last executing test programs:

42.269663869s ago: executing program 1 (id=2545):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x0, 0x1)
read$eventfd(r1, &(0x7f0000000200), 0x8)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=neve2,\x00'])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000090a01040000000000000000010000040900020073797a3100000000090001"], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000240)={0x40000019})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004", @ANYRESHEX=r8, @ANYRES64=r7, @ANYRES32=r3], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001)
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x20, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6)
close_range(r4, r5, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="ad43f8eefffffbdbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00000000000000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a30000000000500010006000000050005000a0000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)

41.97901862s ago: executing program 1 (id=2547):
r0 = syz_usbip_server_init(0x1)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))
r1 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
unshare(0x28000600)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6}, 0x8)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x6101, 0x4)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000000)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
sendmmsg(r1, 0x0, 0x0, 0xffe0)

40.521838624s ago: executing program 1 (id=2549):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket$l2tp(0x2, 0x2, 0x73)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x1, 0x0, 0x7fff}, 0x4c)
setpriority(0x1, 0x0, 0x80000000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r5 = socket$inet(0x2, 0x2, 0x0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000b59a86cdd4078f734800", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000050002000a000000060001004e220000"], 0x24}}, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

39.175644387s ago: executing program 1 (id=2553):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r1, 0x408, 0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = timerfd_create(0x0, 0x80000)
unshare(0x24020400)
setns(0xc9, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffd, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
socketpair(0x1e, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xc}, {0x0, 0x10}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24045091}, 0x40)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2c}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x24, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x40}, 0x28)
timerfd_gettime(r2, 0x0)

38.233826502s ago: executing program 1 (id=2555):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400001, 0x100)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000)
io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0)

37.427421319s ago: executing program 1 (id=2559):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
clock_gettime(0x1, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRESHEX=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0xfffffffc, 0xd}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0x59, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x4c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x159602, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xb]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000914040029bd7000ffd9df2508000100000000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c29ce1f", @ANYRES16=r3, @ANYBLOB="00032bbd7000fcdbdf251b0000000400cc00080001001a0000000400cc000500920000000000080001003a00000008009a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40410}, 0x4000000)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

37.152766102s ago: executing program 32 (id=2559):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
clock_gettime(0x1, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES32=r4, @ANYRESHEX=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0xfffffffc, 0xd}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0x59, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x4c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x159602, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xb]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000914040029bd7000ffd9df2508000100000000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c29ce1f", @ANYRES16=r3, @ANYBLOB="00032bbd7000fcdbdf251b0000000400cc00080001001a0000000400cc000500920000000000080001003a00000008009a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40410}, 0x4000000)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

9.662449775s ago: executing program 4 (id=2632):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400001, 0x100)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0)

8.290570793s ago: executing program 4 (id=2636):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r8=>0x0)
write$FUSE_STATFS(r7, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, r6, {{0xffffffffffffff6a, 0xb4e1, 0x6, 0x3, 0xb, 0x5, 0x400, 0x8000}}}, 0x60)
io_submit(r8, 0x3, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r7, &(0x7f00000000c0)='!', 0x1, 0x407f0b00}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000340)="8661945a7ab4d8adcb49754bbb608a644c9ef6e0054b9eba0013c4a35f5f0ab7c3dbe8fb7f4db98efaabd2862d5350617567821126efa2c9d15501016eaf", 0x3e, 0x8000000000000001, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xf, r4, &(0x7f00000008c0)="a402ab125457ce7b98e551081f13aa9e665d39351949b9d37aaf344bae02a96fcee9c4ce48e894309133fd3f5d2ac847f19baa3d96fbab5521446ffc6e24efd809", 0x41, 0x80000000, 0x0, 0x1}])
dup3(r7, r5, 0x0)
r9 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000003, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)

8.152754525s ago: executing program 3 (id=2637):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400001, 0x100)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000)
io_uring_enter(0xffffffffffffffff, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)

7.184121062s ago: executing program 3 (id=2638):
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', <r1=>0x0, 0x1, 0x40, 0xff, 0xff, {{0x19, 0x4, 0x1, 0x9, 0x64, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @timestamp={0x44, 0x14, 0xde, 0x0, 0x3, [0x3, 0x8, 0xfffffffa, 0x1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @cipso={0x86, 0x23, 0x1, [{0x0, 0xc, "1ea330e8a6f1ea209352"}, {0x6, 0x6, "195fb2c4"}, {0x6, 0xb, "63d41e116550e67ee4"}]}, @noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x26, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x10, 0xffffffffffffffff, 0xb2993000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804008000000850000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80000)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000))
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

6.902958639s ago: executing program 4 (id=2639):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6c, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x3000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x6, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x11)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
socket$inet(0x2, 0x80000, 0x9cf)
syz_open_dev$MSR(0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5)
readv(r4, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x918)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6.7900144s ago: executing program 0 (id=2640):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x810, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bcbd00678008004d8004009f800c007f006367726f757032000800220009000000851da96bc597653c7a529e7e994117692ce77fe924322d56f0847b48758a0d4c0ee95bf59a381ea09d8b584e91c695c839d39a72d46385bd8b9086793edcab2ce8b908539aeb9bd5a1604c682ef8e81832d16259d9908d3016f47a1cbd8e309dbb88efccaeb613890e3aba42621df265301dce5fafaa7abca01e660a5905c5e664db7deea920594588f149367614e915ad1236351c39d1fe252079120a00000000000094726b46ff04f7b3d2a53c9278b9909fab22d67d70cabd4c9ad2b3224dccf94fd940af385ef2c97212da13c019188ac28e3c365724610c6b76b2f4965abbad4e8271e7", @ANYRES16=r2], 0xe0}], 0x1}, 0x40040)
r3 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="09d32630bfadc06e66202020313237302e302e312005303030303030303030206c5c63616c73740a0000", 0x2a)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="5472d17b6ba035bc823c264b2024ea740ea67a688a9b11cbc8778be931520592eed2293e80b27dd16be90e70169c0e3b6c83fadccc4b05d3ebfe304476c6187c", &(0x7f0000000180)=""/164}, 0x1c)
r4 = syz_io_uring_setup(0x2f90, &(0x7f0000000440)={0x0, 0x91d9, 0x8000, 0x2, 0x292, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000))
epoll_create(0xaf2)
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0xe000200f})
r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x78)
fchdir(r7)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r8, &(0x7f00000000c0)=""/55, 0x37)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0}, 'auth.unix.ip/channel\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000280)={0x0, 0xffffff83, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x10}, 0x1)
ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0)
fsmount(r9, 0x1, 0x0)

6.698158069s ago: executing program 0 (id=2641):
r0 = syz_usbip_server_init(0x1)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000))
r1 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
unshare(0x28000600)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x6101, 0x4)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000000)

6.227720116s ago: executing program 3 (id=2643):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[])
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2f4, r6, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x1d8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x110, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xde, 0x2, '400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^{.!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40}, 0x4048086)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_connect$midi(0x3, 0x51, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x8, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x8}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x1, 0x6, [{0x0, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x9, 0x6}], 0xfc}, @ms_header={0x7, 0x24, 0x1, 0xbb27, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}]}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201, 0x5, 0x5, 0x40, 0x10, 0xb}, 0xf8, &(0x7f00000007c0)={0x5, 0xf, 0xf8, 0x3, [@generic={0xd8, 0x10, 0x3, "f8cf0bd212e90fc9d5b5d47260adb7abb3da310141f926e1e5c369bb37359d3cc3e0899b282fcdf187e711c34c6ccb3ce2d05a64bfeb7419b7976ef516e3ee35460a3f0f54ffaba995e69560fdd5a9013578cd9236ea63a01100d76a5719a419977784f0f5fe52c9bf9d442d299c7d49b3c369bfc42dddf4e72f2be027e5fcd40660db192a906f813d449acabcdf88211565bfa7f0c6daed9d5b542c4a96d9faa2e91e1a84c45b80aecb221ec8080e605bd582fd8e3ba39e3900e914a85b02d059db9b87d79b62e1a2a54c93d6a1eadb9682f398ff"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d7a0bc208b285120fdee5fc50a357d1c"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x0, 0x2}]}, 0x6, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x459}}, {0x5e, &(0x7f0000000940)=@string={0x5e, 0x3, "dc179b1dab566ab3d6bc77a97e1c387ead885374b633217512273db5621499a041329057aeb71830e92ac751ad12a5a0a40adffef3969fc0ce1117c181caaaaa76e291eb2374e4a6ed92a6ccbdb1b981c60df95dd9a2d9670c0c5c81"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x99, &(0x7f0000000a40)=@string={0x99, 0x3, "9d3c2e93770423b4f2a45a34550ddac115c44ea85554e9e661f96bde48840cdbe144d9c524ceb5e3795d4a0fbb3b401eaa3259adb3b9921f45c322d56035412b29ca75963fb8c31f00156efc8128ea661806092b5247b14f75abaf7a536f28d417c9d3485fa94125e3f9c255bb80728b1f062c6e1a113a88e4f42b02990eb1aa15f35b4dc93d917c7639c9edbe2786eb457d69a6756c52"}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2317a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.801180095s ago: executing program 0 (id=2644):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @broadcast, @private}, &(0x7f00000001c0)=0xc)
r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000)
bind$phonet(r3, &(0x7f0000000200)={0x23, 0x5, 0x7, 0xf}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x498, 0x2c, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {0xfff3, 0x8}, {0xffff, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x414, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x36}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xffff, 0x5, 0x3, 0x0, 0x40, 0x4, 0x8, 0x3, 0x401, 0x8, 0x5, 0x5, 0xe0, 0x60000000, 0x36b, 0x7, 0x1ff, 0x6, 0xff, 0x1, 0x8, 0xe, 0x8, 0x1, 0x7ff, 0x9, 0x3, 0xd, 0x9, 0x7, 0x2800, 0x3ff, 0x7fff, 0x9, 0x3ff, 0x7, 0xc, 0x2, 0x7fff, 0x6, 0x8001, 0x1, 0x8f6, 0x3ff, 0x200, 0x10000, 0x2, 0x5, 0xff, 0x6, 0x5, 0x8, 0x8da6, 0x0, 0x1, 0xfffffffd, 0x3, 0xa0, 0x9, 0x100, 0x200, 0x2, 0x101, 0xd10d, 0x9, 0xc1, 0x5f, 0x4, 0x10001, 0x200, 0x105, 0x5, 0x7, 0x3, 0x396, 0xc5b7, 0xf, 0x1, 0x8001, 0x9, 0x5, 0x3, 0x4, 0x6, 0x9, 0x6, 0x6, 0x0, 0x901, 0x102, 0x7ff, 0x9, 0x0, 0x13f2fa0, 0x7, 0x7, 0x80000000, 0x400, 0x7, 0x1000, 0x6f2a, 0x10000, 0x8, 0xfffffffb, 0x6, 0x7, 0x75, 0xfffffffb, 0x1, 0x7, 0x7, 0x4, 0x800, 0x81, 0x2, 0x3, 0x6, 0x6, 0x4, 0xfffffffa, 0xffffffff, 0xaf, 0x0, 0x44, 0x7ff, 0x7fff, 0x5, 0xffff, 0x1, 0x2, 0x1, 0x7, 0x9, 0x5, 0x2, 0x942, 0xffffffff, 0x3, 0x8, 0x6, 0x7, 0x80000000, 0x3ff, 0x1, 0xfffff5e3, 0x6, 0x5, 0x3ff, 0x2a8, 0xe63a, 0x9, 0x7, 0x4, 0x1e8, 0x5, 0x9, 0x101, 0x7f, 0x8001, 0x100, 0x802, 0x2, 0x0, 0x3, 0x8, 0x10ce, 0x3, 0xffffffff, 0xaa44, 0x0, 0x6, 0x2, 0x8, 0x3, 0x46, 0xffff3324, 0x2, 0xf8, 0x6, 0xe, 0x291b, 0xa, 0x80000001, 0x6ef, 0x7, 0xfff, 0x4cc, 0x6, 0x0, 0x3, 0x101, 0xfffffff9, 0xaa0b, 0x1, 0x7ff, 0x25, 0x99, 0xfffffffa, 0x4, 0x3, 0x0, 0x7, 0x3, 0x4, 0x3a, 0x9c, 0xfffffffa, 0x8, 0xe1, 0x3, 0x4, 0xf1a, 0x4f, 0x6, 0xca5, 0x6, 0x0, 0x5, 0x0, 0x6, 0x1, 0x5, 0x6, 0x9cc6, 0x461e, 0x9, 0x8, 0x3, 0x5065, 0x4, 0x3, 0x1, 0x4, 0x6, 0x3, 0x5, 0x0, 0x24a, 0x0, 0x76d6, 0x9, 0x3, 0x8, 0x3ff, 0x6, 0x3, 0x8, 0x80, 0x0, 0x4, 0x81, 0x4, 0x1, 0x81, 0x55ef]}]}]}}, @TCA_RATE={0x6, 0x5, {0x68, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xcc6}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x13d0, 0x66}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9a}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x839d5fae}]}, 0x498}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @none}, 0x8)
write$char_usb(r6, &(0x7f0000000880)="5d2c3da04c02e07e3ba80d7270523225b432cbb7ddc013f6230003752e25d54248be1c3b36ba7d7d0dceb173fa57542f6418794f52b9a539465a15855cb7e7c1ea1fc72984435512d21ed80781ab984e56a9c80bf024123182e4b1408e08df9c17af7fc9a3311ac3aa3b5852b8a1b3cd64a5a4b02f0adb17104a5ec2655932b20448d1d498eccf", 0x87)
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x1, 0x8000000, r1, 0x0)
landlock_restrict_self(r0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)

3.669208781s ago: executing program 2 (id=2647):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400001, 0x100)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000)
io_uring_enter(0xffffffffffffffff, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04)

3.007486736s ago: executing program 0 (id=2648):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2380}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2380}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r0 = socket(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0)
r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x5, &(0x7f0000000100)={0x1e, "3ac04df5bcccd0d684737d88bb3f001100"}})
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555", 0x62}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555", 0x62}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000200000000000000000000004061190400000000009500000000000000586eb6c6bc043619570e396fbdaa5bf0154a4c471c03fa8bca47d7077b9d8af3838060a1f627704e6d77b06d2329194c5aa569b3af9a4ee23811f0e7c0d27eab27c81fc411e5b26043d12237fead81ee0a88061a6da51b557cbb7a1130"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0xf}, 0x2d)
openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x472700, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x472700, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x2, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%pS    \x00'}, 0x1c)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000002580)="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", 0x1000) (async)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000002580)="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", 0x1000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000440)='%-5lx  \x00'}, 0x8)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'})
write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f080003002b0000002700000001abd40fed427488f820d492a00e5fc64a436d0de9d39cadcb125ccbed837e1eb2c812640b16a766ce2d759004d74da9260f4766627b7f4578b24412338599ca4a47baf77801a29c48935c09880788b923a44e13bf6e62cd191508bbbe8d422c25f14258d5d21efd20497f5ce601a777db967d8eac2360c71eea2da539cfb51eea157d906a8c68a0ac1fc20ec6d9aef88d4738275603cec7715127ffb383ca3cb1001de26dbee2945b92b877f0b1d88e82547311efa0e47a8aeec0aa6890ef"], 0xd6) (async)
write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f080003002b0000002700000001abd40fed427488f820d492a00e5fc64a436d0de9d39cadcb125ccbed837e1eb2c812640b16a766ce2d759004d74da9260f4766627b7f4578b24412338599ca4a47baf77801a29c48935c09880788b923a44e13bf6e62cd191508bbbe8d422c25f14258d5d21efd20497f5ce601a777db967d8eac2360c71eea2da539cfb51eea157d906a8c68a0ac1fc20ec6d9aef88d4738275603cec7715127ffb383ca3cb1001de26dbee2945b92b877f0b1d88e82547311efa0e47a8aeec0aa6890ef"], 0xd6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x88c4) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX=0x0, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001aa97c11f31eb8ba27faa3bd324f2dc18c1fb8f7"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x88c4)

2.993904947s ago: executing program 4 (id=2649):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x810, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0xe0}], 0x1}, 0x40040)
r3 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="09d32630bfadc06e66202020313237302e302e312005303030303030303030206c5c63616c73740a0000", 0x2a)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="5472d17b6ba035bc823c264b2024ea740ea67a688a9b11cbc8778be931520592eed2293e80b27dd16be90e70169c0e3b6c83fadccc4b05d3ebfe304476c6187c3a9beb8a983ca93fc5a3d991f36acede3dba7fd60aa5484ff8e5cb033956bc24", &(0x7f0000000180)=""/164}, 0x1c)
r4 = syz_io_uring_setup(0x2f90, &(0x7f0000000440)={0x0, 0x91d9, 0x8000, 0x2, 0x292, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000))
epoll_create(0xaf2)
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0xe000200f})
r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x78)
fchdir(r7)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r8, &(0x7f00000000c0)=""/55, 0x37)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0}, 'auth.unix.ip/channel\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000280)={0x0, 0xffffff83, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x10}, 0x1)
ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0)
fsmount(r9, 0x1, 0x0)

2.961848234s ago: executing program 3 (id=2650):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe49, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
connect$bt_sco(r5, &(0x7f0000000080)={0x1f, @none}, 0x8)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x8000000, r1, 0x0)
landlock_restrict_self(r0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)

2.764880822s ago: executing program 4 (id=2651):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x1800)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
connect$bt_sco(r5, &(0x7f0000000080)={0x1f, @none}, 0x8)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x8000000, r1, 0x0)
landlock_restrict_self(r0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)

2.760620871s ago: executing program 0 (id=2652):
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', <r1=>0x0, 0x1, 0x40, 0xff, 0xff, {{0x19, 0x4, 0x1, 0x9, 0x64, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @timestamp={0x44, 0x14, 0xde, 0x0, 0x3, [0x3, 0x8, 0xfffffffa, 0x1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @cipso={0x86, 0x23, 0x1, [{0x0, 0xc, "1ea330e8a6f1ea209352"}, {0x6, 0x6, "195fb2c4"}, {0x6, 0xb, "63d41e116550e67ee4"}]}, @noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x26, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x10, 0xffffffffffffffff, 0xb2993000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804008000000850000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80000)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000))
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2.637075998s ago: executing program 2 (id=2653):
openat$fb1(0xffffff9c, &(0x7f0000000000), 0x121180, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, 0x0, 0x0)
mkdir(0x0, 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x3c, r5, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804)

2.355408323s ago: executing program 2 (id=2654):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6c, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x3000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x6, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
unshare(0x62040200)
mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54)

1.582057969s ago: executing program 3 (id=2655):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x3cc, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}, {0x4}, {0x324, 0x1, [@m_ctinfo={0x16c, 0x1, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x4, 0xe2d, 0x2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x2, 0x2, 0x4, 0x5}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x2, 0x7, 0x8}}]}, {0xd7, 0x6, "bfe8b6d0a53e0fb58b021bc7b0740eed05921abe3391654994ffd3dc911ce437459c3ae238de67346dee68cb90b08c6f94b2bc47e5e764c557e6253022b8d5ed93157b0084918a4f2a86f97876be574ca502db6dd3f2ca288df3073f0d1ee0804ea82458d9b909016e4c40274882d145708748fedf09e11f2fd14474af40c2af71717fe9ef2e576962696950690f087c39450bb8365b54f5c62704a9090987620f859e8fd3037611c7645ee7b5f594c7106411fe14261414dba364740af0d0d95c4e7d087b466f3055f521c96b136986833cdc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x1b4, 0x12, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfffd, 0x3, 0x1, 0x9}, {0x6, 0x8, 0xfb, 0x400}, {0x3, 0x7, 0x3, 0x9}, {0x1, 0x7, 0x8, 0xe}, {0x10, 0x4d, 0x0, 0x9}, {0xb, 0x9e, 0x1b, 0x21c}, {0x4, 0x1, 0x6e, 0x4}, {0x1, 0x4, 0x81, 0x8}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x9, 0x5, 0x13, 0x6}, {0x2, 0x5f, 0x2a, 0x2}, {0x80, 0x10, 0x78, 0xd4}, {0xe, 0x2, 0xd, 0x200}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xa, 0x6, './bus\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xf9, 0x6, "7c5fa82d24dee1e6d5ac28b3293a78b3a8338fd4959282cb684865b1cff9ccd794cb558408e00a156f0b8f4143ad6617b9725c9d39b67f5425e05b36dff9df908db9a99850a503b92a029586733068f7549dee574fcf5ff5a3a4cb5b807e3c8dcf28291410ed06e45bccb13ba973b56a46eb7ffabd1e9190c54d530e68099aac836cf4424594e1382c8a4f522e4b9cb069858818df4f9485944392fcad62cb4ec2228548bb4bbbd553e305140c0e946c3af9bb712381d55e75c9d343496cab2f4568f3e5927028a71a851e7899258536c5797cbcbb0084018a0e3eb6b7e0a8f4b65050683978a9f32718c799bf92e274e410ad0fd7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/notes', 0x96040, 0x81)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
connect$bt_sco(r5, &(0x7f0000000080)={0x1f, @none}, 0x8)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x8000000, r1, 0x0)
landlock_restrict_self(r0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)

1.443701392s ago: executing program 2 (id=2656):
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x101002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'sit0\x00', &(0x7f00000005c0)={'gre0\x00', <r1=>0x0, 0x1, 0x40, 0xff, 0xff, {{0x19, 0x4, 0x1, 0x9, 0x64, 0x64, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @timestamp={0x44, 0x14, 0xde, 0x0, 0x3, [0x3, 0x8, 0xfffffffa, 0x1]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @cipso={0x86, 0x23, 0x1, [{0x0, 0xc, "1ea330e8a6f1ea209352"}, {0x6, 0x6, "195fb2c4"}, {0x6, 0xb, "63d41e116550e67ee4"}]}, @noop]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x26, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x10, 0xffffffffffffffff, 0xb2993000)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a804008000000850000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80000)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000))
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

362.838095ms ago: executing program 4 (id=2657):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x700, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

106.393107ms ago: executing program 3 (id=2658):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[])
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2f4, r6, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0x1d8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x110, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xde, 0x2, '400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^{.!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40}, 0x4048086)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_connect$midi(0x3, 0x51, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x8, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfa, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x8}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x1, 0x6, [{0x0, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x9, 0x6}], 0xfc}, @ms_header={0x7, 0x24, 0x1, 0xbb27, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}]}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201, 0x5, 0x5, 0x40, 0x10, 0xb}, 0xf8, &(0x7f00000007c0)={0x5, 0xf, 0xf8, 0x3, [@generic={0xd8, 0x10, 0x3, "f8cf0bd212e90fc9d5b5d47260adb7abb3da310141f926e1e5c369bb37359d3cc3e0899b282fcdf187e711c34c6ccb3ce2d05a64bfeb7419b7976ef516e3ee35460a3f0f54ffaba995e69560fdd5a9013578cd9236ea63a01100d76a5719a419977784f0f5fe52c9bf9d442d299c7d49b3c369bfc42dddf4e72f2be027e5fcd40660db192a906f813d449acabcdf88211565bfa7f0c6daed9d5b542c4a96d9faa2e91e1a84c45b80aecb221ec8080e605bd582fd8e3ba39e3900e914a85b02d059db9b87d79b62e1a2a54c93d6a1eadb9682f398ff"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d7a0bc208b285120fdee5fc50a357d1c"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x0, 0x2}]}, 0x6, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x459}}, {0x5e, &(0x7f0000000940)=@string={0x5e, 0x3, "dc179b1dab566ab3d6bc77a97e1c387ead885374b633217512273db5621499a041329057aeb71830e92ac751ad12a5a0a40adffef3969fc0ce1117c181caaaaa76e291eb2374e4a6ed92a6ccbdb1b981c60df95dd9a2d9670c0c5c81"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x99, &(0x7f0000000a40)=@string={0x99, 0x3, "9d3c2e93770423b4f2a45a34550ddac115c44ea85554e9e661f96bde48840cdbe144d9c524ceb5e3795d4a0fbb3b401eaa3259adb3b9921f45c322d56035412b29ca75963fb8c31f00156efc8128ea661806092b5247b14f75abaf7a536f28d417c9d3485fa94125e3f9c255bb80728b1f062c6e1a113a88e4f42b02990eb1aa15f35b4dc93d917c7639c9edbe2786eb457d69a6756c52"}}]})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2317a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

63.005912ms ago: executing program 2 (id=2659):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x810, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0xe0}], 0x1}, 0x40040)
r3 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)="09d32630bfadc06e66202020313237302e302e312005303030303030303030206c5c63616c73740a0000", 0x2a)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040)="5472d17b6ba035bc823c264b2024ea740ea67a688a9b11cbc8778be931520592eed2293e80b27dd16be90e70169c0e3b6c83fadccc4b05d3ebfe304476c6187c3a9beb8a983ca93fc5a3d991f36acede3dba7fd60aa5484ff8e5cb033956bc24", &(0x7f0000000180)=""/164}, 0x1c)
r4 = syz_io_uring_setup(0x2f90, &(0x7f0000000440)={0x0, 0x91d9, 0x8000, 0x2, 0x292, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000))
epoll_create(0xaf2)
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0xe000200f})
r6 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x78)
fchdir(r7)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r8, &(0x7f00000000c0)=""/55, 0x37)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r9=>r0}, 'auth.unix.ip/channel\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000280)={0x0, 0xffffff83, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x10}, 0x1)
ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0)
fsmount(r9, 0x1, 0x0)

42.898769ms ago: executing program 2 (id=2660):
syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='44100,08000,88200,96000,176400,192000,352800,3', 0x2e)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000640)='usbip-', 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

0s ago: executing program 0 (id=2661):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x400001, 0x100)
r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000)
io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0)
io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0)
io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04)

kernel console output (not intermixed with test programs):

D, truncated
[  423.502830][T15033] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  423.730135][T15047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  423.736907][T15047] block device autoloading is deprecated and will be removed.
[  424.067234][T15059] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2258'.
[  425.168292][   T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  429.407269][    C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  434.597065][ T6689] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  434.769584][ T6689] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.774504][ T6689] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  434.781037][ T6689] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  434.785218][ T6689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.788738][ T6689] usb 8-1: Product: syz
[  434.790628][ T6689] usb 8-1: Manufacturer: syz
[  434.792694][ T6689] usb 8-1: SerialNumber: syz
[  434.812794][ T6689] cdc_mbim 8-1:1.0: skipping garbage
[  434.958894][T15111] openvswitch: netlink: Missing valid actions attribute.
[  434.966789][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.019817][T15101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  435.122918][T15111] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  435.128873][T15117] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  435.199752][T15120] netlink: 'syz.0.2270': attribute type 49 has an invalid length.
[  435.231487][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.235452][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.321595][T15120] ip6gretap0: entered promiscuous mode
[  435.323553][T15120] ip6gretap0: entered allmulticast mode
[  435.415337][   T42] audit: type=1326 audit(1785604382.412:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15126 comm="syz.0.2271" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0
[  435.651098][T15101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  435.654252][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'.
[  435.726398][ T6689] cdc_mbim 8-1:1.0: setting tx_max = 16384
[  435.756541][ T6689] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  435.849141][ T6689] wwan wwan0: port wwan0mbim0 attached
[  436.148125][ T6689] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, c6:09:28:f9:7d:07
[  436.201985][ T6689] usb 8-1: USB disconnect, device number 34
[  436.226757][ T6689] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  436.460718][ T6689] wwan wwan0: port wwan0mbim0 disconnected
[  436.651219][T15102] udevd[15102]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.802887][T15155] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  437.087355][    T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  437.237735][    T9] usb 7-1: Using ep0 maxpacket: 8
[  437.242523][    T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  437.247669][    T9] usb 7-1: config 0 has no interface number 0
[  437.253644][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  437.261839][    T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  437.269045][    T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  437.279433][    T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  437.293140][    T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  437.299773][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.308365][    T9] usb 7-1: config 0 descriptor??
[  437.324123][    T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  437.978904][ T1481] usb 7-1: USB disconnect, device number 48
[  437.980867][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  437.993632][ T1481] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  437.996614][T15159] ldusb: No device or device unplugged -19
[  438.091577][   T42] audit: type=1800 audit(1785604385.062:13): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2278" name="local" dev="configfs" ino=61293 res=0 errno=0
[  438.122883][   T42] audit: type=1800 audit(1785604385.062:14): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2278" name="scan_secs" dev="configfs" ino=61295 res=0 errno=0
[  439.039605][ T1481] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  439.160943][T15188] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  439.197570][ T1481] usb 6-1: Using ep0 maxpacket: 8
[  439.203055][ T1481] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  439.205873][ T1481] usb 6-1: config 0 has no interface number 0
[  439.211788][ T1481] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  439.223548][ T1481] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  439.233836][ T1481] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  439.242264][ T1481] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  439.254960][ T1481] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  439.263439][ T1481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.273822][ T1481] usb 6-1: config 0 descriptor??
[  439.285138][ T1481] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  439.651331][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  439.717169][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  439.777463][  T846] usb 6-1: USB disconnect, device number 47
[  439.777603][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  439.789083][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2284'.
[  439.795387][  T846] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  439.799833][T15190] ldusb: No device or device unplugged -19
[  439.887117][   T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  439.986056][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'.
[  440.038937][   T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.100280][   T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  440.118811][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  440.135012][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.157853][   T24] usb 7-1: Product: syz
[  440.159287][   T24] usb 7-1: Manufacturer: syz
[  440.174990][   T24] usb 7-1: SerialNumber: syz
[  440.236561][   T24] cdc_mbim 7-1:1.0: skipping garbage
[  440.430405][T15197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  440.652807][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.689751][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.110125][T15213] tmpfs: Bad value for 'huge'
[  441.137677][T15213] netlink: 'syz.0.2287': attribute type 3 has an invalid length.
[  441.187475][T15213] netlink: 'syz.0.2287': attribute type 3 has an invalid length.
[  441.212529][T15197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  441.216577][   T24] cdc_mbim 7-1:1.0: setting tx_max = 16384
[  441.233648][   T24] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  441.249701][   T24] wwan wwan0: port wwan0mbim0 attached
[  441.391872][   T24] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ce:65:06:68:66:75
[  441.436895][   T24] usb 7-1: USB disconnect, device number 49
[  441.466802][   T24] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  441.753228][   T24] wwan wwan0: port wwan0mbim0 disconnected
[  441.967067][    T9] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  442.118468][    T9] usb 5-1: config 6 has an invalid interface number: 7 but max is 0
[  442.139223][ T8731] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  442.418839][    T9] usb 5-1: config 6 has no interface number 0
[  442.420871][    T9] usb 5-1: config 6 interface 7 has no altsetting 0
[  442.434955][    T9] usb 5-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8
[  442.437898][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.440540][    T9] usb 5-1: Product: syz
[  442.441910][    T9] usb 5-1: Manufacturer: syz
[  442.443431][    T9] usb 5-1: SerialNumber: syz
[  442.462570][ T8731] usb 8-1: Using ep0 maxpacket: 8
[  442.475380][ T8731] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  442.479480][ T8731] usb 8-1: config 0 has no interface number 0
[  442.481772][ T8731] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  442.485242][ T8731] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  442.490875][ T8731] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  442.494329][ T8731] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  442.500417][ T8731] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  442.503346][ T8731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.514085][ T8731] usb 8-1: config 0 descriptor??
[  442.562318][ T8731] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  442.653712][T15230] Bluetooth: MGMT ver 1.23
[  442.748067][    T9] usb 5-1: USB disconnect, device number 49
[  442.929358][    T9] usb 8-1: USB disconnect, device number 35
[  442.929394][    C2] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  442.934042][    T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  442.934909][T15235] ldusb: No device or device unplugged -19
[  443.270175][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2295'.
[  444.055523][T15257] tmpfs: Bad value for 'huge'
[  444.847110][ T8731] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  445.006824][ T8731] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.012664][ T8731] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  445.028766][ T8731] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  445.032530][    T9] Process accounting resumed
[  445.035102][ T8731] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.040293][ T8731] usb 8-1: Product: syz
[  445.042451][ T8731] usb 8-1: Manufacturer: syz
[  445.044344][ T8731] usb 8-1: SerialNumber: syz
[  445.105722][ T8731] cdc_mbim 8-1:1.0: skipping garbage
[  445.286317][T15281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  445.496704][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.880363][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.268623][T15322] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2307'.
[  447.301256][T15281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  447.306871][ T8731] cdc_mbim 8-1:1.0: setting tx_max = 16384
[  447.310045][ T8731] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  447.631266][ T8731] wwan wwan0: port wwan0mbim0 attached
[  447.769314][T15333] fuse: Unknown parameter 'group_i00000000000000000000'
[  448.109511][ T8731] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, a2:00:63:c1:1d:84
[  448.142193][ T8731] usb 8-1: USB disconnect, device number 36
[  448.148278][ T8731] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  448.248542][ T8731] wwan wwan0: port wwan0mbim0 disconnected
[  448.341982][T14688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  448.350324][T14688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  448.353901][T14688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  448.358859][T14688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  448.361530][T14688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  448.381668][   T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  448.384257][   T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  448.386769][   T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  448.395899][   T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  448.401087][   T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  448.440917][T15346] i2c i2c-0: Failed to register i2c client typec_fusb302 at 0x22 (-16)
[  448.536132][T14695] syz_tun (unregistering): left allmulticast mode
[  448.559584][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2314'.
[  448.819458][ T1349] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  448.848182][T15341] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.851050][T15341] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.853826][T15341] bridge_slave_0: entered allmulticast mode
[  448.857380][T15341] bridge_slave_0: entered promiscuous mode
[  448.860877][T15341] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.863684][T15341] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.866418][T15341] bridge_slave_1: entered allmulticast mode
[  448.870491][T15341] bridge_slave_1: entered promiscuous mode
[  448.897670][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.904500][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.930679][T15341] team0: Port device team_slave_0 added
[  448.935522][T15341] team0: Port device team_slave_1 added
[  448.959529][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.962430][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.973134][ T1349] usb 6-1: Using ep0 maxpacket: 32
[  448.975313][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.982441][ T1349] usb 6-1: config 8 has an invalid interface number: 6 but max is 0
[  448.986880][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.989882][ T1349] usb 6-1: config 8 has no interface number 0
[  448.992520][ T1349] usb 6-1: config 8 interface 6 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  448.997150][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.007958][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  449.012369][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[  449.016609][ T1349] usb 6-1: config 8 interface 6 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64
[  449.017055][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.020863][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  449.029479][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  449.033879][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  449.038042][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0xB, skipping
[  449.042298][ T1349] usb 6-1: config 8 interface 6 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1024
[  449.044744][T15341] hsr_slave_0: entered promiscuous mode
[  449.046471][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[  449.049618][T15341] hsr_slave_1: entered promiscuous mode
[  449.053675][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[  449.055786][T15341] debugfs: 'hsr0' already exists in 'hsr'
[  449.059882][ T1349] usb 6-1: config 8 interface 6 altsetting 6 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  449.067642][ T1349] usb 6-1: config 8 interface 6 altsetting 6 endpoint 0x8F has invalid maxpacket 1023, setting to 64
[  449.072562][ T1349] usb 6-1: config 8 interface 6 has no altsetting 0
[  449.076010][T15341] Cannot create hsr debugfs directory
[  449.082854][ T1349] usb 6-1: New USB device found, idVendor=05c6, idProduct=9076, bcdDevice=ca.65
[  449.089732][ T1349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.093172][ T1349] usb 6-1: Product: â ‰
[  449.095446][ T1349] usb 6-1: Manufacturer: ᆢ�ᖖ⼭뭀媗��玀㰂肱ࠢ络뱨�є탩�裸传嫟�㧀�䜼�覃��酬뉹訧�অ池柬蔟⥯凪挤쎢
[  449.102226][ T1349] usb 6-1: SerialNumber: ♺�ᢥ뺧ᒾ㙵࢛㌱ઓ饠⡌䀇��盘꓇ౣꡣ쬷島ۺ艾時㛩ࠡ㤢溼뺟驚ಛ쌺蘛䆧蜽챑쵻䃳��њᰇ�⾂
[  449.113284][T15353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  449.120925][T15353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  449.123327][T15353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  449.767577][T15341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.790463][T15376] syzkaller0: entered promiscuous mode
[  449.792744][T15376] syzkaller0: entered allmulticast mode
[  449.858541][T15341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.951243][T15341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.055061][T15341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.251019][ T1349] usb 6-1: USB disconnect, device number 48
[  450.457071][T14688] Bluetooth: hci4: command tx timeout
[  450.514878][T15341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  450.523226][T15341] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  450.526136][T15341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  450.533288][T15341] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  450.537893][T15341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  450.548823][T15341] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  450.552877][T15341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  450.558681][T15341] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  450.594027][   T42] audit: type=1326 audit(1785604396.595:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  450.601660][   T42] audit: type=1326 audit(1785604396.595:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000
[  450.606395][T15341] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.608404][   T42] audit: type=1326 audit(1785604396.595:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  450.608429][   T42] audit: type=1326 audit(1785604396.595:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6feefec code=0x7ffc0000
[  450.617388][ T1481] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  450.649082][T15341] 8021q: adding VLAN 0 to HW filter on device team0
[  450.661015][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.663388][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.677350][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.679694][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.777248][ T1481] usb 7-1: Using ep0 maxpacket: 8
[  450.781361][ T1481] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  450.783999][ T1481] usb 7-1: config 0 has no interface number 0
[  450.785970][ T1481] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  450.789977][    T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  450.794688][ T1481] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  450.799104][ T1481] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  450.802521][ T1481] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  450.810691][ T1481] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  450.817113][ T1481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.824856][ T1481] usb 7-1: config 0 descriptor??
[  450.832416][ T1481] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  450.947146][    T9] usb 8-1: Using ep0 maxpacket: 8
[  450.952742][    T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  450.955444][    T9] usb 8-1: config 0 has no interface number 0
[  450.963243][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  450.969966][    T9] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  450.977197][    T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  450.985175][    T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  450.988763][   T42] audit: type=1326 audit(1785604396.985:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  451.003873][    T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  451.006853][   T42] audit: type=1326 audit(1785604396.995:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.1.2319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000
[  451.007785][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.021690][    T9] usb 8-1: config 0 descriptor??
[  451.026695][    T9] ldusb 8-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  451.066768][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.106825][T15341] veth0_vlan: entered promiscuous mode
[  451.126352][T15341] veth1_vlan: entered promiscuous mode
[  451.191425][T15341] veth0_macvtap: entered promiscuous mode
[  451.251335][T15341] veth1_macvtap: entered promiscuous mode
[  451.343844][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.389764][ T1481] usb 7-1: USB disconnect, device number 50
[  451.392126][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  451.406289][ T1481] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  451.406439][T15380] ldusb: No device or device unplugged -19
[  451.412594][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.540871][ T1349] usb 8-1: USB disconnect, device number 37
[  451.557467][ T1349] ldusb 8-1:0.55: LD USB Device #1 now disconnected
[  451.687159][T14138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.687330][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.690923][T14138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.696442][T14138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.699463][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.731538][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.734078][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.769452][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.537228][T14688] Bluetooth: hci4: command tx timeout
[  453.057712][    T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  453.125136][T15442] Cannot find add_set index 0 as target
[  453.208094][    T9] usb 6-1: Using ep0 maxpacket: 8
[  453.219654][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  453.227198][    T9] usb 6-1: config 0 has no interface number 0
[  453.234367][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  453.249416][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  453.254507][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  453.261613][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  453.281357][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  453.286594][   T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  453.294960][   T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  453.300014][   T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  453.306920][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  453.310893][   T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  453.315813][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.332279][    T9] usb 6-1: config 0 descriptor??
[  453.340791][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  453.487541][ T1349] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  453.658961][ T1349] usb 5-1: Using ep0 maxpacket: 16
[  453.667618][ T1349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  453.679246][ T1349] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  453.687101][ T1349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.700405][ T1349] usb 5-1: Product: syz
[  453.705851][ T1349] usb 5-1: Manufacturer: syz
[  453.709631][ T1349] usb 5-1: SerialNumber: syz
[  453.725555][ T1349] usb 5-1: config 0 descriptor??
[  453.742756][ T1349] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  453.759574][ T1349] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  453.861000][ T5827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.969566][  T846] usb 6-1: USB disconnect, device number 49
[  453.969676][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  453.990723][  T846] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  454.011074][T15435] ldusb: No device or device unplugged -19
[  454.062689][ T5827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.163302][ T5827] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.339413][ T1349] em28xx 5-1:0.0: chip ID is em2765
[  454.440662][T15467] capability: warning: `syz.3.2329' uses deprecated v2 capabilities in a way that may be insecure
[  454.563737][ T5827] bond4 (unregistering): (slave erspan0): Releasing active interface
[  454.617104][   T64] Bluetooth: hci4: command tx timeout
[  454.751978][T15478] tmpfs: Bad value for 'huge'
[  454.784066][ T5827] bond0 (unregistering): (slave bond1): Releasing backup interface
[  454.792486][ T5827] bond1 (unregistering): left promiscuous mode
[  454.795220][ T5827] bond0 (unregistering): Released all slaves
[  454.823331][ T5827] bond1 (unregistering): Released all slaves
[  454.862216][ T5827] bond2 (unregistering): Released all slaves
[  454.899413][ T5827] bond3 (unregistering): (slave veth1_to_team): Releasing backup interface
[  454.908087][ T5827] bond3 (unregistering): Released all slaves
[  454.935588][ T5827] bond4 (unregistering): Released all slaves
[  454.960699][ T1349] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  454.966365][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1
[  454.969169][ T1349] em28xx 5-1:0.0: board has no eeprom
[  454.969510][T15478] netlink: 'syz.1.2330': attribute type 3 has an invalid length.
[  454.975392][T15478] netlink: 'syz.1.2330': attribute type 3 has an invalid length.
[  455.079437][ T5827] tipc: Left network mode
[  455.324321][ T1349] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  455.329346][ T1349] em28xx 5-1:0.0: dvb set to bulk mode.
[  455.338442][ T1349] usb 5-1: USB disconnect, device number 50
[  455.352657][ T1349] em28xx 5-1:0.0: Disconnecting em28xx
[  455.359135][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2
[  455.361491][   T41] em28xx 5-1:0.0: Binding DVB extension
[  455.364024][T15445] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.366659][T15445] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.386017][T15445] bridge_slave_0: entered allmulticast mode
[  455.396045][T15445] bridge_slave_0: entered promiscuous mode
[  455.406887][   T41] em28xx 5-1:0.0: Registering input extension
[  455.409088][   T64] Bluetooth: hci1: command tx timeout
[  455.415800][T15445] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.428434][ T1349] em28xx 5-1:0.0: Closing input extension
[  455.433584][T15445] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.441769][T15445] bridge_slave_1: entered allmulticast mode
[  455.447571][T15445] bridge_slave_1: entered promiscuous mode
[  455.491191][T15445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.530351][T15445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.581011][ T1349] em28xx 5-1:0.0: Freeing device
[  455.588391][T15445] team0: Port device team_slave_0 added
[  455.593338][T15445] team0: Port device team_slave_1 added
[  455.749158][T15445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.764602][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.787293][T15445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.885640][T15445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.896681][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.921510][T15445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.009743][T15445] hsr_slave_0: entered promiscuous mode
[  456.017395][T15445] hsr_slave_1: entered promiscuous mode
[  456.021303][T15445] debugfs: 'hsr0' already exists in 'hsr'
[  456.027067][T15445] Cannot create hsr debugfs directory
[  456.688035][   T64] Bluetooth: hci4: command tx timeout
[  456.855716][ T5827] hsr_slave_1: left promiscuous mode
[  456.869060][ T5827] veth1_macvtap: left promiscuous mode
[  456.870878][ T5827] veth0_macvtap: left promiscuous mode
[  456.872787][ T5827] veth1_vlan: left promiscuous mode
[  456.874497][ T5827] veth0_vlan: left promiscuous mode
[  457.226569][T15520] fuse: Unknown parameter 'group_id00000000000000000000'
[  457.487160][   T64] Bluetooth: hci1: command tx timeout
[  457.504636][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3
[  457.612367][T15528] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  458.488347][T15550] tmpfs: Bad value for 'mpol'
[  458.501770][T15445] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  458.513471][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  458.516910][T15445] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  458.523396][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  458.526510][T15445] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  458.536624][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  458.541557][T15445] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  458.548192][T15445] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  458.587281][  T846] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  458.607634][T15445] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.616412][T15445] 8021q: adding VLAN 0 to HW filter on device team0
[  458.621474][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.623812][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.646205][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.648550][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.741872][T15564] tipc: Started in network mode
[  458.745834][T15564] tipc: Node identity 4, cluster identity 4711
[  458.750525][T15564] tipc: Node number set to 4
[  458.757140][  T846] usb 8-1: Using ep0 maxpacket: 8
[  458.761788][  T846] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  458.764947][  T846] usb 8-1: config 0 has no interface number 0
[  458.768204][  T846] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  458.772425][  T846] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  458.782601][  T846] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  458.792752][  T846] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  458.802937][  T846] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  458.806338][  T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.815993][  T846] usb 8-1: config 0 descriptor??
[  458.829141][  T846] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  459.095491][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.248941][    T9] usb 8-1: USB disconnect, device number 38
[  459.249010][    C2] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  459.255212][    T9] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  459.257142][T15544] ldusb: No device or device unplugged -19
[  459.577130][   T64] Bluetooth: hci1: command tx timeout
[  459.673327][T15445] veth0_vlan: entered promiscuous mode
[  459.718297][T15445] veth1_vlan: entered promiscuous mode
[  460.034642][T15445] veth0_macvtap: entered promiscuous mode
[  460.041798][T15445] veth1_macvtap: entered promiscuous mode
[  460.155078][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'.
[  460.357039][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  460.508363][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  460.511646][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  460.514816][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  460.521311][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  460.524300][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  460.526888][    T9] usb 5-1: Product: syz
[  460.527900][T15445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.529375][    T9] usb 5-1: Manufacturer: syz
[  460.531965][    T9] usb 5-1: SerialNumber: syz
[  460.568839][T15445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.638121][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.646045][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.688066][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.707525][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.753504][    T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  460.994907][  T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.003660][  T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.038970][   T41] usb 5-1: USB disconnect, device number 51
[  461.043068][   T41] usblp0: removed
[  461.094284][  T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.100474][  T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.347065][    T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  461.374116][T15624] FAULT_INJECTION: forcing a failure.
[  461.374116][T15624] name failslab, interval 1, probability 0, space 0, times 0
[  461.387410][T15624] CPU: 0 UID: 0 PID: 15624 Comm: syz.2.2327 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.387445][T15624] Tainted: [L]=SOFTLOCKUP
[  461.387452][T15624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  461.387463][T15624] Call Trace:
[  461.387471][T15624]  <TASK>
[  461.387479][T15624]  dump_stack_lvl+0x100/0x190
[  461.387510][T15624]  should_fail_ex.cold+0x5/0xa
[  461.387533][T15624]  should_failslab+0xc2/0x120
[  461.387560][T15624]  kmem_cache_alloc_noprof+0x91/0x6a0
[  461.387583][T15624]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[  461.387612][T15624]  ? ptlock_alloc+0x1f/0x70
[  461.387649][T15624]  ptlock_alloc+0x1f/0x70
[  461.387668][T15624]  pte_alloc_one+0x82/0x3d0
[  461.387705][T15624]  do_fault+0x86c/0x1750
[  461.387735][T15624]  __handle_mm_fault+0x187d/0x2a00
[  461.387758][T15624]  ? mt_find+0x45e/0x8e0
[  461.387783][T15624]  ? __pfx___handle_mm_fault+0x10/0x10
[  461.387797][T15624]  ? __pfx_mt_find+0x10/0x10
[  461.387834][T15624]  ? find_vma+0xbf/0x140
[  461.387855][T15624]  ? __pfx_find_vma+0x10/0x10
[  461.387878][T15624]  handle_mm_fault+0x37b/0xa30
[  461.387898][T15624]  do_user_addr_fault+0x74c/0x12f0
[  461.387934][T15624]  exc_page_fault+0x6f/0xd0
[  461.387957][T15624]  asm_exc_page_fault+0x26/0x30
[  461.387975][T15624] RIP: 0010:__get_user_4+0x14/0x30
[  461.387996][T15624] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  461.388012][T15624] RSP: 0018:ffffc90003b07db0 EFLAGS: 00050287
[  461.388028][T15624] RAX: 00000000f53b7000 RBX: ffff88802a398000 RCX: ffffc90003b07d54
[  461.388040][T15624] RDX: 00007ffffffff000 RSI: ffffffff825c1671 RDI: ffffffff8c400a80
[  461.388051][T15624] RBP: 00000000f53b7000 R08: 0000000000000001 R09: 00000000000001d2
[  461.388062][T15624] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000080002680
[  461.388073][T15624] R13: ffff8880505ca640 R14: 0000000000000001 R15: 0000000000000000
[  461.388091][T15624]  ? __might_fault+0x111/0x140
[  461.388114][T15624]  lookup_ioctx+0x5c/0x820
[  461.388138][T15624]  __ia32_compat_sys_io_submit+0x10d/0x3b0
[  461.388158][T15624]  ? __fget_files+0x21f/0x3d0
[  461.388178][T15624]  ? __pfx___ia32_compat_sys_io_submit+0x10/0x10
[  461.388205][T15624]  ? ksys_write+0x1ac/0x250
[  461.388222][T15624]  ? __pfx_ksys_write+0x10/0x10
[  461.388244][T15624]  __do_fast_syscall_32+0xe7/0x970
[  461.388268][T15624]  ? lockdep_hardirqs_on+0x78/0x100
[  461.388292][T15624]  do_fast_syscall_32+0x32/0x70
[  461.388316][T15624]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  461.388336][T15624] RIP: 0023:0xf70aefec
[  461.388357][T15624] Code: Unable to access opcode bytes at 0xf70aefc2.
[  461.388364][T15624] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8
[  461.388378][T15624] RAX: ffffffffffffffda RBX: 00000000f53b7000 RCX: 0000000000000001
[  461.388388][T15624] RDX: 0000000080002680 RSI: 0000000000000000 RDI: 0000000000000000
[  461.388398][T15624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  461.388407][T15624] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  461.388417][T15624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  461.388438][T15624]  </TASK>
[  461.587076][    T9] usb 6-1: Using ep0 maxpacket: 8
[  461.590871][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  461.593527][    T9] usb 6-1: config 0 has no interface number 0
[  461.595497][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  461.606998][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  461.617108][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  461.632193][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  461.641575][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  461.647109][   T64] Bluetooth: hci1: command tx timeout
[  461.653404][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.663750][    T9] usb 6-1: config 0 descriptor??
[  461.678646][    T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  462.676643][    T9] usb 6-1: USB disconnect, device number 50
[  462.697110][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  464.331505][   T42] audit: type=1326 audit(1785604411.332:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15641 comm="syz.1.2356" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0
[  464.400696][T15648] FAULT_INJECTION: forcing a failure.
[  464.400696][T15648] name failslab, interval 1, probability 0, space 0, times 0
[  464.405741][T15648] CPU: 3 UID: 0 PID: 15648 Comm: syz.0.2358 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.405768][T15648] Tainted: [L]=SOFTLOCKUP
[  464.405774][T15648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  464.405783][T15648] Call Trace:
[  464.405790][T15648]  <TASK>
[  464.405796][T15648]  dump_stack_lvl+0x100/0x190
[  464.405823][T15648]  should_fail_ex.cold+0x5/0xa
[  464.405844][T15648]  should_failslab+0xc2/0x120
[  464.405886][T15648]  __kvmalloc_node_noprof+0x116/0x970
[  464.405909][T15648]  ? batadv_meshif_init_early+0x22b/0x330
[  464.405954][T15648]  ? __pfx_batadv_meshif_init_early+0x10/0x10
[  464.405977][T15648]  ? alloc_netdev_mqs+0xb4e/0x15c0
[  464.406013][T15648]  ? __pfx_batadv_meshif_init_early+0x10/0x10
[  464.406036][T15648]  alloc_netdev_mqs+0xb4e/0x15c0
[  464.406085][T15648]  rtnl_create_link+0xc13/0xf80
[  464.406115][T15648]  rtnl_newlink+0x13bd/0x2380
[  464.406146][T15648]  ? __pfx_rtnl_newlink+0x10/0x10
[  464.406187][T15648]  ? preempt_schedule_common+0x42/0xc0
[  464.406209][T15648]  ? preempt_schedule_thunk+0x16/0x40
[  464.406240][T15648]  ? find_held_lock+0x2b/0x80
[  464.406260][T15648]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  464.406298][T15648]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  464.406323][T15648]  ? __pfx_rtnl_newlink+0x10/0x10
[  464.406346][T15648]  rtnetlink_rcv_msg+0x95e/0xe90
[  464.406372][T15648]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  464.406394][T15648]  ? __lock_acquire+0x49f/0x1a40
[  464.406429][T15648]  netlink_rcv_skb+0x159/0x420
[  464.406449][T15648]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  464.406475][T15648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  464.406501][T15648]  ? rcu_is_watching+0x12/0xc0
[  464.406535][T15648]  netlink_unicast+0x585/0x850
[  464.406557][T15648]  ? __pfx_netlink_unicast+0x10/0x10
[  464.406582][T15648]  netlink_sendmsg+0x8b0/0xda0
[  464.406604][T15648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.406625][T15648]  ? apparmor_socket_sendmsg+0x15b/0x270
[  464.406647][T15648]  ____sys_sendmsg+0xa4d/0xbe0
[  464.406663][T15648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.406683][T15648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.406711][T15648]  ___sys_sendmsg+0x190/0x1e0
[  464.406730][T15648]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.406759][T15648]  ? find_held_lock+0x2b/0x80
[  464.406793][T15648]  __sys_sendmsg+0x160/0x210
[  464.406818][T15648]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.406846][T15648]  ? __pfx_ksys_write+0x10/0x10
[  464.406867][T15648]  __do_fast_syscall_32+0xe7/0x970
[  464.406895][T15648]  ? lockdep_hardirqs_on+0x78/0x100
[  464.406918][T15648]  do_fast_syscall_32+0x32/0x70
[  464.406940][T15648]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  464.406961][T15648] RIP: 0023:0xf7f44fec
[  464.406982][T15648] Code: Unable to access opcode bytes at 0xf7f44fc2.
[  464.406989][T15648] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  464.407006][T15648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  464.407017][T15648] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 0000000000000000
[  464.407026][T15648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  464.407035][T15648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  464.407045][T15648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  464.407066][T15648]  </TASK>
[  465.425482][T15661] tipc: Started in network mode
[  465.429326][T15661] tipc: Node identity 4, cluster identity 4711
[  465.440657][T15661] tipc: Node number set to 4
[  466.858234][T15677] xt_recent: Unsupported userspace flags (000000fe)
[  468.538131][T15481] syz_tun (unregistering): left allmulticast mode
[  468.549131][T15481] syz_tun (unregistering): left promiscuous mode
[  468.551246][T15481] bridge0: port 3(syz_tun) entered disabled state
[  468.598410][T14688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  468.631101][T14688] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  468.636084][T14688] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  468.639852][T14688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  468.642423][T14688] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  468.706381][T15699] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  469.441143][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'.
[  469.599905][ T5827] bridge_slave_1: left allmulticast mode
[  469.602344][ T5827] bridge_slave_1: left promiscuous mode
[  469.604841][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.625014][ T5827] bridge_slave_0: left allmulticast mode
[  469.627445][ T5827] bridge_slave_0: left promiscuous mode
[  469.629944][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.939184][ T5827] bond2 (unregistering): (slave erspan0): Releasing active interface
[  470.121885][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  470.132756][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  470.136157][ T5827] bond0 (unregistering): Released all slaves
[  470.141958][ T5827] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  470.156409][ T5827] bond1 (unregistering): Released all slaves
[  470.164400][ T5827] bond2 (unregistering): Released all slaves
[  470.293690][ T5827] tipc: Left network mode
[  470.437045][T15416] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  470.582908][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3
[  470.587645][T15416] usb 5-1: Using ep0 maxpacket: 8
[  470.593232][T15416] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  470.598856][T15416] usb 5-1: config 0 has no interface number 0
[  470.600798][T15416] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  470.614324][T15416] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  470.621131][T15416] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  470.629236][T15416] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  470.644581][T15416] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  470.657201][T15416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.677510][T15416] usb 5-1: config 0 descriptor??
[  470.687955][T14688] Bluetooth: hci2: command tx timeout
[  470.726012][T15416] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  470.991531][ T5827] hsr_slave_0: left promiscuous mode
[  471.002281][ T5827] hsr_slave_1: left promiscuous mode
[  471.008876][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.016165][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.217933][ T6689] usb 5-1: USB disconnect, device number 52
[  471.217969][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  471.224187][ T6689] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  471.229056][T15713] ldusb: No device or device unplugged -19
[  471.409111][ T5827] team0 (unregistering): Port device team_slave_1 removed
[  471.429080][ T5827] team0 (unregistering): Port device team_slave_0 removed
[  472.054921][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1
[  472.194175][T15695] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.199673][T15695] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.202610][T15695] bridge_slave_0: entered allmulticast mode
[  472.206286][T15695] bridge_slave_0: entered promiscuous mode
[  472.227946][T15695] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.231316][T15695] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.234462][T15695] bridge_slave_1: entered allmulticast mode
[  472.238876][T15695] bridge_slave_1: entered promiscuous mode
[  472.317486][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.329555][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.366733][T15695] team0: Port device team_slave_0 added
[  472.371505][T15695] team0: Port device team_slave_1 added
[  472.423383][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.429488][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.481667][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.505006][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.513203][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.547149][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.652065][T15760] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2376'.
[  472.653466][ T5460] 8021q: adding VLAN 0 to HW filter on device eth4
[  472.767079][T14688] Bluetooth: hci2: command tx timeout
[  472.813405][T15695] hsr_slave_0: entered promiscuous mode
[  472.829796][T15695] hsr_slave_1: entered promiscuous mode
[  472.833139][T15767] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  473.859132][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2
[  474.349508][   T41] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  474.519658][   T41] usb 8-1: Using ep0 maxpacket: 8
[  474.532606][   T41] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  474.541629][   T41] usb 8-1: config 0 has no interface number 0
[  474.546838][   T41] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  474.553117][   T41] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  474.559359][   T41] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  474.564717][   T41] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  474.577088][   T41] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  474.583596][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.594036][   T41] usb 8-1: config 0 descriptor??
[  474.613498][   T41] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  474.653191][T15804] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2386'.
[  474.674904][T15804] gretap0: entered promiscuous mode
[  474.774754][T15695] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  474.781339][T15695] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.786560][T15695] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  474.799353][T15695] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.805675][T15695] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  474.818885][T15695] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  474.823200][T15695] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  474.830810][T15695] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  474.857146][T14688] Bluetooth: hci2: command tx timeout
[  475.332239][T15695] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.384487][T15695] 8021q: adding VLAN 0 to HW filter on device team0
[  475.466204][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.468567][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.494136][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.496467][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.614501][T15695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  475.965775][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.995656][T15695] veth0_vlan: entered promiscuous mode
[  476.010584][T15695] veth1_vlan: entered promiscuous mode
[  476.032029][T15695] veth0_macvtap: entered promiscuous mode
[  476.036332][T15695] veth1_macvtap: entered promiscuous mode
[  476.047847][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.064985][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.110735][T14129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.157742][T14129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.178773][T14129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.216041][  T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.220584][  T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.236879][T15857] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  476.261756][  T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.265253][  T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.275205][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.431542][T15860] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  476.941981][T14688] Bluetooth: hci2: command tx timeout
[  477.262266][   T41] usb 8-1: USB disconnect, device number 39
[  477.262328][    C3] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  477.292317][   T41] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  477.301132][T15790] ldusb: No device or device unplugged -19
[  477.777824][T15869] fuse: Bad value for 'user_id'
[  477.779718][T15869] fuse: Bad value for 'user_id'
[  477.855925][T15870] tipc: Started in network mode
[  477.859733][T15870] tipc: Node identity 4, cluster identity 4711
[  477.861722][T15870] tipc: Node number set to 4
[  478.862174][T14688] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  478.868446][T14688] Bluetooth: hci4: Injecting HCI hardware error event
[  478.878739][T14688] Bluetooth: hci4: hardware error 0x00
[  479.098104][T15883] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2396'.
[  479.108910][T15883] gretap0: entered promiscuous mode
[  479.477026][T15417] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  479.535120][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'.
[  479.838665][T15417] usb 8-1: Using ep0 maxpacket: 8
[  479.841812][T15417] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  479.845241][T15417] usb 8-1: config 0 has no interface number 0
[  479.850181][T15417] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  479.854234][T15417] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  479.858789][T15417] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  479.862510][T15417] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  479.867386][T15417] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  479.870917][T15417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.876501][T15417] usb 8-1: config 0 descriptor??
[  479.886222][T15417] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  479.892522][T15899] tmpfs: Bad value for 'huge'
[  479.896064][T15899] netlink: 'syz.2.2402': attribute type 3 has an invalid length.
[  479.899220][T15899] netlink: 'syz.2.2402': attribute type 3 has an invalid length.
[  479.968182][T15416] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  479.971364][    T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  480.137596][T15416] usb 5-1: Using ep0 maxpacket: 8
[  480.141532][    T9] usb 6-1: Using ep0 maxpacket: 8
[  480.151593][T15416] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  480.160046][    T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  480.164715][T15416] usb 5-1: config 0 has no interface number 0
[  480.167555][    T9] usb 6-1: config 0 has no interface number 0
[  480.170413][T15416] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  480.174771][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  480.181969][T15416] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  480.186761][    T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  480.192193][    T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  480.197125][T15416] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  480.202081][    T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  480.208377][T15416] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  480.213763][    T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  480.218173][T15416] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  480.222872][T15416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.226221][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.241615][T15416] usb 5-1: config 0 descriptor??
[  480.247687][    T9] usb 6-1: config 0 descriptor??
[  480.274102][T15416] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  480.287937][    T9] ldusb 6-1:0.55: LD USB Device #2 now attached to major 180 minor 2
[  480.423365][T15416] usb 8-1: USB disconnect, device number 40
[  480.425611][    C0] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  480.446093][T15416] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  480.450270][T15885] ldusb: No device or device unplugged -19
[  480.653191][T15416] usb 5-1: USB disconnect, device number 53
[  480.669586][T15416] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  480.710743][ T5754] usb 6-1: USB disconnect, device number 51
[  480.728451][ T5754] ldusb 6-1:0.55: LD USB Device #2 now disconnected
[  481.012515][T14688] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  482.184493][T15925] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2406'.
[  482.521403][T15933] binder: 15932:15933 ioctl 530d 80000e80 returned -22
[  482.524622][T15933] binder: 15932:15933 ioctl c0306201 80000680 returned -14
[  482.722955][T15416] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  483.157035][T15416] usb 6-1: Using ep0 maxpacket: 32
[  483.160726][T15416] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  483.163661][T15416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.172777][T15416] usb 6-1: config 0 descriptor??
[  483.182424][T15416] as10x_usb: device has been detected
[  483.188133][T15416] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  483.234553][T15416] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  483.276495][T15416] as10x_usb: error during firmware upload part1
[  483.278934][T15416] Registered device nBox DVB-T Dongle
[  483.381896][T15416] usb 6-1: USB disconnect, device number 52
[  483.411974][T15416] Unregistered device nBox DVB-T Dongle
[  483.413611][T15416] as10x_usb: device has been disconnected
[  484.689567][T15959] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2415'.
[  484.701070][T15959] gretap0: entered promiscuous mode
[  485.477530][T15973] fuse: Bad value for 'fd'
[  488.220740][T15994] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2425'.
[  489.982182][T16021] fuse: Bad value for 'fd'
[  490.294681][T16026] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2435'.
[  491.117058][T15416] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  491.345418][T15416] usb 8-1: Using ep0 maxpacket: 8
[  491.349913][T15416] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  491.352596][T15416] usb 8-1: config 0 has no interface number 0
[  491.354916][T15416] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  491.358591][T15416] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  491.362516][T15416] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  491.365917][T15416] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  491.370255][T15416] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  491.373175][T15416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.378791][T15416] usb 8-1: config 0 descriptor??
[  491.405750][T15416] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  492.043359][T15416] usb 8-1: USB disconnect, device number 41
[  492.043420][    C0] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  492.052191][T15416] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  492.055178][T16034] ldusb: No device or device unplugged -19
[  493.087279][T15416] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  493.250565][T15416] usb 8-1: Using ep0 maxpacket: 8
[  493.262092][T15416] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  493.266742][T15416] usb 8-1: config 0 has no interface number 0
[  493.269433][T15416] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  493.273130][T15416] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  493.286885][T15416] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  493.305666][T15416] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  493.321840][T16061] fuse: Bad value for 'fd'
[  493.323888][T15416] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  493.334306][T15416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.343192][T15416] usb 8-1: config 0 descriptor??
[  493.355577][T15416] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  493.361513][T16063] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2444'.
[  493.730688][T16072] netlink: 'syz.3.2442': attribute type 1 has an invalid length.
[  493.738874][  T846] usb 8-1: USB disconnect, device number 42
[  493.739026][    C0] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  494.059930][T16081] overlayfs: missing 'lowerdir'
[  494.227332][T16083] netlink: 'syz.1.2449': attribute type 1 has an invalid length.
[  494.230765][T16083] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2449'.
[  494.783639][T16098] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2454'.
[  495.722700][T16109] ptrace attach of "/syz-executor exec"[15695] was attempted by "/syz-executor exec"[16109]
[  495.888070][  T846] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  496.477161][T16120] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  496.627129][T15416] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  496.790853][T15416] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.798556][T15416] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  496.809028][T15416] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  496.812584][T15416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.819945][T15416] usb 6-1: Product: syz
[  496.823977][T15416] usb 6-1: Manufacturer: syz
[  496.827283][T15416] usb 6-1: SerialNumber: syz
[  496.847920][T15416] cdc_mbim 6-1:1.0: skipping garbage
[  497.096660][T16119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  497.202779][T16129] fuse: Bad value for 'fd'
[  497.213207][T16127] fuse: Bad value for 'user_id'
[  497.215414][T16127] fuse: Bad value for 'user_id'
[  497.321672][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.337607][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.749548][T16119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  497.752498][T15416] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  497.759448][T15416] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  497.764485][T15416] wwan wwan0: port wwan0mbim0 attached
[  497.774428][T15416] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 16:f7:6d:fc:d9:8f
[  497.956155][    C0] wdm_int_callback: 52 callbacks suppressed
[  497.956175][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.960733][    C0] wdm_int_callback: 52 callbacks suppressed
[  497.960747][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.964788][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.967012][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.969350][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.971382][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.973287][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.975264][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.977430][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.979664][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.981822][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.983991][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.986136][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.988363][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.990504][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.992624][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  497.994775][    C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  497.996895][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  498.002931][    C0] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  498.009467][T15416] usb 6-1: USB disconnect, device number 53
[  498.012925][T15416] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  498.101851][T15416] wwan wwan0: port wwan0mbim0 disconnected
[  498.243225][T16146] FAULT_INJECTION: forcing a failure.
[  498.243225][T16146] name failslab, interval 1, probability 0, space 0, times 0
[  498.247431][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.3.2465 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.247451][T16146] Tainted: [L]=SOFTLOCKUP
[  498.247455][T16146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  498.247463][T16146] Call Trace:
[  498.247467][T16146]  <TASK>
[  498.247472][T16146]  dump_stack_lvl+0x100/0x190
[  498.247491][T16146]  should_fail_ex.cold+0x5/0xa
[  498.247505][T16146]  should_failslab+0xc2/0x120
[  498.247522][T16146]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  498.247539][T16146]  ? __get_vm_area_node+0x101/0x330
[  498.247559][T16146]  __get_vm_area_node+0x101/0x330
[  498.247577][T16146]  __vmalloc_node_range_noprof+0x228/0x1630
[  498.247598][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.247622][T16146]  ? find_held_lock+0x2b/0x80
[  498.247644][T16146]  ? process_measurement+0x4c8/0x2350
[  498.247686][T16146]  ? process_measurement+0x4c8/0x2350
[  498.247707][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.247736][T16146]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  498.247763][T16146]  ? tomoyo_check_open_permission+0x1db/0x3c0
[  498.247795][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.247819][T16146]  __vmalloc_node_noprof+0xad/0xf0
[  498.247843][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.247869][T16146]  __vmalloc_noprof+0xa3/0x120
[  498.247892][T16146]  ? __pfx___vmalloc_noprof+0x10/0x10
[  498.247920][T16146]  ? rcu_is_watching+0x12/0xc0
[  498.247942][T16146]  ? apparmor_capable+0x1d7/0x4d0
[  498.247964][T16146]  bpf_prog_alloc_no_stats+0x58/0x640
[  498.247984][T16146]  ? security_capable+0x80/0x260
[  498.248006][T16146]  bpf_prog_alloc+0x3b/0x200
[  498.248026][T16146]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.248065][T16146]  bpf_prog_load+0x4a9/0x2fa0
[  498.248111][T16146]  ? __pfx_bpf_prog_load+0x10/0x10
[  498.248132][T16146]  ? __lock_acquire+0x49f/0x1a40
[  498.248179][T16146]  __sys_bpf+0x18dc/0x4e80
[  498.248206][T16146]  ? __pfx___sys_bpf+0x10/0x10
[  498.248226][T16146]  ? find_held_lock+0x2b/0x80
[  498.248247][T16146]  ? get_pid_task+0xfc/0x250
[  498.248270][T16146]  ? get_pid_task+0xfc/0x250
[  498.248299][T16146]  ? proc_fail_nth_write+0x9f/0x220
[  498.248324][T16146]  ? find_held_lock+0x2b/0x80
[  498.248350][T16146]  ? rcu_read_lock_any_held+0x6a/0xa0
[  498.248372][T16146]  ? find_held_lock+0x2b/0x80
[  498.248390][T16146]  ? ksys_write+0x190/0x250
[  498.248405][T16146]  ? ksys_write+0x190/0x250
[  498.248435][T16146]  ? fput+0x79/0x100
[  498.248457][T16146]  ? __ia32_sys_bpf+0xcc/0x170
[  498.248475][T16146]  __ia32_sys_bpf+0xcc/0x170
[  498.248494][T16146]  ? __do_fast_syscall_32+0x98/0x970
[  498.248521][T16146]  __do_fast_syscall_32+0xe7/0x970
[  498.248544][T16146]  ? lockdep_hardirqs_on+0x78/0x100
[  498.248566][T16146]  do_fast_syscall_32+0x32/0x70
[  498.248587][T16146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  498.248608][T16146] RIP: 0023:0xf709efec
[  498.248628][T16146] Code: Unable to access opcode bytes at 0xf709efc2.
[  498.248635][T16146] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  498.248653][T16146] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0
[  498.248663][T16146] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  498.248675][T16146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  498.248684][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.248694][T16146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  498.248710][T16146]  </TASK>
[  498.248744][T16146] syz.3.2465: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  498.387532][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.3.2465 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  498.387560][T16146] Tainted: [L]=SOFTLOCKUP
[  498.387567][T16146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  498.387578][T16146] Call Trace:
[  498.387585][T16146]  <TASK>
[  498.387594][T16146]  dump_stack_lvl+0x100/0x190
[  498.387621][T16146]  warn_alloc.cold+0x94/0xa8
[  498.387643][T16146]  ? __pfx_warn_alloc+0x10/0x10
[  498.387663][T16146]  ? __kasan_kmalloc+0x8a/0xb0
[  498.387693][T16146]  ? __get_vm_area_node+0x208/0x330
[  498.387718][T16146]  __vmalloc_node_range_noprof+0xccd/0x1630
[  498.387746][T16146]  ? find_held_lock+0x2b/0x80
[  498.387766][T16146]  ? process_measurement+0x4c8/0x2350
[  498.387787][T16146]  ? process_measurement+0x4c8/0x2350
[  498.387810][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.387840][T16146]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  498.387866][T16146]  ? tomoyo_check_open_permission+0x1db/0x3c0
[  498.387900][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.387923][T16146]  __vmalloc_node_noprof+0xad/0xf0
[  498.387948][T16146]  ? bpf_prog_alloc_no_stats+0x58/0x640
[  498.387974][T16146]  __vmalloc_noprof+0xa3/0x120
[  498.387999][T16146]  ? __pfx___vmalloc_noprof+0x10/0x10
[  498.388027][T16146]  ? rcu_is_watching+0x12/0xc0
[  498.388049][T16146]  ? apparmor_capable+0x1d7/0x4d0
[  498.388071][T16146]  bpf_prog_alloc_no_stats+0x58/0x640
[  498.388093][T16146]  ? security_capable+0x80/0x260
[  498.388120][T16146]  bpf_prog_alloc+0x3b/0x200
[  498.388140][T16146]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  498.388168][T16146]  bpf_prog_load+0x4a9/0x2fa0
[  498.388193][T16146]  ? __pfx_bpf_prog_load+0x10/0x10
[  498.388212][T16146]  ? __lock_acquire+0x49f/0x1a40
[  498.388259][T16146]  __sys_bpf+0x18dc/0x4e80
[  498.388285][T16146]  ? __pfx___sys_bpf+0x10/0x10
[  498.388305][T16146]  ? find_held_lock+0x2b/0x80
[  498.388325][T16146]  ? get_pid_task+0xfc/0x250
[  498.388348][T16146]  ? get_pid_task+0xfc/0x250
[  498.388375][T16146]  ? proc_fail_nth_write+0x9f/0x220
[  498.388398][T16146]  ? find_held_lock+0x2b/0x80
[  498.388425][T16146]  ? rcu_read_lock_any_held+0x6a/0xa0
[  498.388446][T16146]  ? find_held_lock+0x2b/0x80
[  498.388465][T16146]  ? ksys_write+0x190/0x250
[  498.388483][T16146]  ? ksys_write+0x190/0x250
[  498.388518][T16146]  ? fput+0x79/0x100
[  498.388541][T16146]  ? __ia32_sys_bpf+0xcc/0x170
[  498.388559][T16146]  __ia32_sys_bpf+0xcc/0x170
[  498.388579][T16146]  ? __do_fast_syscall_32+0x98/0x970
[  498.388608][T16146]  __do_fast_syscall_32+0xe7/0x970
[  498.388631][T16146]  ? lockdep_hardirqs_on+0x78/0x100
[  498.388657][T16146]  do_fast_syscall_32+0x32/0x70
[  498.388682][T16146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  498.388706][T16146] RIP: 0023:0xf709efec
[  498.388730][T16146] Code: Unable to access opcode bytes at 0xf709efc2.
[  498.388739][T16146] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  498.388757][T16146] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0
[  498.388769][T16146] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  498.388779][T16146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  498.388790][T16146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  498.388800][T16146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  498.388824][T16146]  </TASK>
[  498.388831][T16146] Mem-Info:
[  498.524619][T16146] active_anon:6848 inactive_anon:7962 isolated_anon:0
[  498.524619][T16146]  active_file:2878 inactive_file:21029 isolated_file:0
[  498.524619][T16146]  unevictable:1768 dirty:491 writeback:0
[  498.524619][T16146]  slab_reclaimable:7644 slab_unreclaimable:71193
[  498.524619][T16146]  mapped:26879 shmem:5825 pagetables:1400
[  498.524619][T16146]  sec_pagetables:299 bounce:0
[  498.524619][T16146]  kernel_misc_reclaimable:0
[  498.524619][T16146]  free:33937 free_pcp:16598 free_cma:0
[  498.543169][T16146] Node 0 active_anon:60kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8544kB pagetables:1396kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  498.556294][T16146] Node 1 active_anon:27360kB inactive_anon:31832kB active_file:11512kB inactive_file:84116kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:107072kB dirty:1972kB writeback:0kB shmem:21764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:20480kB kernel_stack:5504kB pagetables:4248kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  498.572294][T16146] Node 0 DMA free:2012kB boost:0kB min:744kB low:928kB high:1112kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:764kB local_pcp:300kB free_cma:0kB
[  498.585125][T16146] lowmem_reserve[]: 0 280 280 280 280
[  498.587583][T16146] Node 0 DMA32 free:15196kB boost:0kB min:13920kB low:17400kB high:20880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:16208kB local_pcp:4756kB free_cma:0kB
[  498.600286][T16146] lowmem_reserve[]: 0 0 0 0 0
[  498.602332][T16146] Node 1 DMA32 free:119856kB boost:0kB min:46012kB low:57512kB high:69012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27224kB inactive_anon:31832kB active_file:11512kB inactive_file:84116kB unevictable:5536kB writepending:1972kB zspages:2180kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:48160kB local_pcp:25620kB free_cma:0kB
[  498.618148][T16146] lowmem_reserve[]: 0 0 0 0 0
[  498.622612][T16146] Node 0 DMA: 139*4kB (UM) 24*8kB (UM) 9*16kB (UM) 3*32kB (UM) 8*64kB (U) 2*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2012kB
[  498.629166][T16146] Node 0 DMA32: 141*4kB (UE) 53*8kB (UME) 28*16kB (UME) 30*32kB (UME) 44*64kB (UME) 24*128kB (UME) 5*256kB (UME) 3*512kB (M) 4*1024kB (UM) 0*2048kB 0*4096kB = 15196kB
[  498.636299][T16146] Node 1 DMA32: 956*4kB (UM) 517*8kB (UME) 182*16kB (UME) 219*32kB (UME) 254*64kB (UME) 124*128kB (UME) 69*256kB (UME) 19*512kB (UME) 14*1024kB (UM) 6*2048kB (M) 4*4096kB (UM) = 120408kB
[  498.644313][T16146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  498.649270][T16146] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  498.653229][T16146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  498.657289][T16146] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  498.661253][T16146] 30127 total pagecache pages
[  498.663263][T16146] 398 pages in swap cache
[  498.665120][T16146] Free swap  = 114160kB
[  498.667084][T16146] Total swap = 124996kB
[  498.668867][T16146] 524155 pages RAM
[  498.670504][T16146] 0 pages HighMem/MovableOnly
[  498.672503][T16146] 211540 pages reserved
[  498.674281][T16146] 0 pages cma reserved
[  498.857097][ T5754] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  499.097000][ T5754] usb 6-1: Using ep0 maxpacket: 8
[  499.512668][ T5754] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  499.515334][ T5754] usb 6-1: config 0 has no interface number 0
[  499.517357][ T5754] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  499.520761][ T5754] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  499.524366][ T5754] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  499.527879][ T5754] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  499.990029][ T5754] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  499.993854][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.998849][ T5754] usb 6-1: config 0 descriptor??
[  500.003155][ T5754] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  500.871024][T16171] netlink: 'syz.1.2466': attribute type 1 has an invalid length.
[  500.923397][   T24] usb 6-1: USB disconnect, device number 54
[  500.923421][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  501.098381][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  501.100472][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  501.738913][T16180] dvmrp8: entered allmulticast mode
[  501.783495][T16180] binder: 16179:16180 ioctl c0306201 80000680 returned -14
[  501.858391][T16186] serio: Serial port ptm0
[  501.865008][ T5799] dvmrp8: left allmulticast mode
[  501.965244][T16189] fuse: Bad value for 'fd'
[  502.471446][   T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  502.710791][T16196] binder: 16192:16196 ioctl c0306201 80000680 returned -14
[  502.874601][T16200] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  502.877621][T16200] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2474'.
[  502.881017][T16200] FAULT_INJECTION: forcing a failure.
[  502.881017][T16200] name failslab, interval 1, probability 0, space 0, times 0
[  502.885951][T16200] CPU: 0 UID: 0 PID: 16200 Comm: syz.1.2474 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.885977][T16200] Tainted: [L]=SOFTLOCKUP
[  502.885984][T16200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  502.885994][T16200] Call Trace:
[  502.886001][T16200]  <TASK>
[  502.886008][T16200]  dump_stack_lvl+0x100/0x190
[  502.886036][T16200]  should_fail_ex.cold+0x5/0xa
[  502.886056][T16200]  should_failslab+0xc2/0x120
[  502.886080][T16200]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  502.886103][T16200]  ? __alloc_skb+0x140/0x710
[  502.886131][T16200]  __alloc_skb+0x140/0x710
[  502.886152][T16200]  ? __alloc_skb+0x5b7/0x710
[  502.886172][T16200]  ? __pfx___alloc_skb+0x10/0x10
[  502.886193][T16200]  ? genl_rcv_msg+0x4be/0x800
[  502.886221][T16200]  netlink_ack+0x117/0xb80
[  502.886242][T16200]  ? __lock_acquire+0x49f/0x1a40
[  502.886273][T16200]  netlink_rcv_skb+0x333/0x420
[  502.886291][T16200]  ? __pfx_genl_rcv_msg+0x10/0x10
[  502.886313][T16200]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  502.886340][T16200]  ? netlink_deliver_tap+0x1ae/0xcc0
[  502.886361][T16200]  genl_rcv+0x28/0x40
[  502.886380][T16200]  netlink_unicast+0x585/0x850
[  502.886402][T16200]  ? __pfx_netlink_unicast+0x10/0x10
[  502.886427][T16200]  netlink_sendmsg+0x8b0/0xda0
[  502.886450][T16200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.886473][T16200]  ? apparmor_socket_sendmsg+0x15b/0x270
[  502.886495][T16200]  ____sys_sendmsg+0xa4d/0xbe0
[  502.886513][T16200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.886534][T16200]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.886561][T16200]  ___sys_sendmsg+0x190/0x1e0
[  502.886582][T16200]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.886612][T16200]  ? find_held_lock+0x2b/0x80
[  502.886647][T16200]  __sys_sendmsg+0x160/0x210
[  502.886671][T16200]  ? __pfx___sys_sendmsg+0x10/0x10
[  502.886702][T16200]  ? __pfx_ksys_write+0x10/0x10
[  502.886724][T16200]  __do_fast_syscall_32+0xe7/0x970
[  502.886747][T16200]  ? lockdep_hardirqs_on+0x78/0x100
[  502.886776][T16200]  do_fast_syscall_32+0x32/0x70
[  502.886799][T16200]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  502.886821][T16200] RIP: 0023:0xf6fdefec
[  502.886843][T16200] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  502.886851][T16200] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  502.886868][T16200] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800001c0
[  502.886880][T16200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  502.886889][T16200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  502.886899][T16200] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  502.886909][T16200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  502.886946][T16200]  </TASK>
[  503.372835][T16206] tmpfs: Bad value for 'huge'
[  503.376326][T16206] netlink: 'syz.1.2476': attribute type 3 has an invalid length.
[  503.381959][T16206] netlink: 'syz.1.2476': attribute type 3 has an invalid length.
[  503.637027][T15416] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  503.797067][T15416] usb 7-1: Using ep0 maxpacket: 16
[  503.800443][T15416] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  503.979792][T15416] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  503.982799][T15416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.985342][T15416] usb 7-1: Product: syz
[  503.986706][T15416] usb 7-1: Manufacturer: syz
[  503.988309][T15416] usb 7-1: SerialNumber: syz
[  503.993227][T15416] usb 7-1: config 0 descriptor??
[  503.998492][T15416] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  504.002700][T15416] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  504.209067][T16231] fuse: Bad value for 'rootmode'
[  504.447433][ T8761] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  504.597064][ T8761] usb 6-1: Using ep0 maxpacket: 16
[  504.600580][ T8761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  504.605816][ T8761] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  504.605864][T15416] em28xx 7-1:0.0: chip ID is em2765
[  504.609621][ T8761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.614008][ T8761] usb 6-1: Product: syz
[  504.615505][ T8761] usb 6-1: Manufacturer: syz
[  504.617379][ T8761] usb 6-1: SerialNumber: syz
[  504.620910][ T8761] usb 6-1: config 0 descriptor??
[  504.625779][ T8761] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  504.629360][ T8761] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  505.218643][T15416] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  505.227032][T15416] em28xx 7-1:0.0: board has no eeprom
[  505.233775][ T8761] em28xx 6-1:0.0: chip ID is em2765
[  505.507027][T15416] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  505.509854][T15416] em28xx 7-1:0.0: dvb set to bulk mode.
[  505.520169][ T5754] em28xx 7-1:0.0: Binding DVB extension
[  505.528237][T15416] usb 7-1: USB disconnect, device number 51
[  505.534344][T15416] em28xx 7-1:0.0: Disconnecting em28xx
[  505.680059][ T5754] em28xx 7-1:0.0: Registering input extension
[  505.683749][T15416] em28xx 7-1:0.0: Closing input extension
[  505.725251][T15416] em28xx 7-1:0.0: Freeing device
[  505.730346][T15227] udevd[15227]: setting mode of /dev/bus/usb/007/051 to 020664 failed: No such file or directory
[  505.734540][T15227] udevd[15227]: setting owner of /dev/bus/usb/007/051 to uid=0, gid=0 failed: No such file or directory
[  505.847424][ T8761] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  505.850920][ T8761] em28xx 6-1:0.0: board has no eeprom
[  506.060148][T16233] Cache volume key already in use (9p,syz,)
[  506.139498][ T8761] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  506.144423][ T8761] em28xx 6-1:0.0: dvb set to bulk mode.
[  506.148914][   T24] em28xx 6-1:0.0: Binding DVB extension
[  506.156860][ T8761] usb 6-1: USB disconnect, device number 55
[  506.160535][ T8761] em28xx 6-1:0.0: Disconnecting em28xx
[  506.198050][   T24] em28xx 6-1:0.0: Registering input extension
[  506.200207][ T8761] em28xx 6-1:0.0: Closing input extension
[  506.215697][ T8761] em28xx 6-1:0.0: Freeing device
[  506.899018][T16249] fuse: Bad value for 'fd'
[  508.559653][   T41] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  508.779022][   T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.786574][   T41] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  508.793434][   T41] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  508.799570][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.807390][   T41] usb 6-1: Product: syz
[  508.809130][   T41] usb 6-1: Manufacturer: syz
[  508.811042][   T41] usb 6-1: SerialNumber: syz
[  508.837562][   T41] cdc_mbim 6-1:1.0: skipping garbage
[  509.070151][T16261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  509.256147][T16272] netlink: 'syz.0.2491': attribute type 8 has an invalid length.
[  509.290870][T16261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.302150][T16261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.725956][T16261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  509.737501][   T41] cdc_mbim 6-1:1.0: setting tx_max = 16384
[  509.740517][   T41] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  509.744548][   T41] wwan wwan0: port wwan0mbim0 attached
[  509.750997][   T41] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 5a:17:60:8c:ea:5c
[  509.944056][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.946238][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.948489][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.950611][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.952722][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.954834][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.956981][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.959355][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.961514][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.963646][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.965807][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.968098][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.970724][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.973174][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.975342][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.977473][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.979715][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.981832][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.984014][    C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71
[  509.986152][    C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes
[  509.994914][   T41] usb 6-1: USB disconnect, device number 56
[  509.997799][   T41] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  510.023703][ T5460] 8021q: adding VLAN 0 to HW filter on device wwan0
[  510.127479][   T41] wwan wwan0: port wwan0mbim0 disconnected
[  510.417083][ T8761] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  510.569725][ T8761] usb 5-1: Using ep0 maxpacket: 16
[  510.665556][ T8761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  510.671705][ T8761] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  510.674726][ T8761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.677444][ T8761] usb 5-1: Product: syz
[  510.679194][ T8761] usb 5-1: Manufacturer: syz
[  510.680636][ T8761] usb 5-1: SerialNumber: syz
[  510.683776][ T8761] usb 5-1: config 0 descriptor??
[  510.687940][ T8761] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  510.690712][ T8761] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  511.673243][ T8761] em28xx 5-1:0.0: chip ID is em2765
[  512.165900][ T8761] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  512.764956][ T8761] em28xx 5-1:0.0: board has no eeprom
[  513.067104][ T8761] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  513.107549][ T6689] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  513.262589][ T6689] usb 8-1: Using ep0 maxpacket: 16
[  513.282985][ T6689] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  513.322354][ T6689] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  513.344391][ T6689] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.350994][ T6689] usb 8-1: Product: syz
[  513.356644][ T6689] usb 8-1: Manufacturer: syz
[  513.363056][ T6689] usb 8-1: SerialNumber: syz
[  513.393759][ T6689] usb 8-1: config 0 descriptor??
[  513.448530][ T6689] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  513.456328][ T6689] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  513.563327][ T8761] em28xx 5-1:0.0: dvb set to bulk mode.
[  513.582615][  T846] em28xx 5-1:0.0: Binding DVB extension
[  513.590750][ T8761] usb 5-1: USB disconnect, device number 54
[  513.593554][ T8761] em28xx 5-1:0.0: Disconnecting em28xx
[  513.612506][  T846] em28xx 5-1:0.0: Registering input extension
[  513.615926][ T8761] em28xx 5-1:0.0: Closing input extension
[  513.628883][ T8761] em28xx 5-1:0.0: Freeing device
[  513.764369][T16347] fuse: Bad value for 'fd'
[  514.029401][ T6689] em28xx 8-1:0.0: chip ID is em2765
[  514.606977][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[  514.880560][ T6689] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  515.344400][ T6689] em28xx 8-1:0.0: board has no eeprom
[  515.617023][ T6689] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  515.619800][ T6689] em28xx 8-1:0.0: dvb set to bulk mode.
[  515.622028][   T41] em28xx 8-1:0.0: Binding DVB extension
[  515.654657][ T6689] usb 8-1: USB disconnect, device number 43
[  515.686426][ T6689] em28xx 8-1:0.0: Disconnecting em28xx
[  515.765137][   T41] em28xx 8-1:0.0: Registering input extension
[  515.774438][ T6689] em28xx 8-1:0.0: Closing input extension
[  515.897488][ T6689] em28xx 8-1:0.0: Freeing device
[  516.798913][T14688] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  516.817464][T14688] Bluetooth: hci1: Injecting HCI hardware error event
[  516.838146][T14688] Bluetooth: hci1: hardware error 0x00
[  518.014345][T16388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2519'.
[  518.361802][T16398] fuse: Bad value for 'fd'
[  518.677096][ T5754] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  518.827075][ T5754] usb 6-1: Using ep0 maxpacket: 16
[  518.830529][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  518.835720][ T5754] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  518.839094][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.841832][ T5754] usb 6-1: Product: syz
[  518.843338][ T5754] usb 6-1: Manufacturer: syz
[  518.845051][ T5754] usb 6-1: SerialNumber: syz
[  518.849677][ T5754] usb 6-1: config 0 descriptor??
[  518.856366][ T5754] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  518.859706][ T5754] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  519.008251][T14688] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  519.535863][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'.
[  519.586633][ T5754] em28xx 6-1:0.0: chip ID is em2765
[  519.849302][ T6689] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  519.909204][T16425] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  519.997083][ T6689] usb 5-1: Using ep0 maxpacket: 8
[  520.002557][ T6689] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  520.007897][ T6689] usb 5-1: config 0 has no interface number 0
[  520.012050][ T6689] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  520.016668][ T6689] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  520.021730][ T6689] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  520.026276][ T6689] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  520.031925][ T6689] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  520.035716][ T6689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.041780][ T6689] usb 5-1: config 0 descriptor??
[  520.053560][ T6689] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  520.117300][T15475] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  520.191450][ T5754] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  520.194832][ T5754] em28xx 6-1:0.0: board has no eeprom
[  520.269472][T15475] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  520.272331][T15475] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.275584][T15475] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  520.278751][T15475] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.284432][T15475] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  520.287812][T15475] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  520.290507][T15475] usb 7-1: Product: syz
[  520.291915][T15475] usb 7-1: Manufacturer: syz
[  520.308189][T15475] cdc_wdm 7-1:1.0: skipping garbage
[  520.310535][T15475] cdc_wdm 7-1:1.0: skipping garbage
[  520.317991][T15475] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[  520.321182][T15475] cdc_wdm 7-1:1.0: Unknown control protocol
[  520.491170][T16427] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  520.496645][T16361] usb 5-1: USB disconnect, device number 55
[  520.496726][    C3] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  520.497217][ T5754] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  520.497235][ T5754] em28xx 6-1:0.0: dvb set to bulk mode.
[  520.497271][    T9] em28xx 6-1:0.0: Binding DVB extension
[  520.514192][T16424] ld_usb_open - error, can't find device for minor 0
[  520.514361][ T5754] usb 6-1: USB disconnect, device number 57
[  520.524571][ T5754] em28xx 6-1:0.0: Disconnecting em28xx
[  520.525553][T16424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.534805][T16424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.545464][    T9] em28xx 6-1:0.0: Registering input extension
[  520.553071][ T5754] em28xx 6-1:0.0: Closing input extension
[  520.582275][ T5754] em28xx 6-1:0.0: Freeing device
[  520.642574][T16424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.666900][T16432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.682005][T16432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.804782][T16424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.876844][T16424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.956029][T16424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.158120][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.187072][ T5799] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.191842][ T5799] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.196626][ T5754] usb 7-1: USB disconnect, device number 52
[  521.198756][ T5799] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.775795][T16437] fuse: Unknown parameter 'user_i00000000000000000000'
[  522.593663][T16361] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  523.974729][T16452] fuse: Invalid rootmode
[  524.031244][T16454] tmpfs: Bad value for 'huge'
[  524.043922][T16454] netlink: 'syz.2.2535': attribute type 3 has an invalid length.
[  524.047250][T16454] netlink: 'syz.2.2535': attribute type 3 has an invalid length.
[  525.277555][T16472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2539'.
[  525.325526][T16473] fuse: Unknown parameter 'user_i00000000000000000000'
[  525.443274][T16479] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  525.707066][ T5754] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  525.771142][T16486] tipc: Started in network mode
[  525.772834][T16486] tipc: Node identity 4, cluster identity 4711
[  525.774927][T16486] tipc: Node number set to 4
[  525.867161][ T5754] usb 8-1: Using ep0 maxpacket: 16
[  525.874420][ T5754] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  525.882128][ T5754] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  525.886105][ T5754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.889981][ T5754] usb 8-1: Product: syz
[  525.892038][ T5754] usb 8-1: Manufacturer: syz
[  525.894420][ T5754] usb 8-1: SerialNumber: syz
[  525.900658][ T5754] usb 8-1: config 0 descriptor??
[  525.911174][ T5754] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  525.915053][ T5754] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  526.523947][ T5754] em28xx 8-1:0.0: chip ID is em2765
[  526.808176][T16494] tmpfs: Bad value for 'huge'
[  526.813986][T16494] netlink: 'syz.1.2545': attribute type 3 has an invalid length.
[  526.818247][T16494] netlink: 'syz.1.2545': attribute type 3 has an invalid length.
[  526.932350][T16502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  526.935160][T16502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  526.940374][T16502] vhci_hcd vhci_hcd.0: Device attached
[  527.237039][T15416] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  527.277036][ T5754] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  527.484925][ T5754] em28xx 8-1:0.0: board has no eeprom
[  527.830873][T16510] fuse: Invalid rootmode
[  527.869277][ T5754] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  527.872815][ T5754] em28xx 8-1:0.0: dvb set to bulk mode.
[  527.881231][    T9] em28xx 8-1:0.0: Binding DVB extension
[  527.908494][ T5754] usb 8-1: USB disconnect, device number 44
[  527.922275][ T5754] em28xx 8-1:0.0: Disconnecting em28xx
[  527.928175][    T9] em28xx 8-1:0.0: Registering input extension
[  527.948371][ T5754] em28xx 8-1:0.0: Closing input extension
[  527.983146][ T5754] em28xx 8-1:0.0: Freeing device
[  528.254023][T16503] vhci_hcd: connection reset by peer
[  528.257070][T14129] vhci_hcd vhci_hcd.1: stop threads
[  528.261737][T14129] vhci_hcd vhci_hcd.1: release socket
[  528.267141][T14129] vhci_hcd vhci_hcd.1: disconnect device
[  528.385246][T16515] netlink: 'syz.1.2549': attribute type 4 has an invalid length.
[  528.432794][T16515] netlink: 'syz.1.2549': attribute type 4 has an invalid length.
[  529.696698][T16521] fuse: Unknown parameter 'user_i00000000000000000000'
[  529.703515][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2551'.
[  530.206705][T16534] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  531.905360][ T5799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.205781][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  532.227292][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  532.239301][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  532.251264][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  532.272242][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  532.456661][ T5799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.609022][T15416] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  532.836063][ T5799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.015129][ T5799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.420010][ T5799] bridge_slave_1: left allmulticast mode
[  533.430091][ T5799] bridge_slave_1: left promiscuous mode
[  533.436126][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.453886][ T5799] bridge_slave_0: left allmulticast mode
[  533.463483][ T5799] bridge_slave_0: left promiscuous mode
[  533.471881][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.858950][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2564'.
[  533.895421][ T5799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.904843][ T5799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.910272][ T5799] bond0 (unregistering): Released all slaves
[  534.008431][ T5799] tipc: Left network mode
[  534.020848][T16578] fuse: Unknown parameter 'user_id00000000000000000000'
[  534.285480][ T5460] 8021q: adding VLAN 0 to HW filter on device eth1
[  534.358237][ T5799] hsr_slave_0: left promiscuous mode
[  534.366532][ T5799] hsr_slave_1: left promiscuous mode
[  534.369424][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.371915][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.386733][ T5799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.389538][ T5799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.400773][ T5799] veth1_macvtap: left promiscuous mode
[  534.402719][ T5799] veth0_macvtap: left promiscuous mode
[  534.404938][ T5799] veth1_vlan: left promiscuous mode
[  534.408211][ T5799] veth0_vlan: left promiscuous mode
[  534.449346][T14688] Bluetooth: hci2: command tx timeout
[  534.590386][ T5799] team0 (unregistering): Port device team_slave_1 removed
[  534.603502][ T5799] team0 (unregistering): Port device team_slave_0 removed
[  534.788533][ T5754] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  535.158478][ T5754] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.234862][ T5754] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  535.241686][ T5754] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  535.244759][ T5754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.247840][ T5754] usb 8-1: Product: syz
[  535.249218][ T5754] usb 8-1: Manufacturer: syz
[  535.250747][ T5754] usb 8-1: SerialNumber: syz
[  535.255487][ T5754] cdc_mbim 8-1:1.0: skipping garbage
[  535.421060][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2
[  535.455153][T16551] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.466535][T16551] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.474027][T16551] bridge_slave_0: entered allmulticast mode
[  535.482540][T16588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  535.486906][T16551] bridge_slave_0: entered promiscuous mode
[  535.500432][T16551] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.505205][T16551] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.508685][T16551] bridge_slave_1: entered allmulticast mode
[  535.511985][T16551] bridge_slave_1: entered promiscuous mode
[  535.542755][T16551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.553435][T16551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.637878][T16551] team0: Port device team_slave_0 added
[  535.651778][T16551] team0: Port device team_slave_1 added
[  535.694682][T16588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.713866][T16588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.788970][T16551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.795361][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.820672][T16551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.840428][T16551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.847089][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.880199][T16551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.104093][T16551] hsr_slave_0: entered promiscuous mode
[  536.118502][T16551] hsr_slave_1: entered promiscuous mode
[  536.153393][T16588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  536.173342][ T5754] cdc_mbim 8-1:1.0: setting tx_max = 16384
[  536.560954][T14688] Bluetooth: hci2: command tx timeout
[  536.602212][ T5754] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  536.844096][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3
[  537.195922][ T5754] wwan wwan0: port wwan0mbim0 attached
[  537.230488][ T5754] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7e:15:9c:42:98:11
[  537.248672][ T5754] usb 8-1: USB disconnect, device number 45
[  537.254917][ T5754] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  537.459954][ T5460] 8021q: adding VLAN 0 to HW filter on device eth4
[  537.554079][T16635] tmpfs: Bad value for 'huge'
[  537.558941][T16635] netlink: 'syz.2.2573': attribute type 3 has an invalid length.
[  537.562478][T16635] netlink: 'syz.2.2573': attribute type 3 has an invalid length.
[  537.565547][ T5754] wwan wwan0: port wwan0mbim0 disconnected
[  538.127339][T16551] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  538.157662][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  538.170337][T16551] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  538.205114][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  538.264464][T16551] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  538.301510][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  538.311371][T16551] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  538.319820][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  538.482851][T16551] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.500728][T16551] 8021q: adding VLAN 0 to HW filter on device team0
[  538.509339][  T664] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.512205][  T664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.541252][  T664] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.544099][  T664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.607157][T14688] Bluetooth: hci2: command tx timeout
[  539.176399][T16551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.410395][T16551] veth0_vlan: entered promiscuous mode
[  539.415868][T16551] veth1_vlan: entered promiscuous mode
[  539.435200][T16551] veth0_macvtap: entered promiscuous mode
[  539.444697][T16551] veth1_macvtap: entered promiscuous mode
[  539.461551][T16551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.489903][T16551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.635872][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.701044][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.018401][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.066273][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.382759][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.385295][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.415085][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.421351][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.673921][T16696] fuse: Invalid rootmode
[  540.697420][T14688] Bluetooth: hci2: command tx timeout
[  540.947401][T16698] tmpfs: Bad value for 'huge'
[  540.965239][T16698] netlink: 'syz.3.2578': attribute type 3 has an invalid length.
[  540.967952][T16698] netlink: 'syz.3.2578': attribute type 3 has an invalid length.
[  541.111452][T16711] tmpfs: Bad value for 'huge'
[  541.119939][T16711] netlink: 'syz.3.2581': attribute type 3 has an invalid length.
[  541.130929][T16711] netlink: 'syz.3.2581': attribute type 3 has an invalid length.
[  541.817279][   T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  542.058768][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  542.064253][   T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  542.074170][   T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  542.086613][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  542.090644][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  542.227630][   T10] usb 7-1: Product: syz
[  542.229502][   T10] usb 7-1: Manufacturer: syz
[  542.426459][   T10] usb 7-1: SerialNumber: syz
[  542.691487][   T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  542.962613][  T846] usb 7-1: USB disconnect, device number 53
[  543.010851][  T846] usblp0: removed
[  543.759860][T16754] tmpfs: Bad value for 'huge'
[  543.775234][T16754] netlink: 'syz.2.2591': attribute type 3 has an invalid length.
[  543.782418][T16754] netlink: 'syz.2.2591': attribute type 3 has an invalid length.
[  544.274491][T16764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  544.277295][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  544.300127][T16764] vhci_hcd vhci_hcd.0: Device attached
[  544.711223][   T10] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  545.682226][T16766] vhci_hcd: connection reset by peer
[  545.686553][ T5827] vhci_hcd vhci_hcd.4: stop threads
[  545.688371][ T5827] vhci_hcd vhci_hcd.4: release socket
[  545.690709][ T5827] vhci_hcd vhci_hcd.4: disconnect device
[  545.819083][T16785] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2597'.
[  545.827916][T16785] gretap0: entered promiscuous mode
[  546.333768][T16791] tmpfs: Bad value for 'huge'
[  546.338284][T16791] netlink: 'syz.4.2600': attribute type 3 has an invalid length.
[  546.346494][T16791] netlink: 'syz.4.2600': attribute type 3 has an invalid length.
[  547.571866][T16807] fuse: Bad value for 'rootmode'
[  550.137480][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  554.650258][T16892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  554.652343][T16892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  554.663081][T16892] vhci_hcd vhci_hcd.0: Device attached
[  554.907282][ T5754] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  554.942624][T16896] fuse: Bad value for 'rootmode'
[  555.136490][T16904] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  556.105937][T16894] vhci_hcd: connection reset by peer
[  556.107051][  T846] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  556.120986][   T13] vhci_hcd vhci_hcd.2: stop threads
[  556.122811][   T13] vhci_hcd vhci_hcd.2: release socket
[  556.124904][   T13] vhci_hcd vhci_hcd.2: disconnect device
[  556.155800][T16913] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  556.297193][  T846] usb 5-1: Using ep0 maxpacket: 16
[  556.304998][  T846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  556.310816][  T846] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  556.313943][  T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.316517][  T846] usb 5-1: Product: syz
[  556.318435][  T846] usb 5-1: Manufacturer: syz
[  556.320058][  T846] usb 5-1: SerialNumber: syz
[  556.325345][  T846] usb 5-1: config 0 descriptor??
[  556.334753][  T846] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  556.345889][  T846] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  556.464992][T16924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.947898][  T846] em28xx 5-1:0.0: chip ID is em2765
[  557.427350][   T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  557.555482][  T846] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  557.560170][  T846] em28xx 5-1:0.0: board has no eeprom
[  557.577028][   T24] usb 7-1: Using ep0 maxpacket: 32
[  557.580229][   T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  557.583088][   T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  557.585802][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  557.589062][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  557.592276][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  557.595576][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  557.600103][   T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  557.603940][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.608608][   T24] usb 7-1: config 0 descriptor??
[  557.820837][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2627'.
[  557.826298][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.831744][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.857074][  T846] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  557.862479][  T846] em28xx 5-1:0.0: dvb set to bulk mode.
[  557.866067][ T8761] em28xx 5-1:0.0: Binding DVB extension
[  557.943750][  T846] usb 5-1: USB disconnect, device number 56
[  557.961177][ T8761] em28xx 5-1:0.0: Registering input extension
[  558.003893][  T846] em28xx 5-1:0.0: Disconnecting em28xx
[  558.006340][  T846] em28xx 5-1:0.0: Closing input extension
[  558.052287][  T846] em28xx 5-1:0.0: Freeing device
[  558.057416][T16932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  558.060247][T16932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  558.071561][T16932] vhci_hcd vhci_hcd.0: Device attached
[  558.317686][   T41] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  558.891646][   T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  559.430620][   T24] usb 7-1: USB disconnect, device number 54
[  559.453252][   T24] usblp0: removed
[  559.482979][T16933] vhci_hcd: connection reset by peer
[  559.490343][ T5799] vhci_hcd vhci_hcd.3: stop threads
[  559.492623][ T5799] vhci_hcd vhci_hcd.3: release socket
[  559.517596][ T5799] vhci_hcd vhci_hcd.3: disconnect device
[  560.124612][ T5898] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  560.297065][ T5754] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  560.319739][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.397183][ T5898] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  560.438905][ T5898] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  560.441909][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.446539][ T5898] usb 7-1: Product: syz
[  560.451123][ T5898] usb 7-1: Manufacturer: syz
[  560.461094][ T5898] usb 7-1: SerialNumber: syz
[  560.480383][ T5898] cdc_mbim 7-1:1.0: skipping garbage
[  560.693431][T16954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  560.936726][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.956219][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.444771][T16954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  561.462155][ T5898] cdc_mbim 7-1:1.0: setting tx_max = 16384
[  561.484496][ T5898] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  561.523290][ T5898] wwan wwan0: port wwan0mbim0 attached
[  561.598411][ T5898] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 1a:07:4f:2d:8e:36
[  561.663069][    C2] wdm_int_callback: 19 callbacks suppressed
[  561.663086][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.667103][    C2] wdm_int_callback: 19 callbacks suppressed
[  561.667113][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.671178][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.673278][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.675424][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.677668][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.679780][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.681896][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.684020][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.686120][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.688257][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.690343][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.692529][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.694635][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.696759][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.698874][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.701002][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.703096][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.705246][    C2] cdc_mbim 7-1:1.0: nonzero urb status received: -71
[  561.707382][    C2] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes
[  561.713702][ T5898] usb 7-1: USB disconnect, device number 55
[  561.716276][ T5898] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  561.779974][ T5898] wwan wwan0: port wwan0mbim0 disconnected
[  562.358752][T16992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  562.360865][T16992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  562.375602][T16992] vhci_hcd vhci_hcd.0: Device attached
[  562.529323][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  562.531854][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  562.627126][ T5858] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  563.237462][ T5898] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  563.444253][ T5898] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.449218][ T5898] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  563.461393][ T5898] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  563.464676][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.467255][ T5898] usb 8-1: Product: syz
[  563.468686][ T5898] usb 8-1: Manufacturer: syz
[  563.470475][ T5898] usb 8-1: SerialNumber: syz
[  563.955610][   T41] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  563.970988][T16993] vhci_hcd: connection reset by peer
[  563.977924][ T5898] cdc_mbim 8-1:1.0: skipping garbage
[  563.978232][ T5799] vhci_hcd vhci_hcd.0: stop threads
[  563.993165][ T5799] vhci_hcd vhci_hcd.0: release socket
[  563.997110][ T5799] vhci_hcd vhci_hcd.0: disconnect device
[  564.108024][T17009] netlink: 'syz.2.2645': attribute type 21 has an invalid length.
[  564.116529][T17009] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2645'.
[  564.126377][T17009] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2645'.
[  564.189953][T17004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  564.458250][T17004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.467658][T17004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.076400][T17017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  565.093856][ T5898] cdc_mbim 8-1:1.0: setting tx_max = 16384
[  565.096810][ T5898] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device
[  565.102166][ T5898] wwan wwan0: port wwan0mbim0 attached
[  565.108335][ T5898] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, f2:66:b3:90:4a:0d
[  565.290108][ T5754] usb 8-1: USB disconnect, device number 46
[  565.315264][ T5754] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  565.573144][ T5754] wwan wwan0: port wwan0mbim0 disconnected
[  565.824298][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.843519][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.860640][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.874074][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.075702][T17059] overlayfs: conflicting lowerdir path
[  567.997812][ T5858] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  568.450404][   T64] Bluetooth: hci2: command 0x0405 tx timeout
[  568.889919][T17079] ==================================================================
[  568.892872][T17079] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.895738][T17079] Free of addr ffff88801310b60c by task syz.2.2660/17079
[  568.898286][T17079] 
[  568.899231][T17079] CPU: 3 UID: 0 PID: 17079 Comm: syz.2.2660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  568.899258][T17079] Tainted: [L]=SOFTLOCKUP
[  568.899271][T17079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  568.899286][T17079] Call Trace:
[  568.899295][T17079]  <TASK>
[  568.899301][T17079]  dump_stack_lvl+0x100/0x190
[  568.899324][T17079]  print_report+0x13d/0x4b0
[  568.899350][T17079]  ? __virt_addr_valid+0x239/0x430
[  568.899371][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.899400][T17079]  kasan_report_invalid_free+0xb8/0x190
[  568.899424][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.899448][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.899471][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.899493][T17079]  check_slab_allocation+0xe1/0xf0
[  568.899511][T17079]  ? f_uac2_opts_p_srate_store+0x100/0x260
[  568.899533][T17079]  kfree+0x1b6/0x6c0
[  568.899547][T17079]  ? __asan_memcpy+0x3c/0x60
[  568.899564][T17079]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  568.899587][T17079]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  568.899612][T17079]  ? configfs_write_iter+0x388/0x4e0
[  568.899630][T17079]  configfs_write_iter+0x302/0x4e0
[  568.899645][T17079]  vfs_write+0x6ac/0x1050
[  568.899660][T17079]  ? __pfx_configfs_write_iter+0x10/0x10
[  568.899674][T17079]  ? __pfx_vfs_write+0x10/0x10
[  568.899687][T17079]  ? find_held_lock+0x2b/0x80
[  568.899711][T17079]  ksys_write+0x12a/0x250
[  568.899724][T17079]  ? __pfx_ksys_write+0x10/0x10
[  568.899740][T17079]  __do_fast_syscall_32+0xe7/0x970
[  568.899763][T17079]  do_fast_syscall_32+0x32/0x70
[  568.899783][T17079]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  568.899802][T17079] RIP: 0023:0xf70aefec
[  568.899821][T17079] Code: Unable to access opcode bytes at 0xf70aefc2.
[  568.899829][T17079] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  568.899846][T17079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[  568.899859][T17079] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  568.899871][T17079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  568.899881][T17079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  568.899890][T17079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  568.899904][T17079]  </TASK>
[  568.899909][T17079] 
[  568.980793][T17079] Allocated by task 17079:
[  568.982439][T17079]  kasan_save_stack+0x30/0x50
[  568.984170][T17079]  kasan_save_track+0x14/0x30
[  568.985895][T17079]  __kasan_kmalloc+0xaa/0xb0
[  568.987567][T17079]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  568.989876][T17079]  kstrdup+0x51/0xe0
[  568.991304][T17079]  f_uac2_opts_p_srate_store+0x113/0x260
[  568.993337][T17079]  configfs_write_iter+0x302/0x4e0
[  568.995188][T17079]  vfs_write+0x6ac/0x1050
[  568.996759][T17079]  ksys_write+0x12a/0x250
[  568.998383][T17079]  __do_fast_syscall_32+0xe7/0x970
[  569.000225][T17079]  do_fast_syscall_32+0x32/0x70
[  569.001997][T17079]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  569.004316][T17079] 
[  569.005191][T17079] The buggy address belongs to the object at ffff88801310b600
[  569.005191][T17079]  which belongs to the cache kmalloc-64 of size 64
[  569.010076][T17079] The buggy address is located 12 bytes inside of
[  569.010076][T17079]  47-byte region [ffff88801310b600, ffff88801310b62f)
[  569.014639][T17079] 
[  569.015494][T17079] The buggy address belongs to the physical page:
[  569.017817][T17079] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1310b
[  569.020917][T17079] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  569.023446][T17079] page_type: f5(slab)
[  569.024902][T17079] raw: 00fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122
[  569.027968][T17079] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[  569.031023][T17079] page dumped because: kasan: bad access detected
[  569.033316][T17079] page_owner tracks the page as allocated
[  569.035363][T17079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5941, tgid 5941 (dhcpcd-run-hook), ts 58600635633, free_ts 54955276057
[  569.042666][T17079]  post_alloc_hook+0xfd/0x120
[  569.044387][T17079]  get_page_from_freelist+0xf48/0x3530
[  569.046352][T17079]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  569.048515][T17079]  new_slab+0xa2/0x640
[  569.050009][T17079]  refill_objects+0xe3/0x410
[  569.051680][T17079]  __pcs_replace_empty_main+0x376/0x680
[  569.053678][T17079]  __kmalloc_cache_noprof+0x479/0x6c0
[  569.055603][T17079]  load_elf_binary+0x5a8/0x51c0
[  569.057419][T17079]  bprm_execve+0x8fb/0x1730
[  569.059084][T17079]  do_execveat_common.isra.0+0x4a5/0x580
[  569.061102][T17079]  __x64_sys_execve+0x93/0xd0
[  569.062822][T17079]  do_syscall_64+0x115/0x840
[  569.064502][T17079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.066635][T17079] page last free pid 46 tgid 46 stack trace:
[  569.068804][T17079]  __free_frozen_pages+0x79f/0x1090
[  569.070687][T17079]  __folio_put+0x3b4/0x5f0
[  569.072305][T17079]  migrate_folio_done+0x3a9/0x4c0
[  569.074142][T17079]  migrate_pages_batch+0x27dc/0x45c0
[  569.076040][T17079]  migrate_pages_sync+0x12c/0x880
[  569.077879][T17079]  migrate_pages+0x1a83/0x2850
[  569.079610][T17079]  compact_zone+0x243c/0x4420
[  569.081314][T17079]  compact_node+0x17f/0x2c0
[  569.082978][T17079]  kcompactd+0x724/0xde0
[  569.084531][T17079]  kthread+0x370/0x450
[  569.086024][T17079]  ret_from_fork+0x72b/0xd50
[  569.087738][T17079]  ret_from_fork_asm+0x1a/0x30
[  569.089470][T17079] 
[  569.090372][T17079] Memory state around the buggy address:
[  569.092433][T17079]  ffff88801310b500: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  569.095305][T17079]  ffff88801310b580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  569.098204][T17079] >ffff88801310b600: 00 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc
[  569.101015][T17079]                       ^
[  569.102537][T17079]  ffff88801310b680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  569.105404][T17079]  ffff88801310b700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  569.108306][T17079] ==================================================================
[  569.167048][ T5754] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[  569.200807][T17079] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  569.203677][T17079] CPU: 0 UID: 0 PID: 17079 Comm: syz.2.2660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  569.207762][T17079] Tainted: [L]=SOFTLOCKUP
[  569.209412][T17079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  569.213177][T17079] Call Trace:
[  569.214378][T17079]  <TASK>
[  569.215842][T17079]  dump_stack_lvl+0x100/0x190
[  569.217898][T17079]  vpanic+0x552/0x970
[  569.219592][T17079]  ? __pfx_vpanic+0x10/0x10
[  569.221512][T17079]  ? mark_held_locks+0x40/0x70
[  569.223574][T17079]  panic+0xd1/0xe0
[  569.225172][T17079]  ? __pfx_panic+0x10/0x10
[  569.227058][T17079]  ? preempt_schedule_common+0x42/0xc0
[  569.229225][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.231562][T17079]  check_panic_on_warn.cold+0x19/0x34
[  569.233826][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.236197][T17079]  end_report.part.0+0x3a/0x90
[  569.238195][T17079]  kasan_report_invalid_free.cold+0xd/0x12
[  569.240594][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.243067][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.245521][T17079]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.247980][T17079]  check_slab_allocation+0xe1/0xf0
[  569.250035][T17079]  ? f_uac2_opts_p_srate_store+0x100/0x260
[  569.251890][T17079]  kfree+0x1b6/0x6c0
[  569.253126][T17079]  ? __asan_memcpy+0x3c/0x60
[  569.254585][T17079]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  569.256350][T17079]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  569.258291][T17079]  ? configfs_write_iter+0x388/0x4e0
[  569.259947][T17079]  configfs_write_iter+0x302/0x4e0
[  569.261556][T17079]  vfs_write+0x6ac/0x1050
[  569.262929][T17079]  ? __pfx_configfs_write_iter+0x10/0x10
[  569.264694][T17079]  ? __pfx_vfs_write+0x10/0x10
[  569.266218][T17079]  ? find_held_lock+0x2b/0x80
[  569.267709][T17079]  ksys_write+0x12a/0x250
[  569.269072][T17079]  ? __pfx_ksys_write+0x10/0x10
[  569.270613][T17079]  __do_fast_syscall_32+0xe7/0x970
[  569.272224][T17079]  do_fast_syscall_32+0x32/0x70
[  569.273765][T17079]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  569.275647][T17079] RIP: 0023:0xf70aefec
[  569.276944][T17079] Code: Unable to access opcode bytes at 0xf70aefc2.
[  569.279013][T17079] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  569.281470][T17079] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[  569.283920][T17079] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  569.286374][T17079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  569.288818][T17079] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  569.291270][T17079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  569.293718][T17079]  </TASK>
[  569.295317][T17079] Kernel Offset: disabled
[  569.296671][T17079] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:16:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff91bb11f4 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90003db7808 RSP=ffffc90003db7750
R8 =ffffffff91bb11f8 R9 =0000000000000007 R10=0000000000000200 R11=000000000000001e
R12=ffffc90003db7810 R13=ffffc90003db77c0 R14=0000000000000000 R15=ffffc90003db7f48
RIP=ffffffff81b8160c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000000c3fb600 CR3=000000005d891000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017000000000 0000000400000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c34a540
RSI=ffffffff81b51ece RDI=ffff88801c34a540 RBP=0000000000000001 RSP=ffffc9000046fdf8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000
RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096cdf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000080006018 CR3=000000000e994000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff89587d9e RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88801c770000 RBP=ffff8880253d5500 RSP=ffffc9000052fb20
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff888029e30f28 R13=0000000000000000 R14=ffff8880253d5508 R15=0000000000000000
RIP=ffffffff8209ae0b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096ddf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000056383bc26000 CR3=000000005d891000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc90003a3f598
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043
R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b6f720e R15=ffffffff85a13190
RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096edf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f70af000 CR3=00000000534d0000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000