
[ 2470.057839][   T44] usb 9-1: Manufacturer: syz
[ 2470.057850][   T44] usb 9-1: SerialNumber: syz
[ 2470.061579][   T44] usb 9-1: config 0 descriptor??
[ 2473.132885][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 2473.351596][T20654] usb 9-1: USB disconnect, device number 73
[ 2474.099893][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7050'.
[ 2474.099921][T29506] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7050'.
[ 2475.409452][T20654] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 2477.235347][T20654] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2477.235416][T20654] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2477.235447][T20654] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2477.235493][T20654] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2477.235520][T20654] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2477.298228][T20654] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 2477.299443][T20654] usb 9-1: invalid MIDI out EP 0
[ 2477.410145][T29527] netlink: 'syz.0.7057': attribute type 23 has an invalid length.
[ 2477.648021][T29519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2477.648508][T29519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2478.143566][T20654] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2478.938970][T29544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7062'.
[ 2479.163754][T29548] netlink: 360 bytes leftover after parsing attributes in process `syz.5.7062'.
[ 2480.646690][   T31] usb 9-1: USB disconnect, device number 74
[ 2481.414794][T29579] fuse: Unknown parameter 'fd0x0000000000000003'
[ 2481.797253][T29574] pim6reg: entered allmulticast mode
[ 2481.797387][T29577] pim6reg: left allmulticast mode
[ 2482.125307][T29601] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2482.514768][   T44] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2482.697193][   T44] usb 6-1: config 0 has no interfaces?
[ 2482.699648][   T44] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2482.699670][   T44] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2482.699685][   T44] usb 6-1: Product: syz
[ 2482.699696][   T44] usb 6-1: Manufacturer: syz
[ 2482.699707][   T44] usb 6-1: SerialNumber: syz
[ 2482.769738][   T44] usb 6-1: config 0 descriptor??
[ 2483.046782][   T31] usb 6-1: USB disconnect, device number 45
[ 2483.610471][T29623] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7089'.
[ 2484.503888][T29627] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7092'.
[ 2487.784678][T23654] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 2487.804745][T29671] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2487.944998][T23654] usb 10-1: Using ep0 maxpacket: 8
[ 2487.951338][T23654] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 2487.951369][T23654] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2487.951389][T23654] usb 10-1: Product: syz
[ 2487.951401][T23654] usb 10-1: Manufacturer: syz
[ 2487.951412][T23654] usb 10-1: SerialNumber: syz
[ 2488.018794][T23654] usb 10-1: config 0 descriptor??
[ 2488.054689][T13552] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2488.278949][T23654] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 2488.313370][T13552] usb 6-1: config 0 has no interfaces?
[ 2488.347634][T13552] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2488.347667][T13552] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2488.347689][T13552] usb 6-1: Product: syz
[ 2488.347711][T13552] usb 6-1: Manufacturer: syz
[ 2488.347727][T13552] usb 6-1: SerialNumber: syz
[ 2488.386230][T13552] usb 6-1: config 0 descriptor??
[ 2488.695871][   T31] usb 6-1: USB disconnect, device number 46
[ 2490.142471][T23654] usb write operation failed. (-71)
[ 2490.172547][T23654] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2490.190541][T23654] dvbdev: DVB: registering new adapter (Terratec H7)
[ 2490.190589][T23654] usb 10-1: media controller created
[ 2490.191643][T23654] usb read operation failed. (-71)
[ 2490.193339][T23654] usb write operation failed. (-71)
[ 2490.249150][T23654] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 2490.281980][T23654] usb 10-1: USB disconnect, device number 34
[ 2493.591121][T29731] syzkaller0: entered promiscuous mode
[ 2493.591151][T29731] syzkaller0: entered allmulticast mode
[ 2493.735344][T29733] fuse: Unknown parameter 'user_i00000000000000000000'
[ 2493.746060][T29735] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7131'.
[ 2494.047245][   T31] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 2494.179717][T29747] netlink: 'syz.6.7136': attribute type 1 has an invalid length.
[ 2494.179724][T29748] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 2494.215063][   T31] usb 9-1: config 0 has no interfaces?
[ 2494.217565][   T31] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2494.217596][   T31] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2494.217618][   T31] usb 9-1: Product: syz
[ 2494.217633][   T31] usb 9-1: Manufacturer: syz
[ 2494.217648][   T31] usb 9-1: SerialNumber: syz
[ 2494.271835][   T31] usb 9-1: config 0 descriptor??
[ 2494.308201][T29747] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2494.309472][T29748] syzkaller0: entered promiscuous mode
[ 2494.309499][T29748] syzkaller0: entered allmulticast mode
[ 2494.567014][T23664] usb 9-1: USB disconnect, device number 75
[ 2494.696601][T29747] bond2: (slave veth0_to_bond): Releasing active interface
[ 2494.751113][T29761] vlan2: entered allmulticast mode
[ 2494.751132][T29761] veth1: entered allmulticast mode
[ 2494.794724][T23654] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2494.984643][T23654] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2494.984701][T23654] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2494.984723][T23654] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2494.984754][T23654] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2494.984771][T23654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2495.000286][T23654] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2495.001347][T23654] usb 6-1: invalid MIDI out EP 0
[ 2495.145315][T23654] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2495.318248][T29763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2495.318702][T29763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2495.919965][T29783] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7147'.
[ 2496.993288][T29791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7150'.
[ 2496.993325][T29791] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7150'.
[ 2498.637248][T23664] usb 6-1: USB disconnect, device number 47
[ 2498.715662][T29804] netlink: 'syz.9.7156': attribute type 1 has an invalid length.
[ 2498.843218][T29804] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2499.079738][T29820] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2499.085888][T29813] bond2: (slave veth0_to_bond): Releasing active interface
[ 2499.087465][T29813] bond2: (slave vlan2): making interface the new active one
[ 2499.584781][T26232] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 2499.861539][T26232] usb 9-1: config 0 has no interfaces?
[ 2499.866297][T26232] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2499.866327][T26232] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2499.866350][T26232] usb 9-1: Product: syz
[ 2499.866365][T26232] usb 9-1: Manufacturer: syz
[ 2499.866390][T26232] usb 9-1: SerialNumber: syz
[ 2499.908784][T26232] usb 9-1: config 0 descriptor??
[ 2499.943664][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7161'.
[ 2500.056604][T29827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7161'.
[ 2500.179804][T23654] usb 9-1: USB disconnect, device number 76
[ 2501.024716][   T44] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 2501.190210][   T44] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2501.190274][   T44] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2501.190306][   T44] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2501.190353][   T44] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2501.190378][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2501.306654][   T44] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 2501.313685][   T44] usb 10-1: invalid MIDI out EP 0
[ 2501.568443][   T44] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2501.570884][T29845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2501.571353][T29845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2502.730391][T29882] delete_channel: no stack
[ 2503.334382][T29899] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2503.414594][   T44] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 2503.564887][   T44] usb 6-1: Using ep0 maxpacket: 32
[ 2503.567853][   T44] usb 6-1: config 0 has no interfaces?
[ 2503.572048][   T44] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 2503.572081][   T44] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 2503.572125][   T44] usb 6-1: Product: syz
[ 2503.572141][   T44] usb 6-1: Manufacturer: syz
[ 2503.572156][   T44] usb 6-1: SerialNumber: syz
[ 2503.632681][   T44] usb 6-1: config 0 descriptor??
[ 2503.843990][T23664] usb 6-1: USB disconnect, device number 48
[ 2504.336823][T26232] usb 10-1: USB disconnect, device number 35
[ 2504.609862][T29915] pim6reg: entered allmulticast mode
[ 2504.611032][T29915] pim6reg: left allmulticast mode
[ 2504.691417][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2504.706263][T29922] delete_channel: no stack
[ 2506.260883][T29941] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 2506.273752][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7204'.
[ 2506.273786][T29947] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7204'.
[ 2509.591199][T29992] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7221'.
[ 2510.518574][T29994] syzkaller0: entered promiscuous mode
[ 2510.518595][T29994] syzkaller0: entered allmulticast mode
[ 2513.662055][T30050] syzkaller0: entered promiscuous mode
[ 2513.662084][T30050] syzkaller0: entered allmulticast mode
[ 2514.494997][T30066] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 2514.821979][T30078] netlink: 'syz.9.7248': attribute type 1 has an invalid length.
[ 2515.874716][T23664] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 2516.024664][T23664] usb 10-1: Using ep0 maxpacket: 16
[ 2516.034367][T23664] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2516.034436][T23664] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2516.070884][T23664] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2516.070919][T23664] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2516.070945][T23664] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2516.072551][T23664] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2516.072580][T23664] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2516.072603][T23664] usb 10-1: Manufacturer: syz
[ 2516.141990][T23664] usb 10-1: config 0 descriptor??
[ 2516.474721][T23664] rc_core: IR keymap rc-hauppauge not found
[ 2516.474745][T23664] Registered IR keymap rc-empty
[ 2516.475795][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.504742][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.525678][T23664] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 2516.528202][T23664] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input37
[ 2516.534125][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.567136][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.584787][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.605600][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.625515][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.654821][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.674782][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.704706][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.724706][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.754951][T23664] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2516.780997][T23664] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2516.781018][T23664] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2516.803155][T23664] usb 10-1: USB disconnect, device number 36
[ 2517.155914][T30114] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 2519.824612][T23654] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 2519.974736][T23654] usb 6-1: Using ep0 maxpacket: 32
[ 2519.977336][T23654] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.977398][T23654] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[ 2519.977424][T23654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2519.981184][T23654] usb 6-1: config 0 descriptor??
[ 2520.035483][T23654] usb 6-1: bad CDC descriptors
[ 2520.188186][T23654] usb 6-1: USB disconnect, device number 49
[ 2521.216627][T30175] syzkaller0: entered promiscuous mode
[ 2521.216660][T30175] syzkaller0: entered allmulticast mode
[ 2523.154673][T23664] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 2523.284647][T23664] usb 7-1: device descriptor read/64, error -71
[ 2523.529129][T23664] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 2523.674714][T23664] usb 7-1: device descriptor read/64, error -71
[ 2523.787177][T23664] usb usb7-port1: attempt power cycle
[ 2524.062301][T30216] syzkaller0: entered promiscuous mode
[ 2524.062331][T30216] syzkaller0: entered allmulticast mode
[ 2524.075064][T26232] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 2524.136043][T23664] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 2524.136721][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2524.159072][T23664] usb 7-1: device descriptor read/8, error -71
[ 2524.205148][T26232] usb 9-1: device descriptor read/64, error -71
[ 2524.416634][T23664] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 2524.435545][T23664] usb 7-1: device descriptor read/8, error -71
[ 2524.444797][T26232] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 2524.545739][T23664] usb usb7-port1: unable to enumerate USB device
[ 2524.574872][T26232] usb 9-1: device descriptor read/64, error -71
[ 2524.686358][T26232] usb usb9-port1: attempt power cycle
[ 2524.874868][T13585] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 2525.024756][T26232] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 2525.038799][T13585] usb 6-1: Using ep0 maxpacket: 16
[ 2525.041545][T13585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2525.041614][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2525.041661][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2525.041688][T13585] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2525.041718][T13585] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2525.043929][T13585] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2525.043965][T13585] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2525.043991][T13585] usb 6-1: Manufacturer: syz
[ 2525.052776][T13585] usb 6-1: config 0 descriptor??
[ 2525.085470][T26232] usb 9-1: device descriptor read/8, error -71
[ 2525.424776][T26232] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 2525.445697][T26232] usb 9-1: device descriptor read/8, error -71
[ 2525.454670][T13585] rc_core: IR keymap rc-hauppauge not found
[ 2525.454692][T13585] Registered IR keymap rc-empty
[ 2525.454870][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.474873][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.495833][T13585] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2525.503087][T13585] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38
[ 2525.548933][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.559965][T26232] usb usb9-port1: unable to enumerate USB device
[ 2525.565557][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.585164][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.604841][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.624814][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.651645][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.665397][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.684727][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.704785][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.724831][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2525.768938][T13585] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2525.768958][T13585] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2525.855885][T13585] usb 6-1: USB disconnect, device number 50
[ 2526.514791][T23664] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 2526.754656][T23664] usb 7-1: Using ep0 maxpacket: 16
[ 2526.760926][T23664] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 2526.760960][T23664] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2526.760982][T23664] usb 7-1: Product: syz
[ 2526.760999][T23664] usb 7-1: Manufacturer: syz
[ 2526.761015][T23664] usb 7-1: SerialNumber: syz
[ 2526.808440][T23664] usb 7-1: config 0 descriptor??
[ 2526.820040][T23664] visor 7-1:0.0: Sony Clie 3.5 converter detected
[ 2527.219407][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7304'.
[ 2528.625360][T13552] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 2528.971706][T13552] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2528.971729][T13552] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2528.971745][T13552] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2528.972045][T13552] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2528.972067][T13552] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2529.050288][T13552] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2529.050323][T13552] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2529.050345][T13552] usb 9-1: Product: syz
[ 2529.050360][T13552] usb 9-1: Manufacturer: syz
[ 2529.107141][T13552] cdc_wdm 9-1:1.0: skipping garbage
[ 2529.107200][T13552] cdc_wdm 9-1:1.0: skipping garbage
[ 2529.134441][T13552] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 2529.142112][T13552] cdc_wdm 9-1:1.0: Unknown control protocol
[ 2529.360465][T13552] usb 9-1: USB disconnect, device number 81
[ 2530.125168][T23664] usb 7-1: clie_3_5_startup: get interface number failed: -110
[ 2530.125340][T23664] visor 7-1:0.0: probe with driver visor failed with error -110
[ 2530.945228][   T44] usb 7-1: USB disconnect, device number 53
[ 2531.045186][T30272] netlink: 360 bytes leftover after parsing attributes in process `syz.9.7311'.
[ 2531.709593][T30283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7312'.
[ 2531.893773][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880672edc00: rx timeout, send abort
[ 2531.899060][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880672ee800: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 2531.901047][T30287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7312'.
[ 2531.984709][T23664] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 2532.114688][T23664] usb 10-1: device descriptor read/64, error -71
[ 2532.365194][T23664] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 2532.396862][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880672edc00: abort rx timeout. Force session deactivation
[ 2532.524831][T23664] usb 10-1: device descriptor read/64, error -71
[ 2532.635599][T23664] usb usb10-port1: attempt power cycle
[ 2532.974706][T23664] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 2533.012580][T23664] usb 10-1: device descriptor read/8, error -71
[ 2533.274723][T23664] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 2533.429602][T23664] usb 10-1: device descriptor read/8, error -71
[ 2533.550361][T23664] usb usb10-port1: unable to enumerate USB device
[ 2534.553983][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 2535.798925][ T8887] Bluetooth: hci2: connection err: -111
[ 2536.684861][   T44] usb 10-1: new full-speed USB device number 41 using dummy_hcd
[ 2536.851094][   T44] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2536.851118][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2536.851134][   T44] usb 10-1: Product: syz
[ 2536.851144][   T44] usb 10-1: Manufacturer: syz
[ 2536.851155][   T44] usb 10-1: SerialNumber: syz
[ 2536.906679][   T44] usb 10-1: config 0 descriptor??
[ 2537.027639][T30356] netlink: 360 bytes leftover after parsing attributes in process `syz.0.7339'.
[ 2537.369390][T30357] bond5: (slave veth0_to_bond): Releasing active interface
[ 2538.574181][T30389] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7349'.
[ 2539.711536][T13585] usb 10-1: USB disconnect, device number 41
[ 2540.440008][T30417] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7358'.
[ 2540.674667][   T44] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 2540.844874][   T44] usb 10-1: Using ep0 maxpacket: 16
[ 2540.852045][   T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2540.852074][   T44] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2540.852115][   T44] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2540.852140][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2540.921533][   T44] usb 10-1: config 0 descriptor??
[ 2543.482404][   T44] usb 10-1: USB disconnect, device number 42
[ 2543.827059][T30459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7371'.
[ 2544.241479][   T38] kauditd_printk_skb: 110 callbacks suppressed
[ 2544.241503][   T38] audit: type=1804 audit(1759578450.738:2027): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.7373" name="/newroot/597/file1" dev="fuse" ino=1 res=1 errno=0
[ 2544.879543][T30476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2545.384647][   T44] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 2545.536369][   T44] usb 9-1: Using ep0 maxpacket: 16
[ 2545.541328][   T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2545.541357][   T44] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2545.541395][   T44] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2545.541420][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2545.548876][   T44] usb 9-1: config 0 descriptor??
[ 2546.074729][T26232] usb 10-1: new full-speed USB device number 43 using dummy_hcd
[ 2546.205690][   T38] audit: type=1804 audit(1759578452.718:2028): pid=30509 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.7387" name="/newroot/527/file1" dev="fuse" ino=1 res=1 errno=0
[ 2546.236011][T26232] usb 10-1: config 2 has an invalid interface number: 1 but max is 0
[ 2546.236042][T26232] usb 10-1: config 2 has no interface number 0
[ 2546.264084][T26232] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[ 2546.264109][T26232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2546.264124][T26232] usb 10-1: Product: syz
[ 2546.264136][T26232] usb 10-1: Manufacturer: syz
[ 2546.264147][T26232] usb 10-1: SerialNumber: syz
[ 2548.221716][T13585] usb 9-1: USB disconnect, device number 82
[ 2549.164665][   T44] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 2549.294686][   T44] usb 7-1: device descriptor read/64, error -71
[ 2549.564694][   T44] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 2549.694838][   T44] usb 7-1: device descriptor read/64, error -71
[ 2549.809517][   T44] usb usb7-port1: attempt power cycle
[ 2550.214370][T28839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2550.248942][   T44] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 2550.250067][T28839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2550.265196][T28839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2550.285057][   T44] usb 7-1: device descriptor read/8, error -71
[ 2550.288923][T28839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2550.337198][T28839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2550.524807][   T44] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 2550.551330][   T44] usb 7-1: device descriptor read/8, error -71
[ 2550.658339][   T44] usb usb7-port1: unable to enumerate USB device
[ 2551.351593][T26232] usb 10-1: selecting invalid altsetting 1
[ 2551.351616][T26232] snd-usb-us122l 10-1:2.1: usb_set_interface error
[ 2551.353551][T26232] snd-usb-us122l 10-1:2.1: probe with driver snd-usb-us122l failed with error -22
[ 2551.655406][   T44] usb 10-1: USB disconnect, device number 43
[ 2552.024017][ T1418] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2552.201006][T30531] lo speed is unknown, defaulting to 1000
[ 2552.475828][T28839] Bluetooth: hci1: command tx timeout
[ 2552.870732][ T1418] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2553.474431][ T1418] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2553.814824][T13585] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 2553.972641][ T1418] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2553.974639][T13585] usb 7-1: Using ep0 maxpacket: 16
[ 2554.006139][T13585] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2554.006169][T13585] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2554.006209][T13585] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2554.006235][T13585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2554.067905][T13585] usb 7-1: config 0 descriptor??
[ 2554.545988][T28839] Bluetooth: hci1: command tx timeout
[ 2554.684647][T13585] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 2554.776373][T30531] chnl_net:caif_netlink_parms(): no params data found
[ 2554.844609][T13585] usb 6-1: Using ep0 maxpacket: 16
[ 2554.849765][T13585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2554.849826][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2554.849855][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2554.849877][T13585] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2554.849901][T13585] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2554.851227][T13585] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2554.851256][T13585] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2554.851278][T13585] usb 6-1: Manufacturer: syz
[ 2554.942016][T13585] usb 6-1: config 0 descriptor??
[ 2555.058135][ T1418] bridge_slave_1: left allmulticast mode
[ 2555.058169][ T1418] bridge_slave_1: left promiscuous mode
[ 2555.059147][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2555.128184][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2555.317693][   T38] audit: type=1804 audit(1759578461.828:2029): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.7407" name="/newroot/436/file1" dev="fuse" ino=1 res=1 errno=0
[ 2555.364659][T13585] rc_core: IR keymap rc-hauppauge not found
[ 2555.364683][T13585] Registered IR keymap rc-empty
[ 2555.364844][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.384980][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.405767][T13585] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2555.407967][T13585] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input39
[ 2555.412501][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.447109][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.464710][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.484697][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.505016][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.534818][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.557092][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.574715][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.594860][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.617091][T13585] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2555.637731][T13585] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2555.637792][T13585] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2555.678855][T23664] usb 6-1: USB disconnect, device number 51
[ 2556.584985][T26232] usb 7-1: USB disconnect, device number 58
[ 2556.604732][T23664] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 2556.624634][T28839] Bluetooth: hci1: command tx timeout
[ 2556.753027][T23664] usb 6-1: device descriptor read/64, error -71
[ 2557.064623][T23664] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 2557.214708][T23664] usb 6-1: device descriptor read/64, error -71
[ 2557.325046][T23664] usb usb6-port1: attempt power cycle
[ 2557.664673][T23664] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 2557.735790][T23664] usb 6-1: device descriptor read/8, error -71
[ 2558.014705][T23664] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 2558.046723][T23664] usb 6-1: device descriptor read/8, error -71
[ 2558.155185][T23664] usb usb6-port1: unable to enumerate USB device
[ 2558.704647][T28839] Bluetooth: hci1: command tx timeout
[ 2559.336822][T30611] delete_channel: no stack
[ 2559.824815][T23664] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 2559.865341][   T38] audit: type=1804 audit(1759578466.378:2030): pid=30629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.7417" name="/newroot/389/file1" dev="fuse" ino=1 res=1 errno=0
[ 2560.024589][T23664] usb 6-1: Using ep0 maxpacket: 16
[ 2560.026747][T23664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2560.030492][T23664] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2560.030520][T23664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2560.030543][T23664] usb 6-1: Product: syz
[ 2560.030555][T23664] usb 6-1: Manufacturer: syz
[ 2560.030566][T23664] usb 6-1: SerialNumber: syz
[ 2560.080014][T23664] usb 6-1: config 0 descriptor??
[ 2560.092468][T23664] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2560.092504][T23664] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 2560.246100][T26232] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 2560.424666][T26232] usb 7-1: Using ep0 maxpacket: 16
[ 2560.427230][T26232] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2560.427257][T26232] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2560.427299][T26232] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2560.427406][T26232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2560.564985][T26232] usb 7-1: config 0 descriptor??
[ 2560.854527][T23664] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 2561.298161][T23664] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2561.298195][T23664] em28xx 6-1:0.0: board has no eeprom
[ 2561.354675][T23664] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2561.354705][T23664] em28xx 6-1:0.0: dvb set to bulk mode.
[ 2561.396855][T23664] usb 6-1: USB disconnect, device number 56
[ 2561.398452][T23664] em28xx 6-1:0.0: Disconnecting em28xx
[ 2561.398499][T20654] em28xx 6-1:0.0: Binding DVB extension
[ 2561.683363][T20654] em28xx 6-1:0.0: Registering input extension
[ 2561.683817][T23664] em28xx 6-1:0.0: Closing input extension
[ 2561.706598][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2561.906547][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2561.995946][ T1418] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 2562.233712][ T1418] bond0 (unregistering): Released all slaves
[ 2562.430604][ T1418] bond1 (unregistering): Released all slaves
[ 2562.478861][ T1418] bond2 (unregistering): Released all slaves
[ 2562.811699][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7423'.
[ 2563.007991][T30649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7423'.
[ 2563.055285][T23664] em28xx 6-1:0.0: Freeing device
[ 2563.081819][T23654] usb 7-1: USB disconnect, device number 59
[ 2563.786002][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2563.884679][T23654] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 2563.993060][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2564.105433][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2564.109996][T23654] usb 7-1: Using ep0 maxpacket: 8
[ 2564.112303][T23654] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2564.112337][T23654] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2564.112380][T23654] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2564.112405][T23654] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2564.127909][T23654] usb 7-1: config 0 descriptor??
[ 2564.227710][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2564.541668][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2564.706760][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2564.740425][T23654] uclogic 0003:5543:0004.0026: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.6-1/input0
[ 2564.743506][T30658] delete_channel: no stack
[ 2564.911056][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2565.299206][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2565.385480][ T1418] bond3 (unregistering): (slave veth7): Releasing active interface
[ 2565.474624][T26232] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 2565.482673][ T1418] bond3 (unregistering): Released all slaves
[ 2565.718234][ T1418] bond4 (unregistering): (slave veth9): Releasing active interface
[ 2565.744832][T26232] usb 10-1: Using ep0 maxpacket: 16
[ 2565.747232][T26232] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2565.747296][T26232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2565.747327][T26232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2565.747352][T26232] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2565.747376][T26232] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2565.749290][T26232] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2565.749320][T26232] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2565.749342][T26232] usb 10-1: Manufacturer: syz
[ 2565.753383][T26232] usb 10-1: config 0 descriptor??
[ 2565.886455][ T1418] bond4 (unregistering): (slave veth11): Releasing active interface
[ 2566.019493][ T1418] bond4 (unregistering): Released all slaves
[ 2566.264993][T26232] rc_core: IR keymap rc-hauppauge not found
[ 2566.265011][T26232] Registered IR keymap rc-empty
[ 2566.269713][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.294631][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.315728][T26232] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 2566.317933][T26232] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input41
[ 2566.321500][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.364936][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.385816][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.420296][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.474974][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.505139][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.565168][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.585381][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.604727][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.666033][T26232] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 2566.696830][T26232] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2566.696850][T26232] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2566.700697][T26232] usb 10-1: USB disconnect, device number 44
[ 2566.769640][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2566.907256][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2567.062453][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2567.218020][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2567.442461][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2567.525347][ T1418] bond5 (unregistering): (slave veth13): Releasing active interface
[ 2567.590232][ T1418] bond5 (unregistering): Released all slaves
[ 2567.661944][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7424'.
[ 2567.663371][T30663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7424'.
[ 2567.704637][T26232] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 2567.775271][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2567.776058][T30676] pim6reg: entered allmulticast mode
[ 2567.776932][T30677] pim6reg: left allmulticast mode
[ 2567.857929][T26232] usb 10-1: Using ep0 maxpacket: 16
[ 2567.874198][T26232] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 2567.874229][T26232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2567.874249][T26232] usb 10-1: Product: syz
[ 2567.874265][T26232] usb 10-1: Manufacturer: syz
[ 2567.874280][T26232] usb 10-1: SerialNumber: syz
[ 2568.055569][T26232] usb 10-1: config 0 descriptor??
[ 2568.079811][T26232] visor 10-1:0.0: Sony Clie 3.5 converter detected
[ 2568.213499][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2568.269551][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7424'.
[ 2568.273014][T30663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7424'.
[ 2568.351407][ T1418] tipc: Left network mode
[ 2568.351810][  T145] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2568.358612][  T145] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2568.465935][T30684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7434'.
[ 2568.497713][  T145] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2568.498856][  T145] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2568.889109][   T44] usb 7-1: USB disconnect, device number 60
[ 2569.192424][    C1] vcan0: j1939_tp_rxtimer: 0xffff888051380800: rx timeout, send abort
[ 2569.192681][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051381c00: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 2569.331399][T13552] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 2569.571536][T13552] usb 6-1: Using ep0 maxpacket: 8
[ 2569.574883][T13552] usb 6-1: config 0 has an invalid interface number: 111 but max is 0
[ 2569.574913][T13552] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2569.574935][T13552] usb 6-1: config 0 has no interface number 0
[ 2569.574990][T13552] usb 6-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[ 2569.575039][T13552] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b
[ 2569.575068][T13552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2569.582125][T13552] usb 6-1: config 0 descriptor??
[ 2569.588276][T13552] qmi_wwan 6-1:0.111: skipping garbage
[ 2569.588300][T13552] qmi_wwan 6-1:0.111: bogus CDC Union: master=0, slave=0
[ 2569.588796][T13552] qmi_wwan 6-1:0.111: probe with driver qmi_wwan failed with error -22
[ 2569.692506][    C1] vcan0: j1939_tp_rxtimer: 0xffff888051380800: abort rx timeout. Force session deactivation
[ 2569.837557][T13552] usb 6-1: USB disconnect, device number 57
[ 2569.973891][T30531] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2569.974045][T30531] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2569.974343][T30531] bridge_slave_0: entered allmulticast mode
[ 2569.982898][T30531] bridge_slave_0: entered promiscuous mode
[ 2570.524925][T30531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2570.525068][T30531] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2570.525531][T30531] bridge_slave_1: entered allmulticast mode
[ 2570.598684][T30531] bridge_slave_1: entered promiscuous mode
[ 2571.204775][T13585] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2571.307567][T26232] usb 10-1: clie_3_5_startup: get interface number failed: -110
[ 2571.307687][T26232] visor 10-1:0.0: probe with driver visor failed with error -110
[ 2571.400803][T13585] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2571.400846][T13585] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2571.400867][T13585] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2571.400899][T13585] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2571.400916][T13585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2571.520305][T13585] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2571.521086][T13585] usb 6-1: invalid MIDI out EP 0
[ 2571.723502][T30531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2571.765662][T30704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2571.766120][T30704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2571.790143][T30531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2571.983415][T13585] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2572.424171][T13552] usb 10-1: USB disconnect, device number 45
[ 2573.127444][T30531] team0: Port device team_slave_0 added
[ 2573.135021][T30531] team0: Port device team_slave_1 added
[ 2573.394749][ T1418] hsr_slave_0: left promiscuous mode
[ 2573.414941][ T1418] hsr_slave_1: left promiscuous mode
[ 2573.533677][ T1418] veth1_macvtap: left promiscuous mode
[ 2573.533764][ T1418] veth0_macvtap: left promiscuous mode
[ 2573.534096][ T1418] veth1_vlan: left promiscuous mode
[ 2573.552488][ T1418] veth0_vlan: left promiscuous mode
[ 2573.942339][T23654] usb 6-1: USB disconnect, device number 58
[ 2574.054666][T13585] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 2574.244971][T13585] usb 7-1: Using ep0 maxpacket: 8
[ 2574.247424][T13585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2574.247457][T13585] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2574.247498][T13585] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2574.247523][T13585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2574.256287][T13585] usb 7-1: config 0 descriptor??
[ 2574.686960][T13585] uclogic 0003:5543:0004.0027: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.6-1/input0
[ 2575.956952][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c104400: rx timeout, send abort
[ 2575.957142][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c104800: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 2576.457037][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c104400: abort rx timeout. Force session deactivation
[ 2577.264700][T13552] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 2577.447280][T13552] usb 6-1: Using ep0 maxpacket: 16
[ 2577.470966][T13552] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 2577.471013][T13552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2577.471035][T13552] usb 6-1: Product: syz
[ 2577.471054][T13552] usb 6-1: Manufacturer: syz
[ 2577.471070][T13552] usb 6-1: SerialNumber: syz
[ 2577.486719][T13552] usb 6-1: config 0 descriptor??
[ 2577.493254][T13552] visor 6-1:0.0: Sony Clie 3.5 converter detected
[ 2577.961046][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7451'.
[ 2578.817123][T30747] block device autoloading is deprecated and will be removed.
[ 2579.585951][ T1418] team0 (unregistering): Port device team_slave_1 removed
[ 2580.086813][ T1418] team0 (unregistering): Port device team_slave_0 removed
[ 2580.797619][T13552] usb 6-1: clie_3_5_startup: get interface number failed: -110
[ 2580.797797][T13552] visor 6-1:0.0: probe with driver visor failed with error -110
[ 2583.726942][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7446'.
[ 2583.727256][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7446'.
[ 2583.766484][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7446'.
[ 2583.766719][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7446'.
[ 2583.767763][T30531] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2583.767778][T30531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2583.767808][T30531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2583.797334][T30531] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2583.797368][T30531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2583.797404][T30531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2584.002197][T13585] usb 6-1: USB disconnect, device number 59
[ 2584.074615][T26232] usb 7-1: USB disconnect, device number 61
[ 2584.440808][T30531] hsr_slave_0: entered promiscuous mode
[ 2584.445942][T30531] hsr_slave_1: entered promiscuous mode
[ 2584.449806][T30531] debugfs: 'hsr0' already exists in 'hsr'
[ 2584.449840][T30531] Cannot create hsr debugfs directory
[ 2586.088399][T30777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2586.311981][T30777] tipc: Resetting bearer <eth:syzkaller0>
[ 2586.495160][T30776] tipc: Disabling bearer <eth:syzkaller0>
[ 2587.014660][T13585] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 2587.164705][T13585] usb 6-1: Using ep0 maxpacket: 8
[ 2587.170450][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2587.170485][T13585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2587.170527][T13585] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2587.170553][T13585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2587.179132][T13585] usb 6-1: config 0 descriptor??
[ 2587.395287][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2587.602151][T30531] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2587.645906][T13585] uclogic 0003:5543:0004.0028: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0
[ 2587.703110][T30531] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2587.763000][T30531] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2587.811016][T30531] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2587.912424][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7466'.
[ 2587.972620][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7466'.
[ 2587.978444][T30807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7466'.
[ 2587.980933][ T1418] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2588.050729][T30807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7466'.
[ 2588.061456][ T1418] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2588.074151][ T1418] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2588.096390][ T1418] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2588.282421][T30531] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2588.303057][T26232] usb 6-1: USB disconnect, device number 60
[ 2588.348356][   T44] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 2588.447834][T30531] 8021q: adding VLAN 0 to HW filter on device team0
[ 2588.456473][T10046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2588.459994][T10046] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2588.496985][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2588.511067][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2588.526639][   T44] usb 10-1: Using ep0 maxpacket: 16
[ 2588.528921][   T44] usb 10-1: config 166 has an invalid interface number: 177 but max is 1
[ 2588.528942][   T44] usb 10-1: config 166 has an invalid interface number: 34 but max is 1
[ 2588.528957][   T44] usb 10-1: config 166 has no interface number 0
[ 2588.528970][   T44] usb 10-1: config 166 has no interface number 1
[ 2588.529030][   T44] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2588.529046][   T44] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2588.529074][   T44] usb 10-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 2588.529093][   T44] usb 10-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2588.529112][   T44] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 2588.529133][   T44] usb 10-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 2588.529151][   T44] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2588.529170][   T44] usb 10-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2588.529186][   T44] usb 10-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 2588.529206][   T44] usb 10-1: config 166 interface 177 has no altsetting 0
[ 2588.529220][   T44] usb 10-1: config 166 interface 34 has no altsetting 0
[ 2588.532772][   T44] usb 10-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 2588.532794][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2588.532809][   T44] usb 10-1: Product: syz
[ 2588.532820][   T44] usb 10-1: Manufacturer: syz
[ 2588.532831][   T44] usb 10-1: SerialNumber: syz
[ 2588.797765][   T44] ums-realtek 10-1:166.177: USB Mass Storage device detected
[ 2588.910518][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2589.018099][   T44] ums-realtek 10-1:166.34: USB Mass Storage device detected
[ 2589.334036][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2589.385478][   T44] ums-realtek 10-1:166.34: probe with driver ums-realtek failed with error -5
[ 2589.444299][   T44] uvcvideo 10-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 2589.444335][   T44] uvcvideo 10-1:166.34: No valid video chain found.
[ 2589.482550][   T44] usb 10-1: USB disconnect, device number 46
[ 2589.514674][ T5992] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2589.664872][ T5992] usb 6-1: Using ep0 maxpacket: 8
[ 2589.667469][ T5992] usb 6-1: config 0 has an invalid interface number: 111 but max is 0
[ 2589.667498][ T5992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2589.667519][ T5992] usb 6-1: config 0 has no interface number 0
[ 2589.667567][ T5992] usb 6-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[ 2589.667614][ T5992] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b
[ 2589.667640][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2589.744904][ T5992] usb 6-1: config 0 descriptor??
[ 2589.772316][ T5992] qmi_wwan 6-1:0.111: probe with driver qmi_wwan failed with error -22
[ 2589.855217][T30531] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2589.962074][   T44] usb 6-1: USB disconnect, device number 61
[ 2590.005216][T30850] netlink: 360 bytes leftover after parsing attributes in process `syz.6.7485'.
[ 2590.444799][T23654] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 2590.606506][T23654] usb 10-1: Using ep0 maxpacket: 8
[ 2590.612274][T23654] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[ 2590.612295][T23654] usb 10-1: config 179 has no interface number 0
[ 2590.612334][T23654] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2590.612355][T23654] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2590.612376][T23654] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2590.612396][T23654] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 2590.612413][T23654] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2590.612433][T23654] usb 10-1: config 179 interface 65 has no altsetting 0
[ 2590.612469][T23654] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2590.612487][T23654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2590.842686][T30531] veth0_vlan: entered promiscuous mode
[ 2590.857287][T23654] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input42
[ 2590.912126][T30531] veth1_vlan: entered promiscuous mode
[ 2590.955559][   T44] usb 10-1: USB disconnect, device number 47
[ 2591.093889][T30531] veth0_macvtap: entered promiscuous mode
[ 2591.111932][T30531] veth1_macvtap: entered promiscuous mode
[ 2591.165498][T30531] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2591.217942][T30531] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2591.238570][T23546] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2591.238824][T23546] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2591.238867][T23546] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2591.238907][T23546] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2591.853657][T30877] netlink: 'syz.0.7493': attribute type 1 has an invalid length.
[ 2591.999625][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd6a000: rx timeout, send abort
[ 2591.999853][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cd69400: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 2592.007260][T30877] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2592.094703][T20654] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 2592.098295][T30879] ip6erspan0: entered promiscuous mode
[ 2592.120385][T30879] bond4: (slave ip6erspan0): making interface the new active one
[ 2592.161343][T30879] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 2592.254709][T20654] usb 10-1: Using ep0 maxpacket: 8
[ 2592.257351][T20654] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2592.257387][T20654] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2592.257427][T20654] usb 10-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2592.257461][T20654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2592.275181][T23546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2592.275209][T23546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2592.345871][T20654] usb 10-1: config 0 descriptor??
[ 2592.499725][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd6a000: abort rx timeout. Force session deactivation
[ 2592.829321][T20654] uclogic 0003:5543:0004.0029: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.9-1/input0
[ 2592.890319][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2592.890342][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2593.095533][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7492'.
[ 2593.104407][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7492'.
[ 2593.106069][  T145] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2593.106165][  T145] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2593.106237][  T145] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2593.106283][  T145] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2593.110046][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7492'.
[ 2593.111016][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7492'.
[ 2593.528996][T20654] usb 10-1: USB disconnect, device number 48
[ 2594.050428][T30910] netlink: 'syz.5.7502': attribute type 1 has an invalid length.
[ 2594.292053][T30915] batadv0: entered promiscuous mode
[ 2595.016849][T30908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7501'.
[ 2595.041283][T30908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7501'.
[ 2595.074575][T20654] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 2595.234646][T20654] usb 9-1: Using ep0 maxpacket: 16
[ 2595.238011][T20654] usb 9-1: config 166 has an invalid interface number: 177 but max is 1
[ 2595.238039][T20654] usb 9-1: config 166 has an invalid interface number: 34 but max is 1
[ 2595.238063][T20654] usb 9-1: config 166 has no interface number 0
[ 2595.238081][T20654] usb 9-1: config 166 has no interface number 1
[ 2595.238239][T20654] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2595.238263][T20654] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2595.238304][T20654] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 2595.238331][T20654] usb 9-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2595.238370][T20654] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 2595.238399][T20654] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 2595.238426][T20654] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2595.238455][T20654] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2595.238478][T20654] usb 9-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 2595.238509][T20654] usb 9-1: config 166 interface 177 has no altsetting 0
[ 2595.238529][T20654] usb 9-1: config 166 interface 34 has no altsetting 0
[ 2595.241253][T20654] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 2595.241284][T20654] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2595.241308][T20654] usb 9-1: Product: syz
[ 2595.241325][T20654] usb 9-1: Manufacturer: syz
[ 2595.241341][T20654] usb 9-1: SerialNumber: syz
[ 2595.906909][T20654] ums-realtek 9-1:166.177: USB Mass Storage device detected
[ 2595.999906][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 2596.163991][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2596.233997][T20654] ums-realtek 9-1:166.34: USB Mass Storage device detected
[ 2596.634107][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2596.652561][T20654] ums-realtek 9-1:166.34: probe with driver ums-realtek failed with error -5
[ 2596.671885][T20654] uvcvideo 9-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 2596.671925][T20654] uvcvideo 9-1:166.34: No valid video chain found.
[ 2596.719335][T20654] usb 9-1: USB disconnect, device number 83
[ 2597.235257][ T5992] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 2597.375141][   T44] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 2597.404638][ T5992] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2597.404666][ T5992] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2597.407701][ T5992] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2597.407731][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2597.407752][ T5992] usb 7-1: SerialNumber: syz
[ 2597.534600][   T44] usb 6-1: Using ep0 maxpacket: 8
[ 2597.566224][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2597.566329][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2597.566377][   T44] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2597.566403][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2597.575504][T20654] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 2597.625986][   T44] usb 6-1: config 0 descriptor??
[ 2597.633004][ T5992] usb 7-1: 0:2 : does not exist
[ 2597.633096][ T5992] usb 7-1: unit 5 not found!
[ 2597.686051][ T5992] usb 7-1: USB disconnect, device number 62
[ 2597.705713][T20654] usb 9-1: device descriptor read/64, error -71
[ 2597.929421][T30962] siw: device registration error -23
[ 2597.946379][T20654] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[ 2598.075388][T20654] usb 9-1: device descriptor read/64, error -71
[ 2598.084311][   T44] uclogic 0003:5543:0004.002A: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0
[ 2598.199465][T20654] usb usb9-port1: attempt power cycle
[ 2598.332166][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7514'.
[ 2598.332963][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7514'.
[ 2598.334340][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7514'.
[ 2598.335164][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7514'.
[ 2598.426260][T30968] netlink: 360 bytes leftover after parsing attributes in process `syz.9.7522'.
[ 2598.544748][T20654] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[ 2598.565783][T20654] usb 9-1: device descriptor read/8, error -71
[ 2598.648588][T23654] usb 6-1: USB disconnect, device number 62
[ 2598.874822][T20654] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[ 2598.909531][T20654] usb 9-1: device descriptor read/8, error -71
[ 2599.016370][T20654] usb usb9-port1: unable to enumerate USB device
[ 2599.200700][T20654] IPVS: starting estimator thread 0...
[ 2599.224647][   T44] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 2599.555113][T30988] IPVS: using max 9 ests per chain, 21600 per kthread
[ 2599.584766][   T44] usb 7-1: Using ep0 maxpacket: 16
[ 2599.615089][   T44] usb 7-1: config 166 has an invalid interface number: 177 but max is 1
[ 2599.615185][   T44] usb 7-1: config 166 has an invalid interface number: 34 but max is 1
[ 2599.615209][   T44] usb 7-1: config 166 has no interface number 0
[ 2599.615227][   T44] usb 7-1: config 166 has no interface number 1
[ 2599.616544][   T44] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2599.616572][   T44] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2599.616620][   T44] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 2599.616649][   T44] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2599.616677][   T44] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 2599.616708][   T44] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 2599.616734][   T44] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2599.616761][   T44] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2599.616785][   T44] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 2599.616814][   T44] usb 7-1: config 166 interface 177 has no altsetting 0
[ 2599.616834][   T44] usb 7-1: config 166 interface 34 has no altsetting 0
[ 2599.619563][   T44] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 2599.619592][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2599.619614][   T44] usb 7-1: Product: syz
[ 2599.619630][   T44] usb 7-1: Manufacturer: syz
[ 2599.619646][   T44] usb 7-1: SerialNumber: syz
[ 2599.914323][T30995] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7531'.
[ 2600.020902][   T44] ums-realtek 7-1:166.177: USB Mass Storage device detected
[ 2600.221570][   T44] ums-realtek 7-1:166.34: USB Mass Storage device detected
[ 2600.331162][T30990] pim6reg: entered allmulticast mode
[ 2600.331570][T30989] pim6reg: left allmulticast mode
[ 2600.461364][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2600.625092][   T44] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5
[ 2600.668090][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2600.685994][   T44] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 2600.686032][   T44] uvcvideo 7-1:166.34: No valid video chain found.
[ 2600.740303][   T44] usb 7-1: USB disconnect, device number 63
[ 2601.236453][T31012] netlink: 'syz.5.7536': attribute type 1 has an invalid length.
[ 2601.336805][T31012] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2602.565167][T30845] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 2602.724850][T30845] usb 6-1: device descriptor read/64, error -71
[ 2602.835362][T31039] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7545'.
[ 2602.984596][T30845] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 2603.115235][T30845] usb 6-1: device descriptor read/64, error -71
[ 2603.225630][T30845] usb usb6-port1: attempt power cycle
[ 2603.259168][T31045] netlink: 'syz.0.7548': attribute type 1 has an invalid length.
[ 2603.379182][T31045] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2603.585207][T30845] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 2603.620770][T30845] usb 6-1: device descriptor read/8, error -71
[ 2603.874704][T30845] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 2603.977292][T30845] usb 6-1: device descriptor read/8, error -71
[ 2604.086411][T30845] usb usb6-port1: unable to enumerate USB device
[ 2604.221973][T30845] IPVS: starting estimator thread 0...
[ 2604.305687][T31059] IPVS: using max 8 ests per chain, 19200 per kthread
[ 2605.544724][ T5901] usb 9-1: new high-speed USB device number 88 using dummy_hcd
[ 2605.675246][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7557'.
[ 2605.694728][ T5901] usb 9-1: Using ep0 maxpacket: 8
[ 2605.699416][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7557'.
[ 2605.704038][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2605.704075][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2605.704118][ T5901] usb 9-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2605.704142][ T5901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2605.723464][ T5901] usb 9-1: config 0 descriptor??
[ 2606.489306][ T5901] uclogic 0003:5543:0004.002B: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.8-1/input0
[ 2606.618214][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7558'.
[ 2606.664660][T30845] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 2606.707808][T27994] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2606.709266][T27994] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2606.709332][T27994] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2606.709371][T27994] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2606.709619][T31103] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7558'.
[ 2606.735353][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7558'.
[ 2606.736218][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7558'.
[ 2606.814979][T30845] usb 6-1: Using ep0 maxpacket: 8
[ 2606.817190][T30845] usb 6-1: config 0 has an invalid interface number: 111 but max is 0
[ 2606.817219][T30845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2606.817240][T30845] usb 6-1: config 0 has no interface number 0
[ 2606.817290][T30845] usb 6-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[ 2606.817337][T30845] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b
[ 2606.817363][T30845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2606.890223][T30845] usb 6-1: config 0 descriptor??
[ 2606.911822][T30845] qmi_wwan 6-1:0.111: bogus CDC Union: master=0, slave=0
[ 2606.912118][T30845] qmi_wwan 6-1:0.111: probe with driver qmi_wwan failed with error -22
[ 2607.117965][ T5901] usb 6-1: USB disconnect, device number 67
[ 2607.428274][ T5901] usb 9-1: USB disconnect, device number 88
[ 2608.604677][T13552] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 2608.694695][ T5901] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 2608.734677][T13552] usb 7-1: device descriptor read/64, error -71
[ 2608.734782][T23654] usb 9-1: new high-speed USB device number 89 using dummy_hcd
[ 2608.845420][ T5901] usb 6-1: Using ep0 maxpacket: 16
[ 2608.847033][ T5901] usb 6-1: config 166 has an invalid interface number: 177 but max is 1
[ 2608.847053][ T5901] usb 6-1: config 166 has an invalid interface number: 34 but max is 1
[ 2608.847069][ T5901] usb 6-1: config 166 has no interface number 0
[ 2608.847081][ T5901] usb 6-1: config 166 has no interface number 1
[ 2608.847126][ T5901] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2608.847142][ T5901] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2608.847172][ T5901] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 2608.847190][ T5901] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2608.847209][ T5901] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 2608.847228][ T5901] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 2608.847247][ T5901] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2608.847265][ T5901] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 2608.847282][ T5901] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 2608.847388][ T5901] usb 6-1: config 166 interface 177 has no altsetting 0
[ 2608.847405][ T5901] usb 6-1: config 166 interface 34 has no altsetting 0
[ 2608.853748][ T5901] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 2608.853770][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2608.853784][ T5901] usb 6-1: Product: syz
[ 2608.853795][ T5901] usb 6-1: Manufacturer: syz
[ 2608.853806][ T5901] usb 6-1: SerialNumber: syz
[ 2608.891457][T23654] usb 9-1: too many configurations: 17, using maximum allowed: 8
[ 2609.035651][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.055600][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.060967][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.089267][T13552] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 2609.161643][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.165585][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.167192][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.193503][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.205820][T23654] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2609.224984][T13552] usb 7-1: device descriptor read/64, error -71
[ 2609.242246][T23654] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2609.242340][T23654] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2609.242369][T23654] usb 9-1: Product: syz
[ 2609.242396][T23654] usb 9-1: Manufacturer: syz
[ 2609.242412][T23654] usb 9-1: SerialNumber: syz
[ 2609.353430][T13552] usb usb7-port1: attempt power cycle
[ 2609.401196][ T5901] ums-realtek 6-1:166.177: USB Mass Storage device detected
[ 2609.406312][T23654] usb 9-1: config 0 descriptor??
[ 2609.518207][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2609.662271][ T5901] ums-realtek 6-1:166.34: USB Mass Storage device detected
[ 2609.684983][   T44] usb 9-1: USB disconnect, device number 89
[ 2609.714645][T13552] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 2609.738189][T13552] usb 7-1: device descriptor read/8, error -71
[ 2609.824233][ T5901] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5
[ 2609.976932][T13552] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 2610.015703][T13552] usb 7-1: device descriptor read/8, error -71
[ 2610.048359][ T5901] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 2610.048396][ T5901] uvcvideo 6-1:166.34: No valid video chain found.
[ 2610.092491][ T5901] usb 6-1: USB disconnect, device number 68
[ 2610.132279][T13552] usb usb7-port1: unable to enumerate USB device
[ 2610.518939][T30845] IPVS: starting estimator thread 0...
[ 2610.614712][T31160] IPVS: using max 7 ests per chain, 16800 per kthread
[ 2610.875251][T30845] usb 9-1: new high-speed USB device number 90 using dummy_hcd
[ 2611.214765][T30845] usb 9-1: Using ep0 maxpacket: 32
[ 2611.217319][T30845] usb 9-1: config 0 has an invalid interface number: 129 but max is 0
[ 2611.217349][T30845] usb 9-1: config 0 has no interface number 0
[ 2611.221630][T30845] usb 9-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.0c
[ 2611.221661][T30845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2611.221684][T30845] usb 9-1: Product: syz
[ 2611.221701][T30845] usb 9-1: Manufacturer: syz
[ 2611.221717][T30845] usb 9-1: SerialNumber: syz
[ 2611.228028][T30845] usb 9-1: config 0 descriptor??
[ 2617.649419][T31220] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7598'.
[ 2617.709666][  T989] usb 9-1: USB disconnect, device number 90
[ 2618.214922][  T989] usb 9-1: new high-speed USB device number 91 using dummy_hcd
[ 2618.374698][  T989] usb 9-1: device descriptor read/64, error -71
[ 2618.624824][  T989] usb 9-1: new high-speed USB device number 92 using dummy_hcd
[ 2618.754615][  T989] usb 9-1: device descriptor read/64, error -71
[ 2618.871883][  T989] usb usb9-port1: attempt power cycle
[ 2619.064683][T30845] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 2619.215671][  T989] usb 9-1: new high-speed USB device number 93 using dummy_hcd
[ 2619.215890][T30845] usb 7-1: Using ep0 maxpacket: 32
[ 2619.236316][  T989] usb 9-1: device descriptor read/8, error -71
[ 2619.290038][T30845] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 2619.290060][T30845] usb 7-1: config 0 has no interface number 0
[ 2619.290085][T30845] usb 7-1: config 0 interface 184 has no altsetting 0
[ 2619.536862][T30845] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2619.536897][T30845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2619.536918][T30845] usb 7-1: Product: syz
[ 2619.536933][T30845] usb 7-1: Manufacturer: syz
[ 2619.536948][T30845] usb 7-1: SerialNumber: syz
[ 2619.543827][T30845] usb 7-1: config 0 descriptor??
[ 2619.554664][  T989] usb 9-1: new high-speed USB device number 94 using dummy_hcd
[ 2619.624914][  T989] usb 9-1: device descriptor read/8, error -71
[ 2619.794659][  T989] usb usb9-port1: unable to enumerate USB device
[ 2619.839120][T30845] smsc75xx v1.0.0
[ 2619.839136][T30845] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 2619.839330][T30845] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22
[ 2620.043700][T31242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2620.043733][T31242] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2620.104218][T31242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2620.109184][T31242] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2621.398851][T31274] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7617'.
[ 2622.114661][  T989] usb 9-1: new high-speed USB device number 95 using dummy_hcd
[ 2622.274622][  T989] usb 9-1: Using ep0 maxpacket: 16
[ 2622.277299][  T989] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2622.277324][  T989] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2622.277353][  T989] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2622.277370][  T989] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.282849][  T989] usb 9-1: config 0 descriptor??
[ 2622.702840][  T989] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0
[ 2622.702869][  T989] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0
[ 2622.702889][  T989] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0
[ 2622.702909][  T989] mcp2221 0003:04D8:00DD.002C: unknown main item tag 0x0
[ 2622.703643][  T989] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[ 2622.885272][T30845] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 2622.984694][T30875] usb 9-1: USB disconnect, device number 95
[ 2623.056484][T30845] usb 6-1: config 0 has no interfaces?
[ 2623.058694][T30845] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2623.058716][T30845] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2623.058731][T30845] usb 6-1: Product: syz
[ 2623.058742][T30845] usb 6-1: Manufacturer: syz
[ 2623.058752][T30845] usb 6-1: SerialNumber: syz
[ 2623.063319][T30845] usb 6-1: config 0 descriptor??
[ 2623.164657][T13552] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 2623.313448][T30845] usb 7-1: USB disconnect, device number 68
[ 2623.316818][T13552] usb 10-1: Using ep0 maxpacket: 8
[ 2623.319914][T13552] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 2623.319958][T13552] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 2623.319988][T13552] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2623.320018][T13552] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2623.320070][T13552] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2623.320098][T13552] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2623.473907][ T5901] usb 6-1: USB disconnect, device number 69
[ 2623.721051][T13552] usb 10-1: GET_CAPABILITIES returned 0
[ 2623.721096][T13552] usbtmc 10-1:16.0: can't read capabilities
[ 2624.380016][  T989] usb 10-1: USB disconnect, device number 49
[ 2624.891006][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c0e1c00: rx timeout, send abort
[ 2624.891265][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880311db800: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 2625.391107][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c0e1c00: abort rx timeout. Force session deactivation
[ 2626.170608][T31334] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7635'.
[ 2627.754643][T13552] usb 9-1: new high-speed USB device number 96 using dummy_hcd
[ 2627.924725][T13552] usb 9-1: Using ep0 maxpacket: 16
[ 2627.927802][T13552] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2627.930853][T13552] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2627.930876][T13552] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2627.930891][T13552] usb 9-1: Product: syz
[ 2627.930902][T13552] usb 9-1: Manufacturer: syz
[ 2627.930913][T13552] usb 9-1: SerialNumber: syz
[ 2627.983519][T13552] usb 9-1: config 0 descriptor??
[ 2627.994005][T13552] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2627.994032][T13552] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 2628.152244][T31351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2628.163814][T31351] syzkaller0: entered promiscuous mode
[ 2628.163931][T31351] syzkaller0: entered allmulticast mode
[ 2628.340088][T31351] tipc: Resetting bearer <eth:syzkaller0>
[ 2628.384910][T31350] tipc: Resetting bearer <eth:syzkaller0>
[ 2628.605925][T31350] tipc: Disabling bearer <eth:syzkaller0>
[ 2628.611154][T13552] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2629.043521][T13552] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2629.043553][T13552] em28xx 9-1:0.0: board has no eeprom
[ 2629.204665][T13552] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2629.204695][T13552] em28xx 9-1:0.0: dvb set to bulk mode.
[ 2629.206869][T30875] em28xx 9-1:0.0: Binding DVB extension
[ 2629.285614][T31363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7642'.
[ 2629.292778][T13552] usb 9-1: USB disconnect, device number 96
[ 2629.294367][T13552] em28xx 9-1:0.0: Disconnecting em28xx
[ 2629.367887][T30875] em28xx 9-1:0.0: Registering input extension
[ 2629.368143][T13552] em28xx 9-1:0.0: Closing input extension
[ 2629.396830][T13552] em28xx 9-1:0.0: Freeing device
[ 2629.447671][T31358] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2629.799908][T31360] bond6: (slave veth15): Enslaving as an active interface with an up link
[ 2629.803931][T31361] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 2629.865220][T31370] syzkaller0: entered promiscuous mode
[ 2629.865240][T31370] syzkaller0: entered allmulticast mode
[ 2630.084723][  T989] usb 9-1: new high-speed USB device number 97 using dummy_hcd
[ 2630.266024][  T989] usb 9-1: config 0 has no interfaces?
[ 2630.281570][  T989] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2630.281602][  T989] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2630.281625][  T989] usb 9-1: Product: syz
[ 2630.281637][  T989] usb 9-1: Manufacturer: syz
[ 2630.281648][  T989] usb 9-1: SerialNumber: syz
[ 2630.285864][  T989] usb 9-1: config 0 descriptor??
[ 2630.578768][  T989] usb 9-1: USB disconnect, device number 97
[ 2631.022958][T13552] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 2631.204963][T13552] usb 6-1: Using ep0 maxpacket: 16
[ 2631.224959][T13552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2631.224996][T13552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2631.225041][T13552] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2631.225075][T13552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2631.229339][T13552] usb 6-1: config 0 descriptor??
[ 2631.676758][T13552] usbhid 6-1:0.0: can't add hid device: -71
[ 2631.676898][T13552] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2631.680057][T13552] usb 6-1: USB disconnect, device number 70
[ 2633.685602][T31400] geneve2: entered promiscuous mode
[ 2633.685635][T31400] geneve2: entered allmulticast mode
[ 2633.821857][T31403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7653'.
[ 2634.524690][   T44] usb 9-1: new high-speed USB device number 98 using dummy_hcd
[ 2634.694648][   T44] usb 9-1: Using ep0 maxpacket: 16
[ 2634.702010][   T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2634.743565][   T44] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2634.743590][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2634.743605][   T44] usb 9-1: Product: syz
[ 2634.743616][   T44] usb 9-1: Manufacturer: syz
[ 2634.743627][   T44] usb 9-1: SerialNumber: syz
[ 2634.752054][   T44] usb 9-1: config 0 descriptor??
[ 2634.768218][   T44] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2634.768256][   T44] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 2635.001800][T31412] syzkaller0: entered promiscuous mode
[ 2635.001821][T31412] syzkaller0: entered allmulticast mode
[ 2635.398222][   T44] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 2635.808364][   T44] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2635.808398][   T44] em28xx 9-1:0.0: board has no eeprom
[ 2635.844651][T23664] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 2635.894919][   T44] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2635.894942][   T44] em28xx 9-1:0.0: dvb set to bulk mode.
[ 2635.895200][  T989] em28xx 9-1:0.0: Binding DVB extension
[ 2635.949703][   T44] usb 9-1: USB disconnect, device number 98
[ 2635.955240][   T44] em28xx 9-1:0.0: Disconnecting em28xx
[ 2636.005575][T23664] usb 7-1: Using ep0 maxpacket: 16
[ 2636.022649][  T989] em28xx 9-1:0.0: Registering input extension
[ 2636.023328][   T44] em28xx 9-1:0.0: Closing input extension
[ 2636.040886][T23664] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2636.040922][T23664] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2636.040962][T23664] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 2636.040987][T23664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2636.266585][T23664] usb 7-1: config 0 descriptor??
[ 2636.461277][   T44] em28xx 9-1:0.0: Freeing device
[ 2636.675489][T23664] usbhid 7-1:0.0: can't add hid device: -71
[ 2636.675623][T23664] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2636.678781][T23664] usb 7-1: USB disconnect, device number 69
[ 2636.955659][ T1440] kworker/u8:10 (1440) used greatest stack depth: 12120 bytes left
[ 2638.331912][T31440] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7666'.
[ 2638.744613][T23664] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 2638.907180][T23664] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2638.907202][T23664] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2638.908327][T23664] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2638.908348][T23664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2638.908363][T23664] usb 10-1: SerialNumber: syz
[ 2639.122507][T23664] usb 10-1: 0:2 : does not exist
[ 2639.122586][T23664] usb 10-1: unit 5 not found!
[ 2639.160434][T23664] usb 10-1: USB disconnect, device number 50
[ 2639.415625][T31449] syzkaller0: entered promiscuous mode
[ 2639.415653][T31449] syzkaller0: entered allmulticast mode
[ 2639.664682][   T44] usb 9-1: new high-speed USB device number 99 using dummy_hcd
[ 2639.814591][   T44] usb 9-1: Using ep0 maxpacket: 8
[ 2639.816869][   T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2639.816910][   T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2639.816950][   T44] usb 9-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2639.816967][   T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2639.892239][   T44] usb 9-1: config 0 descriptor??
[ 2640.034613][T23664] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 2640.207515][T23664] usb 10-1: Using ep0 maxpacket: 8
[ 2640.209925][T23664] usb 10-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config
[ 2640.209956][T23664] usb 10-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[ 2640.209997][T23664] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2640.210022][T23664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2640.395368][   T44] uclogic 0003:5543:0004.002D: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.8-1/input0
[ 2640.419476][T23664] usb 10-1: USB disconnect, device number 51
[ 2640.562936][T31469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7671'.
[ 2640.563810][T31469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7671'.
[ 2641.462555][T23664] usb 9-1: USB disconnect, device number 99
[ 2642.170594][T31482] lo speed is unknown, defaulting to 1000
[ 2642.468348][T31490] syzkaller0: entered promiscuous mode
[ 2642.468376][T31490] syzkaller0: entered allmulticast mode
[ 2642.874670][   T44] usb 9-1: new high-speed USB device number 100 using dummy_hcd
[ 2643.035409][   T44] usb 9-1: too many configurations: 17, using maximum allowed: 8
[ 2643.056485][   T44] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2643.056511][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2643.056526][   T44] usb 9-1: Product: syz
[ 2643.056537][   T44] usb 9-1: Manufacturer: syz
[ 2643.056551][   T44] usb 9-1: SerialNumber: syz
[ 2643.061110][   T44] usb 9-1: config 0 descriptor??
[ 2643.066158][   T44] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 2643.079707][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2643.080773][   T44] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 2643.080850][   T44] usb 9-1: media controller created
[ 2643.110428][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2643.176911][   T44] DVB: Unable to find symbol mt352_attach()
[ 2643.225008][   T44] DVB: Unable to find symbol nxt6000_attach()
[ 2643.225029][   T44] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 2643.229251][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input45
[ 2643.240719][   T44] dvb-usb: schedule remote query interval to 1000 msecs.
[ 2643.240749][   T44] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 2643.240770][   T44] dvb-usb: bulk message failed: -22 (7/0)
[ 2643.240790][   T44] dvb-usb: bulk message failed: -22 (7/0)
[ 2643.278511][   T44] usb 9-1: USB disconnect, device number 100
[ 2643.476087][   T44] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 2643.973353][ T8887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2644.009086][ T8887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2644.035975][ T8887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2644.038292][ T8887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2644.039980][ T8887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2644.321796][  T145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2644.321844][  T145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.480538][T31511] lo speed is unknown, defaulting to 1000
[ 2645.263339][  T145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2645.263378][  T145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2645.717792][  T145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2645.717832][  T145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2646.065025][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7697'.
[ 2646.156637][ T8887] Bluetooth: hci2: command tx timeout
[ 2646.398261][   T44] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 2646.584781][   T44] usb 10-1: Using ep0 maxpacket: 8
[ 2646.587139][   T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2646.587180][   T44] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 2646.587239][   T44] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2646.587285][   T44] usb 10-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 2646.587310][   T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2646.592628][   T44] usb 10-1: config 0 descriptor??
[ 2646.659390][   T44] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 2646.694983][  T145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2646.695023][  T145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2646.990438][T31545] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7700'.
[ 2647.882948][T31511] chnl_net:caif_netlink_parms(): no params data found
[ 2647.978478][  T145] bridge_slave_1: left allmulticast mode
[ 2647.978520][  T145] bridge_slave_1: left promiscuous mode
[ 2647.978975][  T145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2648.071218][  T145] bridge_slave_0: left allmulticast mode
[ 2648.071244][  T145] bridge_slave_0: left promiscuous mode
[ 2648.071481][  T145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2648.224698][ T8887] Bluetooth: hci2: command tx timeout
[ 2649.097859][T30875] usb 10-1: USB disconnect, device number 52
[ 2649.827893][T30845] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 2650.004560][T30845] usb 6-1: Using ep0 maxpacket: 8
[ 2650.007140][T30845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2650.007176][T30845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2650.007219][T30845] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 2650.007245][T30845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2650.061041][T30845] usb 6-1: config 0 descriptor??
[ 2650.308764][ T8887] Bluetooth: hci2: command tx timeout
[ 2650.530824][T30845] uclogic 0003:5543:0004.002E: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.5-1/input0
[ 2650.941541][T31591] netlink: 'syz.9.7713': attribute type 1 has an invalid length.
[ 2652.384595][ T8887] Bluetooth: hci2: command tx timeout
[ 2652.415239][  T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2652.496952][  T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2652.555445][  T145] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 2652.670698][  T145] bond0 (unregistering): Released all slaves
[ 2653.856793][  T145] bond1 (unregistering): (slave veth3): Releasing active interface
[ 2653.921016][  T145] bond1 (unregistering): Released all slaves
[ 2655.085496][  T145] bond2 (unregistering): (slave veth5): Releasing active interface
[ 2655.151386][  T145] bond2 (unregistering): Released all slaves
[ 2655.205442][  T145] bond3 (unregistering): (slave veth7): Releasing backup interface
[ 2655.285465][  T145] bond3 (unregistering): (slave veth9): Releasing backup interface
[ 2655.347568][  T145] bond3 (unregistering): Released all slaves
[ 2655.397065][  T145] bond4 (unregistering): (slave veth11): Releasing active interface
[ 2655.467359][  T145] bond4 (unregistering): Released all slaves
[ 2656.593867][  T145] bond5 (unregistering): Released all slaves
[ 2657.432010][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 2657.796922][  T145] bond6 (unregistering): (slave veth15): Releasing backup interface
[ 2657.875352][  T145] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 2657.918327][  T145] bond6 (unregistering): Released all slaves
[ 2657.967581][T31593] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[ 2657.992250][T31594] ip6erspan0: entered promiscuous mode
[ 2658.218240][T23664] usb 6-1: USB disconnect, device number 71
[ 2658.460522][T31596] bond3: (slave veth0_to_bond): Releasing active interface
[ 2658.908159][  T145] tipc: Left network mode
[ 2659.044985][T23664] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 2659.230928][T23664] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2659.230957][T23664] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2659.230975][T23664] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 2659.231009][T23664] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2659.231026][T23664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.290984][T23664] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2659.587471][T23664] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12
[ 2660.434656][T23664] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 2660.619540][T23664] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2660.619615][T23664] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2660.619646][T23664] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2660.619691][T23664] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2660.619715][T23664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2660.735061][T31634] netlink: 'syz.0.7725': attribute type 1 has an invalid length.
[ 2660.787109][T23664] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 2660.788185][T23664] usb 10-1: invalid MIDI out EP 0
[ 2660.980987][T31629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2660.998415][T31629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2661.413966][T23664] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2661.722098][T31511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2661.722256][T31511] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2661.722560][T31511] bridge_slave_0: entered allmulticast mode
[ 2661.789349][T31511] bridge_slave_0: entered promiscuous mode
[ 2661.964238][T31511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2661.964333][T31511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2661.965427][T31511] bridge_slave_1: entered allmulticast mode
[ 2662.035015][T31511] bridge_slave_1: entered promiscuous mode
[ 2662.249492][T23664] usb 6-1: USB disconnect, device number 72
[ 2663.636119][T31511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2663.791561][T31511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2663.894004][T30875] =========[ 2663.894004][T30875] ==================================================================
[ 2663.894024][T30875] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.894061][T30875] Read of size 8 at addr ffffc90016520008 by task kworker/0:2/30875
[ 2663.894081][T30875] 
[ 2663.894095][T30875] CPU: 0 UID: 0 PID: 30875 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2663.894121][T30875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2663.894147][T30875] Workqueue: usb_hub_wq hub_event
[ 2663.894177][T30875] Call Trace:
[ 2663.894187][T30875]  <TASK>
[ 2663.894198][T30875]  dump_stack_lvl+0x189/0x250
[ 2663.894236][T30875]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2663.894269][T30875]  ? __pfx__printk+0x10/0x10
[ 2663.894295][T30875]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 2663.894325][T30875]  ? __virt_addr_valid+0xdc/0x5c0
[ 2663.894346][T30875]  ? __virt_addr_valid+0xdc/0x5c0
[ 2663.894368][T30875]  print_report+0xca/0x240
[ 2663.894395][T30875]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.894421][T30875]  kasan_report+0x118/0x150
[ 2663.894453][T30875]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.894481][T30875]  __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.894505][T30875]  kcov_remote_start+0x2b0/0x6f0
[ 2663.894539][T30875]  hub_event+0x158/0x4a20
[ 2663.894563][T30875]  ? cpuacct_charge+0x117/0x320
[ 2663.894590][T30875]  ? sched_clock+0x3f/0x60
[ 2663.894620][T30875]  ? do_raw_spin_lock+0x121/0x290
[ 2663.894655][T30875]  ? look_up_lock_class+0x74/0x170
[ 2663.894682][T30875]  ? register_lock_class+0x51/0x320
[ 2663.894719][T30875]  ? __lock_acquire+0xab9/0xd20
[ 2663.894755][T30875]  ? __pfx_hub_event+0x10/0x10
[ 2663.894781][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.894815][T30875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2663.894841][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.894870][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.894902][T30875]  process_scheduled_works+0xae1/0x17b0
[ 2663.894948][T30875]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2663.894988][T30875]  worker_thread+0x8a0/0xda0
[ 2663.895020][T30875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2663.895052][T30875]  ? __kthread_parkme+0x7b/0x200
[ 2663.895090][T30875]  kthread+0x711/0x8a0
[ 2663.895114][T30875]  ? __pfx_worker_thread+0x10/0x10
[ 2663.895144][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.895164][T30875]  ? rt_spin_unlock+0x150/0x200
[ 2663.895186][T30875]  ? rt_spin_unlock+0x161/0x200
[ 2663.895205][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.895227][T30875]  ret_from_fork+0x436/0x7d0
[ 2663.895257][T30875]  ? __pfx_ret_from_fork+0x10/0x10
[ 2663.895290][T30875]  ? __switch_to_asm+0x39/0x70
[ 2663.895311][T30875]  ? __switch_to_asm+0x33/0x70
[ 2663.895332][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.895354][T30875]  ret_from_fork_asm+0x1a/0x30
[ 2663.895385][T30875]  </TASK>
[ 2663.895394][T30875] 
[ 2663.895401][T30875] The buggy address belongs to a vmalloc virtual mapping
[ 2663.895421][T30875] Memory state around the buggy address:
[ 2663.895434][T30875]  ffffc9001651ff00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2663.895450][T30875]  ffffc9001651ff80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2663.895467][T30875] >ffffc90016520000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2663.895479][T30875]                       ^
[ 2663.895491][T30875]  ffffc90016520080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2663.895507][T30875]  ffffc90016520100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2663.895519][T30875] ==================================================================
[ 2663.895998][T30875] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2663.896020][T30875] CPU: 0 UID: 0 PID: 30875 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2663.896051][T30875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2663.896069][T30875] Workqueue: usb_hub_wq hub_event
[ 2663.896099][T30875] Call Trace:
[ 2663.896109][T30875]  <TASK>
[ 2663.896120][T30875]  dump_stack_lvl+0x99/0x250
[ 2663.896157][T30875]  ? __asan_memcpy+0x40/0x70
[ 2663.896187][T30875]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2663.896223][T30875]  ? __pfx__printk+0x10/0x10
[ 2663.896259][T30875]  vpanic+0x237/0x6d0
[ 2663.896280][T30875]  ? __pfx_vpanic+0x10/0x10
[ 2663.896300][T30875]  ? preempt_schedule+0xae/0xc0
[ 2663.896327][T30875]  ? __pfx_preempt_schedule+0x10/0x10
[ 2663.896358][T30875]  panic+0xb9/0xc0
[ 2663.896378][T30875]  ? __pfx_panic+0x10/0x10
[ 2663.896402][T30875]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 2663.896436][T30875]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.896466][T30875]  check_panic_on_warn+0x89/0xb0
[ 2663.896493][T30875]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.896520][T30875]  end_report+0x78/0x160
[ 2663.896555][T30875]  kasan_report+0x129/0x150
[ 2663.896591][T30875]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.896623][T30875]  __list_del_entry_valid_or_report+0xb5/0x190
[ 2663.896661][T30875]  kcov_remote_start+0x2b0/0x6f0
[ 2663.896700][T30875]  hub_event+0x158/0x4a20
[ 2663.896727][T30875]  ? cpuacct_charge+0x117/0x320
[ 2663.896758][T30875]  ? sched_clock+0x3f/0x60
[ 2663.896793][T30875]  ? do_raw_spin_lock+0x121/0x290
[ 2663.896823][T30875]  ? look_up_lock_class+0x74/0x170
[ 2663.896854][T30875]  ? register_lock_class+0x51/0x320
[ 2663.896893][T30875]  ? __lock_acquire+0xab9/0xd20
[ 2663.896932][T30875]  ? __pfx_hub_event+0x10/0x10
[ 2663.896960][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.896998][T30875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2663.897026][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.897057][T30875]  ? process_scheduled_works+0x9ef/0x17b0
[ 2663.897097][T30875]  process_scheduled_works+0xae1/0x17b0
[ 2663.897148][T30875]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2663.897191][T30875]  worker_thread+0x8a0/0xda0
[ 2663.897228][T30875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2663.897263][T30875]  ? __kthread_parkme+0x7b/0x200
[ 2663.897303][T30875]  kthread+0x711/0x8a0
[ 2663.897329][T30875]  ? __pfx_worker_thread+0x10/0x10
[ 2663.897363][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.897384][T30875]  ? rt_spin_unlock+0x150/0x200
[ 2663.897407][T30875]  ? rt_spin_unlock+0x161/0x200
[ 2663.897428][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.897453][T30875]  ret_from_fork+0x436/0x7d0
[ 2663.897486][T30875]  ? __pfx_ret_from_fork+0x10/0x10
[ 2663.897520][T30875]  ? __switch_to_asm+0x39/0x70
[ 2663.897544][T30875]  ? __switch_to_asm+0x33/0x70
[ 2663.897566][T30875]  ? __pfx_kthread+0x10/0x10
[ 2663.897590][T30875]  ret_from_fork_asm+0x1a/0x30
[ 2663.897624][T30875]  </TASK>
[ 2663.897981][T30875] Kernel Offset: disabled