last executing test programs:

12.568050979s ago: executing program 2 (id=1955):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0)

12.466167781s ago: executing program 1 (id=1956):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x424, 0x3f3, 0x200, 0x70bd28, 0x25dfdbfe, {0x10, 0x0, 0x27, [0x5, 0x8, 0x800, 0x4, 0xffffffff, 0x5, 0x4, 0xd, 0x10000, 0x6, 0x7fff, 0x10000, 0x8, 0x1, 0x10001, 0x9, 0xba, 0xfffffffc, 0x0, 0x1, 0x3, 0xc8, 0x8, 0x0, 0x1, 0x1, 0x3, 0xfffff4e0, 0x40, 0x400, 0xfffffffd, 0x5, 0x8, 0x5, 0x1, 0xff, 0x5, 0xffffff80, 0x3ff, 0x96, 0x2, 0x8, 0x3, 0x168, 0x6d94, 0xb1f, 0x8, 0x200, 0x4, 0x7fffffff, 0x7, 0x2, 0x3, 0x83, 0x6, 0x7, 0xb1e, 0x3, 0x7, 0xffff, 0xe26, 0xff, 0x0, 0x5], [0x3, 0x416, 0x8, 0x400, 0x80000000, 0x10000, 0x7ff, 0x4, 0x6, 0x1, 0xe, 0x5, 0x61bedc5e, 0x6, 0x8, 0x5, 0x800, 0x8, 0x6, 0x1, 0xb00, 0x94de, 0xfffffffe, 0xc8, 0xfffffffa, 0x3855, 0x0, 0x0, 0x4, 0x1, 0x7f0, 0xffff8ef9, 0x4, 0x3, 0xff, 0x4, 0x4, 0xa196, 0x6, 0x2, 0x7fff, 0x2, 0x865f, 0x10, 0xc, 0x8, 0x2, 0x9, 0xff, 0xd58, 0x7f, 0x4, 0xa0000000, 0x7fffffff, 0xff, 0xfffffffd, 0x1ff, 0x4, 0x100, 0x4, 0x5, 0x5, 0x1], [0x3, 0x7fffffff, 0x9, 0x0, 0x5, 0x8776, 0x74, 0x8, 0x7ff, 0x78b9, 0x4, 0x8, 0x4, 0x8, 0x3, 0x0, 0x3, 0x2, 0xd31, 0xd4e, 0xffff, 0x400, 0x4, 0x7f, 0x7f, 0xff, 0x4, 0xffffffa7, 0x27a, 0x59e76bdf, 0x2, 0xfff, 0x8, 0x200000, 0x7, 0x7fff, 0xff9f, 0x1000, 0x9, 0x8420, 0x0, 0xf, 0x0, 0x2, 0x9, 0x1c0000, 0x9, 0x9, 0x80000000, 0xfffffff8, 0xfb8e, 0x5, 0xfffffffb, 0x86, 0x7, 0x9, 0x6, 0x5, 0x6, 0xb, 0xb3, 0x0, 0x3, 0x6197], [0x2, 0xda, 0x2, 0x7ff, 0x6, 0xc3d, 0x5, 0x39a, 0x6, 0x80000001, 0x9, 0x1ff, 0x1, 0x7, 0x0, 0x4, 0x4, 0xc1c5, 0x3, 0x20, 0x2ae, 0x1, 0x4, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0xf19b, 0x7, 0xe81, 0x6b83, 0x1, 0xffff, 0xfffffc00, 0x1, 0x4, 0x2, 0x800, 0xe, 0x87, 0xfffffffb, 0x4, 0xcd7e, 0x78d6, 0x1, 0x80000001, 0x9, 0x4, 0x1, 0x3, 0x0, 0x1, 0x8, 0x4, 0x101, 0x80000001, 0x61, 0x0, 0x2, 0x8aa, 0x401, 0x2], 0x1, ['\x00']}}, 0x424}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
keyctl$reject(0x13, 0x0, 0x20007, 0x4007, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
listen(r3, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0xa64a, 0x0, 0x8000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

11.941313554s ago: executing program 3 (id=1957):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

11.158576414s ago: executing program 1 (id=1958):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="f0aaee3b7b1d1d8b98768b307642b2e16c5b0764110fbdccde2a214ac3cc553d7fdbb7d96dcab30c468a3d6eb0bedb5e9ce2cae9ce78b058c53bfb39d123be5d115c5ed7f697d35495b83ac831518d5caa3357bf5b5c46f55cb667ac7d8822a7eee4b30a2bb7de4fda1ebddfd60700d8a02e6c09a1c3040ad7f014e8b7c69faa7382c459a4d833de4eb17f97408005530ba3d22bdb3b1f4bfbc75b9ee50f4c5a56769dabf18cbe9b05432a0205bbf802675ee49376be256c0dba4ce21e933a7c2b1780f2478b83c1"})
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700001dcdf25070000000a00040077706162310000000c00060001000000010000000c0017000200aaaaaaaaaaaa080003001d"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000340)={0x3, 0x0, [{0x119, 0x0, 0x10000}, {0xb2e, 0x0, 0x39294324}, {0x1df, 0x0, 0x100000000}]})
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x2}, &(0x7f00000003c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0)
pwrite64(r10, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0xe04848848bd3bc38, 0xffffffffffffffff, 0x0)
ioctl$FITHAW(r9, 0xc0045878)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff63)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bf70000200004b45dc0780"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

9.493982055s ago: executing program 3 (id=1959):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

9.493012465s ago: executing program 2 (id=1960):
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840)

8.354247003s ago: executing program 3 (id=1962):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x3, 0x146}, <r2=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeebc, 0x2000, 0x2, 0x2d4}}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000700)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x0, 0x0, 0x0}}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000480)={@multicast2, @remote})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaa94c40197e00030b709aaaaaabb86dd60e1ff9400283afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000040000000aaff020000000000000000000014f3000103a2e74508ce19792c362effc878d35f441ed862926e059ed60182b28e2c6660918521b621daf5e87285c00e0d7de1c710ac30ea65d7fc4698b8ef70f7d004bd25a91fc6b6a6c5558419304e264c2e771d971a025d0b67e554152800088bbe2d2205dfd4c5f3f5f7fb4e122d68e4124d22d957be037124292e6bdddefffa24dc5d6f402e90d7447c40aec108cf617b22a976841a30ad56b6c106c7fc65822ccad45cb0d054bf9e5219f8ce64188ad36c75a21626b51968e444496df13fdc792c62609fda34cb13c6ff"], 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r6, 0xc048aec8, &(0x7f00000000c0)={0x6, 0xc, 0x2, 0x4, 0x44})
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x6, 0x1, {{0x17, 0x4, 0x2, 0x1a, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x9, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x2, [0x9]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x1, [{@private=0xa010102, 0x8b68}, {@multicast1, 0x11a}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x2}]}, @end]}}}}})
r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="05000000000000000064a7254c0008000300", @ANYRESOCT=r2, @ANYRES64=r3], 0x34}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x55, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xb65, 0x0, 0x0, 0x7, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x5]})
sendmsg$nl_route(r9, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0xd4}}, 0x4000010)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000028000180140004000000000000001fff0000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

8.320208294s ago: executing program 1 (id=1963):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000001c0), 0x0, 0x4000001)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00000000", 0x25)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x1c)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020)
socket(0x10, 0x80003, 0x0)

8.159727338s ago: executing program 0 (id=1964):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10000, 0x0)
unshare(0x24020400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3)
write(r0, &(0x7f0000000600)='120', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x28}}, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}})

7.987953693s ago: executing program 2 (id=1965):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa0100ff}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

7.634683091s ago: executing program 3 (id=1966):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
syz_emit_ethernet(0x96, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653ee2603afffe800000000000000000000000000000fe8000b21900000000000000000000aa890090780000000020010000000000190000000000000000fc01000000000000000000000000000004079595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c1cfd3f5b1f747"], 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

7.513641554s ago: executing program 0 (id=1967):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

7.359278388s ago: executing program 2 (id=1968):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x10009, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x57, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x6, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x700, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x80, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x3, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x7, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x2, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x1, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x3, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x6, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x5, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x2, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804)

4.378915711s ago: executing program 1 (id=1969):
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000280)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x3, 0x163, 0x80, 0xd81, 0x21c0, 0xffffffffffffffff, 0x40, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e0"], 0x4)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_init()
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

4.170845707s ago: executing program 0 (id=1970):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

4.128499398s ago: executing program 3 (id=1971):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="f0aaee3b7b1d1d8b98768b307642b2e16c5b0764110fbdccde2a214ac3cc553d7fdbb7d96dcab30c468a3d6eb0bedb5e9ce2cae9ce78b058c53bfb39d123be5d115c5ed7f697d35495b83ac831518d5caa3357bf5b5c46f55cb667ac7d8822a7eee4b30a2bb7de4fda1ebddfd60700d8a02e6c09a1c3040ad7f014e8b7c69faa7382c459a4d833de4eb17f97408005530ba3d22bdb3b1f4bfbc75b9ee50f4c5a56769dabf18cbe9b05432a0205bbf802675ee49376be256c0dba4ce21e933a7c2b1780f2478b83c1"})
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700001dcdf25070000000a00040077706162310000000c00060001000000010000000c0017000200aaaaaaaaaaaa080003001d"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000340)={0x3, 0x0, [{0x119, 0x0, 0x10000}, {0xb2e, 0x0, 0x39294324}, {0x1df, 0x0, 0x100000000}]})
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x2}, &(0x7f00000003c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0)
pwrite64(r10, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0xe04848848bd3bc38, 0xffffffffffffffff, 0x0)
ioctl$FITHAW(r9, 0xc0045878)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff63)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x1}, 0x1c)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bf70000200004b45dc0780"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

1.064954584s ago: executing program 2 (id=1972):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5)
readv(r1, &(0x7f0000000700)=[{0x0}], 0x1)

782.450621ms ago: executing program 0 (id=1973):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x41, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)

782.068321ms ago: executing program 2 (id=1974):
syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040001ffffffe89a98332ef71a1d915819000000020000364c8b3ea3d1a3d448dd4f980efccc9fc7a7ff69b3a80ab995b17bd2f5f27c70c031f774facec609a5c8904bbb391faf19edb9c5f2b676bbf7473e2c65cb5335cc729eb93ade1a0aff38eadcb01d4c2d430575bdb6f76c7ac87eacd77946d50b727943664d3da80d7493b993691204c1b278550e094f7f1a4d8fdc93bc1c8fc4ff88350321778c566f3d7b5d28a88e0c0dcc51c664c01ba1e4bb2e6b1ee9a2fbc6a537284b6c262739fab37cd0dfbc39d5b35ebb3e"], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb)

455.342369ms ago: executing program 1 (id=1975):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x10000, 0x0)
unshare(0x24020400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d3)
write(r0, &(0x7f0000000600)='120', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="2867acb3320b00e51e0071a2c5c3dd0f3bac41560a89db97d0f478642113554088c97874f48177cb7bfa21a93f6b6c1e7e5e408e7de4709cbfef47c00accb7b43569e8b03199f7a5efe16ae65b14a8720e51b939b3d01baa5748ce27d027958e54d8312d4b869257237253538aa639e63696a06d7485a061d2a55527bf5b03a9383081ad63418c0d91fe803e5c15bddb9e0bbcc31ccd18bd0808c87d345fb35edddfa4d95d046919f5475da08b711148eb1e24815578aec445cedf9c2580f2c1b11a92a9a2eea36c26967ea4f2687abed4e515b99f0aa0b82d15c384275ae5b63a175fd6e3bbe1ba7be6f2787916741cd078c73ecb4e83d09d429e0a601fbff6e5c7a4adf51356168c3d6e4bbe4780a8eed980e3adfeff81231dd3a97f93111ed36bf41aae668974018f9b40bd0b049b08553fdd31392b04c1143a685e7325", @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32], 0x28}}, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}})

182.087196ms ago: executing program 0 (id=1976):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa0100ff}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

74.008859ms ago: executing program 3 (id=1977):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x424, 0x3f3, 0x200, 0x70bd28, 0x25dfdbfe, {0x10, 0x0, 0x27, [0x5, 0x8, 0x800, 0x4, 0xffffffff, 0x5, 0x4, 0xd, 0x10000, 0x6, 0x7fff, 0x10000, 0x8, 0x1, 0x10001, 0x9, 0xba, 0xfffffffc, 0x0, 0x1, 0x3, 0xc8, 0x8, 0x0, 0x1, 0x1, 0x3, 0xfffff4e0, 0x40, 0x400, 0xfffffffd, 0x5, 0x8, 0x5, 0x1, 0xff, 0x5, 0xffffff80, 0x3ff, 0x96, 0x2, 0x8, 0x3, 0x168, 0x6d94, 0xb1f, 0x8, 0x200, 0x4, 0x7fffffff, 0x7, 0x2, 0x3, 0x83, 0x6, 0x7, 0xb1e, 0x3, 0x7, 0xffff, 0xe26, 0xff, 0x0, 0x5], [0x3, 0x416, 0x8, 0x400, 0x80000000, 0x10000, 0x7ff, 0x4, 0x6, 0x1, 0xe, 0x5, 0x61bedc5e, 0x6, 0x8, 0x5, 0x800, 0x8, 0x6, 0x1, 0xb00, 0x94de, 0xfffffffe, 0xc8, 0xfffffffa, 0x3855, 0x0, 0x0, 0x4, 0x1, 0x7f0, 0xffff8ef9, 0x4, 0x3, 0xff, 0x4, 0x4, 0xa196, 0x6, 0x2, 0x7fff, 0x2, 0x865f, 0x10, 0xc, 0x8, 0x2, 0x9, 0xff, 0xd58, 0x7f, 0x4, 0xa0000000, 0x7fffffff, 0xff, 0xfffffffd, 0x1ff, 0x4, 0x100, 0x4, 0x5, 0x5, 0x1], [0x3, 0x7fffffff, 0x9, 0x0, 0x5, 0x8776, 0x74, 0x8, 0x7ff, 0x78b9, 0x4, 0x8, 0x4, 0x8, 0x3, 0x0, 0x3, 0x2, 0xd31, 0xd4e, 0xffff, 0x400, 0x4, 0x7f, 0x7f, 0xff, 0x4, 0xffffffa7, 0x27a, 0x59e76bdf, 0x2, 0xfff, 0x8, 0x200000, 0x7, 0x7fff, 0xff9f, 0x1000, 0x9, 0x8420, 0x0, 0xf, 0x0, 0x2, 0x9, 0x1c0000, 0x9, 0x9, 0x80000000, 0xfffffff8, 0xfb8e, 0x5, 0xfffffffb, 0x86, 0x7, 0x9, 0x6, 0x5, 0x6, 0xb, 0xb3, 0x0, 0x3, 0x6197], [0x2, 0xda, 0x2, 0x7ff, 0x6, 0xc3d, 0x5, 0x39a, 0x6, 0x80000001, 0x9, 0x1ff, 0x1, 0x7, 0x0, 0x4, 0x4, 0xc1c5, 0x3, 0x20, 0x2ae, 0x1, 0x4, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0xf19b, 0x7, 0xe81, 0x6b83, 0x1, 0xffff, 0xfffffc00, 0x1, 0x4, 0x2, 0x800, 0xe, 0x87, 0xfffffffb, 0x4, 0xcd7e, 0x78d6, 0x1, 0x80000001, 0x9, 0x4, 0x1, 0x3, 0x0, 0x1, 0x8, 0x4, 0x101, 0x80000001, 0x61, 0x0, 0x2, 0x8aa, 0x401, 0x2], 0x1, ['\x00']}}, 0x424}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
keyctl$reject(0x13, 0x0, 0x20007, 0x4007, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
listen(r4, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0xa64a, 0x0, 0x8000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

73.097829ms ago: executing program 1 (id=1978):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

0s ago: executing program 0 (id=1979):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x3, 0x146}, <r2=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeebc, 0x2000, 0x2, 0x2d4}}, {0x0, 0x0, <r3=>0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r1}}], 0x1, &(0x7f0000000700)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x0, 0x0, 0x0}}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000480)={@multicast2, @remote})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r6, 0xc048aec8, &(0x7f00000000c0)={0x6, 0xc, 0x2, 0x4, 0x44})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x6, 0x1, {{0x17, 0x4, 0x2, 0x1a, 0x5c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xb5, 0x3, 0x9, [{@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x2, [0x9]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x1, [{@private=0xa010102, 0x8b68}, {@multicast1, 0x11a}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x2}]}, @end]}}}}})
r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="05000000000000000064a7254c0008000300", @ANYRESOCT=r2, @ANYRES64=r3], 0x34}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x55, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0xb65, 0x0, 0x0, 0x7, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x5]})
sendmsg$nl_route(r10, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0xd4}}, 0x4000010)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000028000180140004000000000000001fff0000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

kernel console output (not intermixed with test programs):

ulticast mode
[  281.329596][ T8544] team_slave_1: entered allmulticast mode
[  281.360015][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'.
[  281.407553][  T789] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  281.628615][ T8556] syzkaller0: entered promiscuous mode
[  281.635652][ T8556] syzkaller0: entered allmulticast mode
[  281.756916][ T8568] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -22
[  281.873774][ T8560] syzkaller0: entered promiscuous mode
[  281.900032][ T8560] syzkaller0: entered allmulticast mode
[  282.067529][ T8576] ieee802154 phy0 wpan0: encryption failed: -22
[  285.191885][ T5818] usb 1-1: USB disconnect, device number 6
[  285.915915][ T5818] usblp0: removed
[  288.208023][ T8589] bridge0: port 3(vlan2) entered blocking state
[  288.214796][ T8589] bridge0: port 3(vlan2) entered disabled state
[  288.221323][ T8589] vlan2: entered allmulticast mode
[  288.226495][ T8589] geneve0: entered allmulticast mode
[  288.233222][ T8589] vlan2: entered promiscuous mode
[  288.238285][ T8589] geneve0: entered promiscuous mode
[  288.498218][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'.
[  288.697244][ T8607] 8021q: adding VLAN 0 to HW filter on device bond7
[  288.758935][ T8626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.795841][ T8620] bond6: (slave team0): Releasing backup interface
[  288.813726][ T8620] team0: left promiscuous mode
[  288.818558][ T8620] team_slave_0: left promiscuous mode
[  288.829141][ T8620] team_slave_1: left promiscuous mode
[  288.835980][ T8620] team0: left allmulticast mode
[  288.840906][ T8620] team_slave_0: left allmulticast mode
[  288.863963][ T8620] team_slave_1: left allmulticast mode
[  288.876862][ T8620] 8021q: adding VLAN 0 to HW filter on device team0
[  288.894692][ T8620] bond7: (slave team0): Enslaving as an active interface with an up link
[  288.941291][ T8622] bond7: entered promiscuous mode
[  288.957632][ T8622] team0: entered promiscuous mode
[  288.970001][ T8622] team_slave_0: entered promiscuous mode
[  288.989667][ T8622] team_slave_1: entered promiscuous mode
[  289.005041][ T8622] bond7: entered allmulticast mode
[  289.010428][ T8622] team0: entered allmulticast mode
[  289.029036][ T8622] team_slave_0: entered allmulticast mode
[  289.035977][ T8622] team_slave_1: entered allmulticast mode
[  289.084142][ T8635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.273842][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'.
[  289.403347][ T8637] syzkaller0: entered promiscuous mode
[  289.422613][ T8637] syzkaller0: entered allmulticast mode
[  289.440977][ T8637] tipc: Resetting bearer <eth:syzkaller0>
[  289.569502][ T8630] tipc: Resetting bearer <eth:syzkaller0>
[  289.863248][ T8653] dlm: no local IP address has been set
[  289.868932][ T8653] dlm: cannot start dlm midcomms -107
[  293.325244][ T8630] tipc: Disabling bearer <eth:syzkaller0>
[  293.346109][    T8] tipc: Node number set to 3145728
[  293.490101][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'.
[  293.556527][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  293.667973][ T8682] 8021q: adding VLAN 0 to HW filter on device bond6
[  293.700714][ T8687] bond5: (slave team0): Releasing backup interface
[  293.715483][ T8687] team0: left promiscuous mode
[  293.720321][ T8687] team_slave_0: left promiscuous mode
[  293.728719][ T8687] team_slave_1: left promiscuous mode
[  293.736895][ T8687] team0: left allmulticast mode
[  293.745471][ T8687] team_slave_0: left allmulticast mode
[  293.755850][ T8687] team_slave_1: left allmulticast mode
[  293.766542][ T8687] 8021q: adding VLAN 0 to HW filter on device team0
[  293.776805][ T8687] bond6: (slave team0): Enslaving as an active interface with an up link
[  293.810636][ T8691] bond6: entered promiscuous mode
[  293.817404][ T8691] team0: entered promiscuous mode
[  293.822953][ T8691] team_slave_0: entered promiscuous mode
[  293.829056][ T8691] team_slave_1: entered promiscuous mode
[  293.835491][ T8691] bond6: entered allmulticast mode
[  293.840855][ T8691] team0: entered allmulticast mode
[  293.846678][ T8691] team_slave_0: entered allmulticast mode
[  293.853331][ T8691] team_slave_1: entered allmulticast mode
[  293.924073][ T5815] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  294.046879][ T8699] syz_tun: entered allmulticast mode
[  294.079873][ T8698] syz_tun: left allmulticast mode
[  294.125704][ T5815] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  294.145191][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.172521][ T5815] usb 1-1: Product: syz
[  294.178018][ T5815] usb 1-1: Manufacturer: syz
[  294.201094][ T5815] usb 1-1: SerialNumber: syz
[  294.574364][ T8707] dlm: no local IP address has been set
[  294.580048][ T8707] dlm: cannot start dlm midcomms -107
[  295.684650][ T8716] raw-gadget.0 gadget.0: fail, usb_ep_queue returned -22
[  295.986942][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'.
[  296.063804][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  296.074136][ T5815] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  296.610482][ T8723] tipc: Started in network mode
[  296.627994][ T8723] tipc: Node identity a695aaed0acb, cluster identity 4711
[  296.657077][ T8723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.812520][   T23] usb 1-1: USB disconnect, device number 7
[  296.836316][   T23] usblp0: removed
[  296.874590][ T8723] syzkaller0: entered promiscuous mode
[  296.894471][ T8723] syzkaller0: entered allmulticast mode
[  296.909352][ T8723] tipc: Resetting bearer <eth:syzkaller0>
[  297.047897][ T8736] netlink: 260 bytes leftover after parsing attributes in process `syz.2.731'.
[  297.154849][ T6428] tipc: Resetting bearer <eth:syzkaller0>
[  297.164713][ T8722] tipc: Resetting bearer <eth:syzkaller0>
[  298.180088][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.737'.
[  298.936430][  T789] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  299.062276][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  299.130559][  T789] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  299.145309][  T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.156073][  T789] usb 3-1: Product: syz
[  299.160295][  T789] usb 3-1: Manufacturer: syz
[  299.171392][  T789] usb 3-1: SerialNumber: syz
[  299.281609][ T8722] tipc: Disabling bearer <eth:syzkaller0>
[  299.291905][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  299.302148][ T8738] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  299.320257][ T8740] bond7: (slave team0): Releasing backup interface
[  299.337170][ T8740] team0: left promiscuous mode
[  299.346325][ T8740] team_slave_0: left promiscuous mode
[  299.353266][ T8740] team_slave_1: left promiscuous mode
[  299.359084][ T8740] team0: left allmulticast mode
[  299.365442][ T8740] team_slave_0: left allmulticast mode
[  299.371328][ T8740] team_slave_1: left allmulticast mode
[  299.393637][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'.
[  299.411135][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.518965][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.553501][ T5818] tipc: Node number set to 2891885293
[  299.606763][  T789] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  302.589945][ T5818] usb 3-1: USB disconnect, device number 9
[  302.625947][ T5818] usblp0: removed
[  302.733819][   T28] audit: type=1807 audit(1785675517.135:10): action=measure UNKNOWN=# res=0
[  302.761726][   T28] audit: type=1802 audit(1785675517.165:11): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.740" res=0 errno=0
[  302.959387][ T8773] ima: policy update failed
[  304.688629][   T28] audit: type=1802 audit(1785675517.365:12): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.740" res=0 errno=0
[  304.940272][  T789] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  305.017123][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'.
[  305.394931][  T789] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  305.414910][ T8788] sctp: [Deprecated]: syz.2.743 (pid 8788) Use of struct sctp_assoc_value in delayed_ack socket option.
[  305.414910][ T8788] Use struct sctp_sack_info instead
[  305.441602][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.480855][  T789] usb 1-1: Product: syz
[  305.526194][  T789] usb 1-1: Manufacturer: syz
[  305.530869][  T789] usb 1-1: SerialNumber: syz
[  305.815091][  T789] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  305.898443][  T789] usb 1-1: USB disconnect, device number 8
[  306.018286][  T789] usblp0: removed
[  306.042758][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[  306.217149][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'.
[  307.793352][ T5815] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  308.159117][ T5815] usb 3-1: config 0 has no interfaces?
[  308.238672][ T5815] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  308.269447][ T8836] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  308.378451][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.667010][ T5815] usb 3-1: config 0 descriptor??
[  309.027289][  T173] usb 3-1: USB disconnect, device number 10
[  310.270600][ T8850] syzkaller0: entered promiscuous mode
[  310.278292][ T8850] syzkaller0: entered allmulticast mode
[  311.590588][   T28] audit: type=1807 audit(1785675525.985:13): action=measure UNKNOWN=# res=0
[  311.593411][ T8857] ima: policy update failed
[  311.621151][   T28] audit: type=1802 audit(1785675525.985:14): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.754" res=0 errno=0
[  311.639006][   T28] audit: type=1802 audit(1785675526.005:15): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.754" res=0 errno=0
[  312.985026][ T8880] netlink: 84 bytes leftover after parsing attributes in process `syz.0.761'.
[  313.151960][ T8887] syz_tun: entered allmulticast mode
[  313.166523][ T8886] syz_tun: left allmulticast mode
[  313.231334][  T173] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  313.421233][  T173] usb 4-1: Using ep0 maxpacket: 8
[  314.506607][  T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  314.517623][  T173] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  314.521641][ T8900] netlink: 165 bytes leftover after parsing attributes in process `syz.2.769'.
[  314.526863][  T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.548216][  T173] usb 4-1: config 0 descriptor??
[  314.880555][  T173] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  314.920446][ T8909] netlink: 84 bytes leftover after parsing attributes in process `syz.2.772'.
[  316.176220][    C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  316.213966][   T23] usb 4-1: USB disconnect, device number 8
[  316.248383][ T8916] autofs4:pid:8916:autofs_fill_super: called with bogus options
[  317.341737][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.348080][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  318.633566][ T8945] netlink: 165 bytes leftover after parsing attributes in process `syz.1.786'.
[  321.494329][ T8999] fuse: Invalid rootmode
[  322.560014][ T9005] netlink: 165 bytes leftover after parsing attributes in process `syz.0.800'.
[  322.811544][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'.
[  322.910426][ T9010] 8021q: adding VLAN 0 to HW filter on device bond7
[  323.838459][ T9010] bond6: (slave team0): Releasing backup interface
[  323.845894][ T9010] team0: left promiscuous mode
[  323.850757][ T9010] team_slave_0: left promiscuous mode
[  323.891473][ T9010] team_slave_1: left promiscuous mode
[  323.916404][ T9010] team0: left allmulticast mode
[  323.972839][ T9010] team_slave_0: left allmulticast mode
[  324.001312][ T9010] team_slave_1: left allmulticast mode
[  324.037192][ T9010] 8021q: adding VLAN 0 to HW filter on device team0
[  324.060747][ T9010] bond7: (slave team0): Enslaving as an active interface with an up link
[  324.102668][ T9023] bond7: entered promiscuous mode
[  324.107917][ T9023] team0: entered promiscuous mode
[  324.124688][ T9023] team_slave_0: entered promiscuous mode
[  324.141505][ T9023] team_slave_1: entered promiscuous mode
[  324.157461][ T9023] bond7: entered allmulticast mode
[  324.171254][ T9023] team0: entered allmulticast mode
[  324.196955][ T9023] team_slave_0: entered allmulticast mode
[  324.213853][ T9026] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  324.221254][ T9023] team_slave_1: entered allmulticast mode
[  324.498284][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'.
[  324.564827][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[  324.782268][ T9036] 8021q: adding VLAN 0 to HW filter on device bond6
[  325.350431][ T9029] bond5: (slave team0): Releasing backup interface
[  325.412919][ T9029] team0: left promiscuous mode
[  325.490394][ T9029] team_slave_0: left promiscuous mode
[  325.627221][ T9029] team_slave_1: left promiscuous mode
[  325.653545][ T9029] team0: left allmulticast mode
[  325.658509][ T9029] team_slave_0: left allmulticast mode
[  325.745728][ T9029] team_slave_1: left allmulticast mode
[  325.793463][ T9029] 8021q: adding VLAN 0 to HW filter on device team0
[  325.847144][ T9029] bond6: (slave team0): Enslaving as an active interface with an up link
[  326.107587][ T9039] bond6: entered promiscuous mode
[  326.119311][ T9039] team0: entered promiscuous mode
[  326.128451][ T9039] team_slave_0: entered promiscuous mode
[  326.171450][ T9039] team_slave_1: entered promiscuous mode
[  326.178592][ T9039] bond6: entered allmulticast mode
[  326.184354][ T9039] team0: entered allmulticast mode
[  326.191176][ T9039] team_slave_0: entered allmulticast mode
[  326.201723][ T9039] team_slave_1: entered allmulticast mode
[  326.367192][ T9066] fuse: Invalid rootmode
[  327.249873][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'.
[  327.413495][ T9089] 8021q: adding VLAN 0 to HW filter on device bond7
[  327.441665][ T9099] fuse: Invalid rootmode
[  327.501917][ T9101] bond6: (slave team0): Releasing backup interface
[  327.522094][ T9101] team0: left promiscuous mode
[  327.526950][ T9101] team_slave_0: left promiscuous mode
[  327.561435][ T9101] team_slave_1: left promiscuous mode
[  327.588003][ T9101] team0: left allmulticast mode
[  327.611175][ T9101] team_slave_0: left allmulticast mode
[  327.616768][ T9101] team_slave_1: left allmulticast mode
[  327.627292][ T9101] 8021q: adding VLAN 0 to HW filter on device team0
[  327.638216][ T9101] bond7: (slave team0): Enslaving as an active interface with an up link
[  327.662748][ T9089] bond7: entered promiscuous mode
[  327.669793][ T9089] team0: entered promiscuous mode
[  327.675605][ T9089] team_slave_0: entered promiscuous mode
[  327.685179][ T9089] team_slave_1: entered promiscuous mode
[  327.691798][ T9089] bond7: entered allmulticast mode
[  327.702255][ T9089] team0: entered allmulticast mode
[  327.712316][ T9089] team_slave_0: entered allmulticast mode
[  327.718098][ T9089] team_slave_1: entered allmulticast mode
[  327.829671][ T9107] tipc: Started in network mode
[  327.834970][ T9107] tipc: Node identity 2a454f1b1f48, cluster identity 4711
[  327.850523][ T9107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.870833][ T9106] tipc: Disabling bearer <eth:syzkaller0>
[  328.162659][ T9121] fuse: Bad value for 'rootmode'
[  328.221295][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  328.423351][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.463696][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  328.478395][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  328.505123][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.517422][    T9] usb 3-1: Product: syz
[  328.523630][    T9] usb 3-1: Manufacturer: syz
[  328.531269][    T9] usb 3-1: SerialNumber: syz
[  328.558400][    T9] cdc_mbim 3-1:1.0: skipping garbage
[  328.788479][ T9130] trusted_key: encrypted_key: insufficient parameters specified
[  328.793445][ T9110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  328.811666][ T9129] syzkaller0: entered promiscuous mode
[  328.817218][ T9129] syzkaller0: entered allmulticast mode
[  328.971095][ T9133] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  329.277387][ T9137] syzkaller0: entered promiscuous mode
[  329.287224][ T9137] syzkaller0: entered allmulticast mode
[  329.454093][ T9110] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  329.462338][    T9] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  329.469602][    T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  329.481445][    T9] wwan wwan0: port wwan0mbim0 attached
[  329.534735][    T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c6:a4:9b:e4:95:cf
[  329.676215][ T9143] syzkaller0: entered promiscuous mode
[  329.738774][ T9143] syzkaller0: entered allmulticast mode
[  329.841667][    C0] wdm_int_callback: 200 callbacks suppressed
[  329.841688][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  329.854455][    C0] wdm_int_callback: 200 callbacks suppressed
[  329.854473][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  329.867038][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  329.873732][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  329.880088][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  329.886802][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  329.893035][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  329.912352][   T23] usb 3-1: USB disconnect, device number 11
[  329.932668][   T23] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  330.006501][ T9150] fuse: Bad value for 'rootmode'
[  330.115054][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  331.404064][ T9189] fuse: Bad value for 'rootmode'
[  331.978593][ T9193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.515370][ T9191] tipc: Disabling bearer <eth:syzkaller0>
[  335.527138][ T5815] kernel write not supported for file /633/clear_refs (pid: 5815 comm: kworker/0:3)
[  336.475019][ T9236] fuse: Unknown parameter 'use00000000000000000000'
[  336.530772][ T9233] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  336.798475][ T9246] random: crng reseeded on system resumption
[  337.981238][ T9256] netlink: 64 bytes leftover after parsing attributes in process `syz.3.866'.
[  338.100522][ T9258] syzkaller0: entered promiscuous mode
[  338.115512][ T9258] syzkaller0: entered allmulticast mode
[  338.265186][ T9264] fuse: Unknown parameter 'use00000000000000000000'
[  338.431990][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  338.466547][ T9274] vlan2: entered allmulticast mode
[  338.472067][ T9274] dummy0: entered allmulticast mode
[  340.081528][ T9279] trusted_key: encrypted_key: insufficient parameters specified
[  340.262320][ T9287] random: crng reseeded on system resumption
[  341.856053][ T9301] fuse: Unknown parameter 'use00000000000000000000'
[  342.246665][ T9312] trusted_key: encrypted_key: insufficient parameters specified
[  342.528433][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  342.577613][ T9314] vlan0: entered allmulticast mode
[  342.583007][ T9314] dummy0: entered allmulticast mode
[  344.481473][ T9337] random: crng reseeded on system resumption
[  346.384154][ T9340] fuse: Unknown parameter 'user_i00000000000000000000'
[  347.645812][ T9345] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  347.860114][ T9351] vfio-pci: probe of 0000:00:01.0 failed with error -22
[  348.428640][ T9367] fuse: Unknown parameter 'user_i00000000000000000000'
[  349.238316][ T9389] random: crng reseeded on system resumption
[  352.034591][ T9395] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  352.501787][ T9406] fuse: Unknown parameter 'user_i00000000000000000000'
[  353.574468][ T9411] fuse: Unknown parameter 'user_id00000000000000000000'
[  353.800471][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  354.118580][ T9417] 8021q: adding VLAN 0 to HW filter on device bond8
[  354.214226][ T9437] random: crng reseeded on system resumption
[  354.482272][ T9427] bond7: (slave team0): Releasing backup interface
[  354.720445][ T9427] team0: left promiscuous mode
[  354.759203][ T9427] team_slave_0: left promiscuous mode
[  355.122057][ T9427] team_slave_1: left promiscuous mode
[  355.142264][ T9427] team0: left allmulticast mode
[  355.158122][ T9427] team_slave_0: left allmulticast mode
[  355.171142][ T9427] team_slave_1: left allmulticast mode
[  356.706294][ T9427] 8021q: adding VLAN 0 to HW filter on device team0
[  356.736913][ T9427] bond8: (slave team0): Enslaving as an active interface with an up link
[  356.833173][ T9428] bond8: entered promiscuous mode
[  356.838290][ T9428] team0: entered promiscuous mode
[  356.843462][ T9428] team_slave_0: entered promiscuous mode
[  356.849416][ T9428] team_slave_1: entered promiscuous mode
[  356.855548][ T9428] bond8: entered allmulticast mode
[  356.860718][ T9428] team0: entered allmulticast mode
[  356.866019][ T9428] team_slave_0: entered allmulticast mode
[  356.881067][ T9428] team_slave_1: entered allmulticast mode
[  357.116653][ T9448] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  357.142884][ T9445] netlink: 'syz.0.928': attribute type 29 has an invalid length.
[  357.220692][ T9445] netlink: 'syz.0.928': attribute type 29 has an invalid length.
[  357.349868][ T9451] netlink: 'syz.0.928': attribute type 29 has an invalid length.
[  357.577837][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  357.911577][ T9445] macsec1: entered promiscuous mode
[  357.916967][ T9445] dummy0: entered promiscuous mode
[  357.931249][ T9445] macsec1: entered allmulticast mode
[  359.021285][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  359.610946][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.531042][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  360.604161][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.614856][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.626521][    T9] usb 2-1: Product: syz
[  360.630754][    T9] usb 2-1: Manufacturer: syz
[  360.643431][    T9] usb 2-1: SerialNumber: syz
[  360.656196][    T9] cdc_mbim 2-1:1.0: skipping garbage
[  360.770552][ T9471] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  360.778650][ T9471] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.905829][ T9458] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  361.980825][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'.
[  362.050412][ T9477] 8021q: adding VLAN 0 to HW filter on device bond9
[  362.116960][ T9490] trusted_key: encrypted_key: insufficient parameters specified
[  362.164739][ T9477] bond8: (slave team0): Releasing backup interface
[  362.196780][ T9477] team0: left promiscuous mode
[  362.211433][ T9477] team_slave_0: left promiscuous mode
[  362.217177][ T9477] team_slave_1: left promiscuous mode
[  362.223362][ T9477] team0: left allmulticast mode
[  362.228426][ T9477] team_slave_0: left allmulticast mode
[  362.234819][ T9477] team_slave_1: left allmulticast mode
[  362.243916][ T9477] 8021q: adding VLAN 0 to HW filter on device team0
[  362.253588][ T9477] bond9: (slave team0): Enslaving as an active interface with an up link
[  362.287171][ T9488] bond9: entered promiscuous mode
[  362.294324][ T9458] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  362.303560][    T9] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  362.316591][    T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  362.376766][ T9488] team0: entered promiscuous mode
[  362.395980][    T9] wwan wwan0: port wwan0mbim0 attached
[  362.456159][ T9488] team_slave_0: entered promiscuous mode
[  362.630642][ T9488] team_slave_1: entered promiscuous mode
[  362.707525][ T9488] bond9: entered allmulticast mode
[  362.786433][ T9488] team0: entered allmulticast mode
[  362.814222][ T9497] fuse: Unknown parameter 'user_id00000000000000000000'
[  362.860637][ T9488] team_slave_0: entered allmulticast mode
[  362.954621][ T9488] team_slave_1: entered allmulticast mode
[  363.183569][    T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0a:6d:6d:ae:4d:9e
[  363.290673][    T9] usb 2-1: USB disconnect, device number 10
[  363.356960][    T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  364.553763][ T9514] fuse: Bad value for 'fd'
[  364.662456][    T9] wwan wwan0: port wwan0mbim0 disconnected
[  365.076421][ T9522] trusted_key: encrypted_key: insufficient parameters specified
[  365.552262][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'.
[  365.745457][ T9531] 8021q: adding VLAN 0 to HW filter on device bond8
[  365.876849][ T9537] 8021q: adding VLAN 0 to HW filter on device team0
[  366.132059][ T9537] bond8: (slave team0): Enslaving as an active interface with an up link
[  366.315704][ T9546] fuse: Bad value for 'fd'
[  366.539229][ T9541] bond8: entered promiscuous mode
[  366.564915][ T9541] team0: entered promiscuous mode
[  366.570110][ T9541] team_slave_0: entered promiscuous mode
[  366.605182][ T9541] team_slave_1: entered promiscuous mode
[  366.631759][ T9541] bond8: entered allmulticast mode
[  366.636921][ T9541] team0: entered allmulticast mode
[  366.656708][ T9541] team_slave_0: entered allmulticast mode
[  366.686531][ T9541] team_slave_1: entered allmulticast mode
[  366.836045][ T9556] trusted_key: encrypted_key: insufficient parameters specified
[  367.154552][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'.
[  368.401835][ T9593] netlink: 84 bytes leftover after parsing attributes in process `syz.2.971'.
[  368.527945][ T9596] fuse: Bad value for 'fd'
[  368.904929][  T173] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  369.078476][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'.
[  369.161165][  T173] usb 2-1: Using ep0 maxpacket: 8
[  369.190815][  T173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.236944][  T173] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  369.301791][  T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.426011][  T173] usb 2-1: config 0 descriptor??
[  369.613651][ T9600] 8021q: adding VLAN 0 to HW filter on device bond10
[  369.707570][  T173] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  369.756628][ T9607] bond9: (slave team0): Releasing backup interface
[  369.818584][ T9613] trusted_key: encrypted_key: insufficient parameters specified
[  369.830155][ T9607] team0: left promiscuous mode
[  369.841881][ T9607] team_slave_0: left promiscuous mode
[  369.856828][ T9607] team_slave_1: left promiscuous mode
[  369.872771][ T9607] team0: left allmulticast mode
[  369.886923][ T9607] team_slave_0: left allmulticast mode
[  369.902676][ T9607] team_slave_1: left allmulticast mode
[  369.932141][ T9607] 8021q: adding VLAN 0 to HW filter on device team0
[  369.957306][   T23] usb 2-1: USB disconnect, device number 11
[  369.996778][ T9615] vfio-pci: probe of 0000:00:01.0 failed with error -22
[  370.010218][ T9607] bond10: (slave team0): Enslaving as an active interface with an up link
[  370.046926][ T9609] bond10: entered promiscuous mode
[  370.053220][ T9609] team0: entered promiscuous mode
[  370.058669][ T9609] team_slave_0: entered promiscuous mode
[  370.069510][ T9609] team_slave_1: entered promiscuous mode
[  370.079841][ T9609] bond10: entered allmulticast mode
[  370.087488][ T9609] team0: entered allmulticast mode
[  370.093054][ T9609] team_slave_0: entered allmulticast mode
[  370.098831][ T9609] team_slave_1: entered allmulticast mode
[  370.352179][ T9622] netlink: 84 bytes leftover after parsing attributes in process `syz.3.982'.
[  370.375454][ T9624] fuse: Unknown parameter '0x0000000000000004'
[  370.550485][ T9627] fuse: Unknown parameter '0x0000000000000004'
[  370.617205][ T9630] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  370.635732][ T9630] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  370.657000][ T9630] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  370.736274][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'.
[  370.767873][ T9630] macsec1: entered promiscuous mode
[  370.774385][ T9630] dummy0: entered promiscuous mode
[  370.779720][ T9630] macsec1: entered allmulticast mode
[  371.799828][ T9650] trusted_key: encrypted_key: insufficient parameters specified
[  371.966436][ T9657] netlink: 84 bytes leftover after parsing attributes in process `syz.1.993'.
[  372.006923][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'.
[  372.021125][  T789] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  372.141949][ T9653] 8021q: adding VLAN 0 to HW filter on device bond11
[  372.189771][ T9659] bond10: (slave team0): Releasing backup interface
[  372.213051][ T9659] team0: left promiscuous mode
[  372.219368][  T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.241464][ T9659] team_slave_0: left promiscuous mode
[  372.247306][ T9659] team_slave_1: left promiscuous mode
[  372.252915][  T789] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  372.271371][ T9659] team0: left allmulticast mode
[  372.279957][  T789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.291070][ T9659] team_slave_0: left allmulticast mode
[  372.296718][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.311097][ T9659] team_slave_1: left allmulticast mode
[  372.321019][  T789] usb 1-1: Product: syz
[  372.326888][  T789] usb 1-1: Manufacturer: syz
[  372.336879][ T9659] 8021q: adding VLAN 0 to HW filter on device team0
[  372.345563][  T789] usb 1-1: SerialNumber: syz
[  372.371824][  T789] cdc_mbim 1-1:1.0: skipping garbage
[  372.378400][ T9659] bond11: (slave team0): Enslaving as an active interface with an up link
[  372.400263][ T9660] bond11: entered promiscuous mode
[  372.414421][ T9660] team0: entered promiscuous mode
[  372.419638][ T9660] team_slave_0: entered promiscuous mode
[  372.427442][ T9660] team_slave_1: entered promiscuous mode
[  372.440462][ T9660] bond11: entered allmulticast mode
[  372.447795][ T9660] team0: entered allmulticast mode
[  372.457234][ T9660] team_slave_0: entered allmulticast mode
[  372.467259][ T9660] team_slave_1: entered allmulticast mode
[  372.570557][ T9645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  373.281792][  T789] cdc_mbim 1-1:1.0: bind() failure
[  373.831856][  T789] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  373.838754][  T789] cdc_ncm 1-1:1.1: bind() failure
[  373.848070][  T789] usb 1-1: USB disconnect, device number 9
[  373.941457][ T9679] trusted_key: encrypted_key: insufficient parameters specified
[  374.030813][ T9683] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1002'.
[  374.140335][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'.
[  374.196533][ T9688] 8021q: adding VLAN 0 to HW filter on device bond12
[  374.283114][ T9688] bond11: (slave team0): Releasing backup interface
[  374.301234][ T9688] team0: left promiscuous mode
[  374.306130][ T9688] team_slave_0: left promiscuous mode
[  374.312527][ T9688] team_slave_1: left promiscuous mode
[  374.318867][ T9688] team0: left allmulticast mode
[  374.328277][ T9688] team_slave_0: left allmulticast mode
[  374.334975][ T9688] team_slave_1: left allmulticast mode
[  374.349731][ T9688] 8021q: adding VLAN 0 to HW filter on device team0
[  374.360269][ T9688] bond12: (slave team0): Enslaving as an active interface with an up link
[  374.382487][ T9697] bond12: entered promiscuous mode
[  374.387763][ T9697] team0: entered promiscuous mode
[  374.392985][ T9697] team_slave_0: entered promiscuous mode
[  374.398866][ T9697] team_slave_1: entered promiscuous mode
[  374.405087][ T9697] bond12: entered allmulticast mode
[  374.410373][ T9697] team0: entered allmulticast mode
[  374.416306][ T9697] team_slave_0: entered allmulticast mode
[  374.422209][ T9697] team_slave_1: entered allmulticast mode
[  375.552502][ T9715] trusted_key: encrypted_key: insufficient parameters specified
[  375.617263][ T9717] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1014'.
[  375.908259][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'.
[  375.949059][ T9728] 8021q: adding VLAN 0 to HW filter on device bond9
[  375.995116][ T9733] bond8: (slave team0): Releasing backup interface
[  376.012787][ T9733] team0: left promiscuous mode
[  376.024643][ T9733] team_slave_0: left promiscuous mode
[  376.030224][ T9733] team_slave_1: left promiscuous mode
[  376.040729][ T9733] team0: left allmulticast mode
[  376.042711][ T5818] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  376.048559][ T9733] team_slave_0: left allmulticast mode
[  376.058754][ T9733] team_slave_1: left allmulticast mode
[  376.074168][ T9733] 8021q: adding VLAN 0 to HW filter on device team0
[  376.086209][ T9733] bond9: (slave team0): Enslaving as an active interface with an up link
[  376.108553][ T9728] bond9: entered promiscuous mode
[  376.113749][ T9728] team0: entered promiscuous mode
[  376.118819][ T9728] team_slave_0: entered promiscuous mode
[  376.127204][ T9728] team_slave_1: entered promiscuous mode
[  376.133308][ T9728] bond9: entered allmulticast mode
[  376.138453][ T9728] team0: entered allmulticast mode
[  376.143739][ T9728] team_slave_0: entered allmulticast mode
[  376.149505][ T9728] team_slave_1: entered allmulticast mode
[  376.271572][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.299879][ T5818] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  376.326126][ T5818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  376.335523][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.353559][ T5818] usb 4-1: Product: syz
[  376.358295][ T5818] usb 4-1: Manufacturer: syz
[  376.363081][ T5818] usb 4-1: SerialNumber: syz
[  376.374600][ T5818] cdc_mbim 4-1:1.0: skipping garbage
[  376.739741][ T9721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  377.276437][ T9750] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1023'.
[  377.381321][ T9752] trusted_key: encrypted_key: insufficient parameters specified
[  377.489824][ T5818] cdc_mbim 4-1:1.0: bind() failure
[  377.516549][ T5818] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  377.556151][ T5818] cdc_ncm 4-1:1.1: bind() failure
[  377.572628][ T5818] usb 4-1: USB disconnect, device number 9
[  377.988137][ T9771] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1032'.
[  378.140510][ T9776] trusted_key: encrypted_key: insufficient parameters specified
[  378.746358][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.752911][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  379.168220][ T9789] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1041'.
[  379.611581][ T5818] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  379.834191][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.581982][ T5818] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  380.596713][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  380.606177][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.614554][ T5818] usb 1-1: Product: syz
[  380.618773][ T5818] usb 1-1: Manufacturer: syz
[  380.623936][ T5818] usb 1-1: SerialNumber: syz
[  380.635276][ T5818] cdc_mbim 1-1:1.0: skipping garbage
[  380.790271][ T9813] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1051'.
[  380.838983][ T9797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  381.176126][ T9826] 9pnet_fd: Insufficient options for proto=fd
[  381.282498][ T9826] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  381.509450][ T5818] cdc_mbim 1-1:1.0: bind() failure
[  381.770845][ T5818] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  381.855833][ T5818] cdc_ncm 1-1:1.1: bind() failure
[  381.981705][ T5818] usb 1-1: USB disconnect, device number 10
[  382.858679][ T9840] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1061'.
[  383.432543][ T9854] syzkaller0: entered promiscuous mode
[  383.447211][ T9854] syzkaller0: entered allmulticast mode
[  383.572127][ T9860] 9pnet_fd: Insufficient options for proto=fd
[  383.665278][ T9860] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  383.802982][ T5818] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  384.102286][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.146867][ T5818] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  384.233512][ T5818] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  384.287591][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.335213][ T5818] usb 4-1: Product: syz
[  384.363360][ T5818] usb 4-1: Manufacturer: syz
[  384.379001][ T5818] usb 4-1: SerialNumber: syz
[  384.454814][ T5818] cdc_mbim 4-1:1.0: skipping garbage
[  384.559593][ T9862] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1070'.
[  384.659570][ T9859] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  385.104880][ T5818] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  385.183035][ T5818] cdc_mbim 4-1:1.0: bind() failure
[  385.322449][ T5818] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  385.368025][ T5818] cdc_ncm 4-1:1.1: bind() failure
[  385.482493][ T5818] usb 4-1: USB disconnect, device number 10
[  386.490405][ T9882] random: crng reseeded on system resumption
[  387.280851][ T5818] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  387.408476][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'.
[  387.473846][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.496529][ T5818] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  387.507687][ T9887] 8021q: adding VLAN 0 to HW filter on device bond12
[  387.522135][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.531316][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.539348][ T5818] usb 1-1: Product: syz
[  387.544610][ T5818] usb 1-1: Manufacturer: syz
[  387.549250][ T5818] usb 1-1: SerialNumber: syz
[  387.573031][ T5818] cdc_mbim 1-1:1.0: skipping garbage
[  387.588133][ T9888] bond11: (slave team0): Releasing backup interface
[  387.625734][ T9888] team0: left promiscuous mode
[  387.630595][ T9888] team_slave_0: left promiscuous mode
[  387.630790][ T9888] team_slave_1: left promiscuous mode
[  387.647957][ T9888] team0: left allmulticast mode
[  387.654030][ T9888] team_slave_0: left allmulticast mode
[  387.659804][ T9888] team_slave_1: left allmulticast mode
[  387.674811][ T9888] 8021q: adding VLAN 0 to HW filter on device team0
[  387.694156][ T9888] bond12: (slave team0): Enslaving as an active interface with an up link
[  387.736729][ T9885] bond12: entered promiscuous mode
[  387.751250][ T9885] team0: entered promiscuous mode
[  387.756345][ T9885] team_slave_0: entered promiscuous mode
[  387.772383][ T9885] team_slave_1: entered promiscuous mode
[  387.778436][ T9885] bond12: entered allmulticast mode
[  387.784789][ T9895] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  387.794460][ T9885] team0: entered allmulticast mode
[  387.799669][ T9885] team_slave_0: entered allmulticast mode
[  387.807766][ T9885] team_slave_1: entered allmulticast mode
[  388.228201][ T5818] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS
[  388.234620][ T5818] cdc_mbim 1-1:1.0: bind() failure
[  388.246210][ T5818] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  388.253380][ T5818] cdc_ncm 1-1:1.1: bind() failure
[  388.266017][ T5818] usb 1-1: USB disconnect, device number 11
[  389.717795][ T9917] overlayfs: failed to clone lowerpath
[  389.869550][ T9923] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1093'.
[  390.401382][  T173] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  390.578897][ T5085] Bluetooth: hci2: unexpected event for opcode 0x201c
[  390.606768][  T173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.630526][  T173] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  390.647758][  T173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  390.657141][  T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.667296][  T173] usb 3-1: Product: syz
[  390.671559][  T173] usb 3-1: Manufacturer: syz
[  390.676286][  T173] usb 3-1: SerialNumber: syz
[  390.687105][  T173] cdc_mbim 3-1:1.0: skipping garbage
[  390.896849][ T9934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  391.313173][  T173] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS
[  391.325099][  T173] cdc_mbim 3-1:1.0: bind() failure
[  391.349081][  T173] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  391.386013][  T173] cdc_ncm 3-1:1.1: bind() failure
[  391.414335][  T173] usb 3-1: USB disconnect, device number 12
[  392.902917][ T9955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1103'.
[  394.391029][ T5835] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  395.274243][ T5835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.292952][ T5835] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  395.352006][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  395.395811][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.446623][ T5835] usb 4-1: Product: syz
[  395.472766][ T5835] usb 4-1: Manufacturer: syz
[  395.497492][ T5835] usb 4-1: SerialNumber: syz
[  395.609214][ T5835] cdc_mbim 4-1:1.0: skipping garbage
[  395.816211][ T9973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  396.556441][ T9973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  396.638237][ T5835] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  396.679988][ T5835] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  396.910200][ T5835] wwan wwan0: port wwan0mbim0 attached
[  397.260436][ T5835] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1a:3a:12:cf:fb:8d
[  397.631421][ T5835] usb 4-1: USB disconnect, device number 11
[  397.767252][ T5835] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  398.443584][ T5835] wwan wwan0: port wwan0mbim0 disconnected
[  398.576816][ T9987] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1115'.
[  398.806955][T10002] trusted_key: encrypted_key: hex blob is missing
[  399.270226][T10017] ieee802154 phy0 wpan0: encryption failed: -22
[  399.601145][  T173] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  399.862236][  T173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.916034][  T173] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  400.003915][  T173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  400.038979][  T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.087389][  T173] usb 3-1: Product: syz
[  400.109724][  T173] usb 3-1: Manufacturer: syz
[  400.127471][  T173] usb 3-1: SerialNumber: syz
[  400.155854][  T173] cdc_mbim 3-1:1.0: skipping garbage
[  400.357843][T10015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.782080][T10038] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1130'.
[  400.973542][T10015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  400.991682][  T173] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  400.999322][  T173] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  401.023541][  T173] wwan wwan0: port wwan0mbim0 attached
[  401.058474][  T173] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 92:d6:19:c9:c1:c4
[  401.111560][T10047] trusted_key: encrypted_key: hex blob is missing
[  401.248206][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.254986][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.261508][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.268247][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.274677][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.281411][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.287883][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.294619][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.301027][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.307755][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.314184][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.320923][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.327338][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.334071][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.340544][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.347313][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.353926][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.360751][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.367294][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  401.374013][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  401.386047][   T23] usb 3-1: USB disconnect, device number 13
[  401.397549][   T23] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  401.537705][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  402.805040][T10074] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1139'.
[  402.981242][T10079] trusted_key: encrypted_key: hex blob is missing
[  403.176602][T10082] overlay: filesystem on ./file0 not supported as upperdir
[  403.363912][T10094] random: crng reseeded on system resumption
[  405.473386][   T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  405.773487][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.817071][   T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  405.847861][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.877743][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.892801][T10107] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1150'.
[  405.912287][   T23] usb 2-1: Product: syz
[  405.916500][   T23] usb 2-1: Manufacturer: syz
[  405.948271][   T23] usb 2-1: SerialNumber: syz
[  405.976427][   T23] cdc_mbim 2-1:1.0: skipping garbage
[  406.115402][T10111] trusted_key: encrypted_key: hex blob is missing
[  406.184047][T10103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.311585][T10113] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[  406.841283][T10103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.848975][   T23] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  406.858954][   T23] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  406.883002][   T23] wwan wwan0: port wwan0mbim0 attached
[  406.916429][   T23] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 5e:ca:d6:85:fc:90
[  407.081567][    C0] wdm_int_callback: 5 callbacks suppressed
[  407.081590][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  407.094187][    C0] wdm_int_callback: 5 callbacks suppressed
[  407.094206][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  407.106526][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  407.113258][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  407.119691][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  407.126452][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  407.132961][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  407.139697][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  407.145977][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  407.160608][   T23] usb 2-1: USB disconnect, device number 12
[  407.184534][   T23] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  407.318247][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  407.476216][T10135] random: crng reseeded on system resumption
[  408.159570][T10140] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1160'.
[  408.484664][T10146] trusted_key: encrypted_key: hex blob is missing
[  408.788626][T10153] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[  409.427717][T10179] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1172'.
[  409.442317][T10178] trusted_key: encrypted_key: hex blob is missing
[  409.491061][ T5815] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  409.727719][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.758170][T10187] tmpfs: Unknown parameter 'nr_blhcks'
[  409.795441][ T5815] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  410.624596][   T28] audit: type=1800 audit(1785675624.245:16): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1173" name="file0" dev="overlay" ino=1622 res=0 errno=0
[  410.649271][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  410.702001][T10192] random: crng reseeded on system resumption
[  411.110554][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.118703][ T5815] usb 1-1: Product: syz
[  411.123061][ T5815] usb 1-1: Manufacturer: syz
[  411.127708][ T5815] usb 1-1: SerialNumber: syz
[  411.137868][ T5815] cdc_mbim 1-1:1.0: skipping garbage
[  411.352124][T10172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  411.664434][T10204] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[  411.785938][ T5815] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS
[  411.797462][ T5815] cdc_mbim 1-1:1.0: bind() failure
[  411.835195][ T5815] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  411.861191][ T5815] cdc_ncm 1-1:1.1: bind() failure
[  411.900335][ T5815] usb 1-1: USB disconnect, device number 12
[  412.016636][T10218] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1181'.
[  412.188303][T10222] trusted_key: encrypted_key: hex blob is missing
[  412.547788][T10236] random: crng reseeded on system resumption
[  413.129234][T10237] Bluetooth: hci0: unsupported parameter 255
[  413.238986][T10237] Bluetooth: hci0: unsupported parameter 255
[  414.191990][T10250] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1191'.
[  414.368693][T10257] 9pnet_fd: Insufficient options for proto=fd
[  414.387112][T10260] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  414.597455][T10269] random: crng reseeded on system resumption
[  414.664572][ T5815] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  414.744746][T10267] Bluetooth: hci0: unsupported parameter 255
[  414.780386][T10267] Bluetooth: hci0: unsupported parameter 255
[  415.705925][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.803862][ T5815] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  416.111319][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.120530][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.150993][ T5815] usb 4-1: Product: syz
[  416.155317][ T5815] usb 4-1: Manufacturer: syz
[  416.159949][ T5815] usb 4-1: SerialNumber: syz
[  416.176716][ T5815] cdc_mbim 4-1:1.0: skipping garbage
[  416.315546][T10282] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  416.378853][T10255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  416.827367][ T5815] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  416.851765][ T5815] cdc_mbim 4-1:1.0: bind() failure
[  416.860689][ T5815] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  416.899537][ T5815] cdc_ncm 4-1:1.1: bind() failure
[  416.925935][ T5815] usb 4-1: USB disconnect, device number 12
[  417.322199][T10292] 9pnet_fd: Insufficient options for proto=fd
[  417.702527][T10298] Bluetooth: hci0: unsupported parameter 255
[  417.724139][T10298] Bluetooth: hci0: unsupported parameter 255
[  418.145667][T10309] overlayfs: overlapping lowerdir path
[  418.200105][T10310] random: crng reseeded on system resumption
[  421.252482][T10322] 9pnet_fd: Insufficient options for proto=fd
[  421.411346][   T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  421.602898][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.621129][   T23] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  421.653986][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  421.663653][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.687227][   T23] usb 1-1: Product: syz
[  421.706941][   T23] usb 1-1: Manufacturer: syz
[  422.672964][   T23] usb 1-1: SerialNumber: syz
[  422.697145][   T23] cdc_mbim 1-1:1.0: skipping garbage
[  422.799587][T10342] overlayfs: overlapping lowerdir path
[  422.810147][T10342] random: crng reseeded on system resumption
[  422.887010][T10344] 9pnet_fd: Insufficient options for proto=fd
[  422.982999][T10317] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  424.178294][T10347] pim6reg: entered allmulticast mode
[  424.337575][T10347] pim6reg: left allmulticast mode
[  424.569164][T10355] overlay: Unknown parameter '/'
[  424.618476][T10355] bridge_slave_0: default FDB implementation only supports local addresses
[  424.908701][T10367] syzkaller0: entered promiscuous mode
[  424.914487][T10367] syzkaller0: entered allmulticast mode
[  425.180217][T10379] overlayfs: overlapping lowerdir path
[  425.204135][   T23] cdc_mbim 1-1:1.0: bind() failure
[  425.210405][T10379] random: crng reseeded on system resumption
[  425.393351][   T23] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  425.500982][   T23] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  425.653507][   T23] usbtest: probe of 1-1:1.1 failed with error -71
[  426.103888][   T23] usb 1-1: USB disconnect, device number 13
[  427.056039][T10413] 9pnet_fd: Insufficient options for proto=fd
[  427.136135][T10414] random: crng reseeded on system resumption
[  428.680514][T10440] 9pnet_fd: Insufficient options for proto=fd
[  428.872769][T10450] random: crng reseeded on system resumption
[  429.036180][T10454] fuse: Bad value for 'fd'
[  430.174571][T10474] 9pnet_fd: Insufficient options for proto=fd
[  430.376357][T10489] random: crng reseeded on system resumption
[  431.321644][ T5085] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  431.327947][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout
[  431.563329][T10505] 9pnet_fd: Insufficient options for proto=fd
[  431.995432][T10520] 8021q: adding VLAN 0 to HW filter on device batadv1
[  432.518888][T10511] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  432.544340][T10511] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  432.596369][T10511] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  433.100401][  T789] kernel write not supported for file /snd/seq (pid: 789 comm: kworker/1:2)
[  434.351631][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  434.413260][T10548] random: crng reseeded on system resumption
[  434.581144][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout
[  434.673582][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  434.736354][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'.
[  435.054969][  T789] kernel write not supported for file /snd/seq (pid: 789 comm: kworker/1:2)
[  436.177911][T10580] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  436.187568][T10580] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  436.201565][T10580] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  436.212946][T10580] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  436.524367][   T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0)
[  437.391394][ T5085] Bluetooth: hci0: command 0x0c1a tx timeout
[  437.608412][T10617] random: crng reseeded on system resumption
[  437.645316][T10618] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  437.653527][T10618] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1317'.
[  438.311579][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  438.312342][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout
[  438.320409][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  439.989972][T10629] ieee802154 phy0 wpan0: encryption failed: -22
[  440.186812][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  440.194687][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  440.644374][T10623] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  440.725528][T10623] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  440.731839][T10623] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  440.738100][T10623] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  441.128845][   T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0)
[  441.224842][T10658] random: crng reseeded on system resumption
[  441.281042][  T173] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  441.941016][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  443.332011][  T173] usb 1-1: Dual-Role OTG device on HNP port
[  443.708841][  T173] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  443.718133][  T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.754087][  T173] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:89:f8:dd:80:5b
[  443.811138][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout
[  443.817414][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  443.825061][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  443.968306][T10676] ieee802154 phy0 wpan0: encryption failed: -22
[  444.728815][ T5815] kernel write not supported for file /snd/seq (pid: 5815 comm: kworker/0:3)
[  445.029026][T10712] ieee802154 phy0 wpan0: encryption failed: -22
[  445.847687][T10711] random: crng reseeded on system resumption
[  447.196597][T10738] 9pnet_fd: Insufficient options for proto=fd
[  447.366729][T10744] random: crng reseeded on system resumption
[  449.002122][T10781] 9pnet_fd: Insufficient options for proto=fd
[  449.136765][T10788] random: crng reseeded on system resumption
[  453.124626][T10865] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1389'.
[  454.916498][T10891] overlay: filesystem on ./file0 not supported as upperdir
[  455.699540][T10900] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1403'.
[  460.648752][T10936] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  460.656686][T10936] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1414'.
[  460.941823][T10923] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  461.058275][T10923] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  461.165790][T10923] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  461.641545][T10944] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1416'.
[  461.863225][T10945] overlay: filesystem on ./file0 not supported as upperdir
[  462.261091][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  462.267280][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  462.398120][T10969] netlink: 'syz.3.1423': attribute type 1 has an invalid length.
[  462.406277][T10969] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1423'.
[  462.445358][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  463.061421][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout
[  463.203095][T10970] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  463.220757][T10970] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  463.227831][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  463.251844][T10970] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  463.443824][T10975] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  463.524952][T10979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1426'.
[  463.703459][T10984] syzkaller0: entered promiscuous mode
[  463.719353][T10984] syzkaller0: entered allmulticast mode
[  463.812082][T10981] overlayfs: failed to resolve './file2': -2
[  464.247208][T10999] netlink: 'syz.2.1434': attribute type 1 has an invalid length.
[  464.255195][T10999] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1434'.
[  464.623259][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  464.635263][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  464.741381][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  465.228476][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  465.301071][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  465.471444][T11010] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  465.512467][T11004] Bluetooth: hci0: Opcode 0x0c1a failed: -112
[  465.715767][T11017] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1439'.
[  466.160166][T11004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  466.254817][T11004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  466.311354][T11004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  466.604088][T11025] overlay: filesystem on ./file0 not supported as upperdir
[  466.934331][T11044] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  466.942429][T11044] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1446'.
[  467.392068][T11049] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  467.552885][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  467.559390][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  467.663096][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  468.261170][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  468.341125][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  469.621123][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  469.913444][T11081] overlay: filesystem on ./file0 not supported as upperdir
[  469.977572][T11098] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  469.985586][T11098] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1459'.
[  471.521173][    T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  471.718089][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.747817][    T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  471.777808][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  471.809130][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.824590][    T8] usb 4-1: Product: syz
[  471.839474][    T8] usb 4-1: Manufacturer: syz
[  471.850648][    T8] usb 4-1: SerialNumber: syz
[  471.874829][    T8] cdc_mbim 4-1:1.0: skipping garbage
[  472.077928][T11110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  472.704242][T11110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  472.713580][    T8] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  472.733682][    T8] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  472.750815][    T8] wwan wwan0: port wwan0mbim0 attached
[  472.777044][    T8] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 86:00:12:73:71:60
[  472.925855][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  472.932639][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  472.939252][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  472.945989][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  472.953191][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  472.959926][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  472.966324][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  472.973062][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  472.992560][   T23] usb 4-1: USB disconnect, device number 13
[  473.011363][   T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  473.172705][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  473.434298][T11143] netlink: 'syz.1.1473': attribute type 1 has an invalid length.
[  473.442225][T11143] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1473'.
[  474.711935][T11142] overlay: filesystem on ./file0 not supported as upperdir
[  476.040605][T11197] netlink: 'syz.3.1484': attribute type 1 has an invalid length.
[  476.048636][T11197] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1484'.
[  477.869056][T11216] syzkaller0: entered promiscuous mode
[  477.879055][T11216] syzkaller0: entered allmulticast mode
[  479.022973][T11243] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  479.030846][T11243] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1495'.
[  480.120321][T11257] overlayfs: failed to clone lowerpath
[  482.111175][T11270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  482.120157][T11270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  482.213315][T11270] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  482.343455][    T9] kernel write not supported for file /1059/clear_refs (pid: 9 comm: kworker/0:1)
[  482.821067][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  482.827778][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  483.797525][T11292] netlink: 'syz.2.1510': attribute type 1 has an invalid length.
[  483.805585][T11292] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1510'.
[  484.179932][T11294] fuse: Bad value for 'fd'
[  484.181100][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  484.192041][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  484.261152][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  485.331235][   T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  485.519323][T11310] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  485.545090][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.560994][   T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  485.584927][   T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  485.594763][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.615578][   T23] usb 3-1: Product: syz
[  485.619837][   T23] usb 3-1: Manufacturer: syz
[  485.639112][   T23] usb 3-1: SerialNumber: syz
[  485.661267][   T23] cdc_mbim 3-1:1.0: skipping garbage
[  485.865719][T11302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  486.112432][T11306] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  486.122112][ T5815] kernel write not supported for file /972/clear_refs (pid: 5815 comm: kworker/0:3)
[  486.160106][T11306] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  486.192888][T11306] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  486.215395][T11314] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  486.507963][T11302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  486.542445][   T23] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  486.970813][   T23] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  487.028028][   T23] wwan wwan0: port wwan0mbim0 attached
[  487.067106][   T23] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:69:3d:fe:04:cd
[  487.092943][   T23] usb 3-1: USB disconnect, device number 14
[  487.100467][   T23] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  487.353436][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  487.464117][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  487.470416][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  487.541286][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  488.181885][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  488.261062][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  488.403255][T11326] netlink: 'syz.1.1522': attribute type 1 has an invalid length.
[  488.416889][T11326] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1522'.
[  488.822188][T11346] overlay: filesystem on ./file0 not supported as upperdir
[  489.120680][T11354] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  489.293573][ T5815] usb 1-1: USB disconnect, device number 14
[  489.370522][ T5815] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  490.301297][T11374] netlink: 'syz.2.1532': attribute type 1 has an invalid length.
[  490.309167][T11374] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1532'.
[  490.391142][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  490.603774][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.644827][   T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  490.663624][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  490.680981][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.689027][   T23] usb 2-1: Product: syz
[  490.693082][ T5815] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  490.693388][   T23] usb 2-1: Manufacturer: syz
[  490.705462][   T23] usb 2-1: SerialNumber: syz
[  490.747209][   T23] cdc_mbim 2-1:1.0: skipping garbage
[  490.892116][    T8] kernel write not supported for file /1037/clear_refs (pid: 8 comm: kworker/0:0)
[  491.681727][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  491.711459][ T5815] usb 1-1: Dual-Role OTG device on HNP port
[  491.732478][ T5815] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  491.802065][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.829962][T11385] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  491.938708][ T5815] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:89:f8:dd:80:5b
[  492.259215][T11391] overlay: filesystem on ./file0 not supported as upperdir
[  492.370620][T11370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  492.389080][   T23] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  492.409279][   T23] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  492.460860][   T23] wwan wwan0: port wwan0mbim0 attached
[  492.507687][   T23] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0a:fe:ca:fb:79:5e
[  492.630041][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  492.636840][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  492.643365][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  492.650101][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  492.656520][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  492.663264][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  492.669717][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  492.676451][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  492.682742][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  492.730401][   T23] usb 2-1: USB disconnect, device number 13
[  492.770122][   T23] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  492.900556][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  493.081906][T11408] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  493.811147][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  493.821717][T11437] syzkaller0: entered promiscuous mode
[  493.827248][T11437] syzkaller0: entered allmulticast mode
[  493.864831][T11437] 0: reclassify loop, rule prio 0, protocol 700
[  493.896866][T11439] overlay: filesystem on ./file0 not supported as upperdir
[  494.030987][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.061154][   T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  494.089424][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  494.118998][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.149830][   T23] usb 4-1: Product: syz
[  494.164957][   T23] usb 4-1: Manufacturer: syz
[  494.185082][   T23] usb 4-1: SerialNumber: syz
[  494.228626][   T23] cdc_mbim 4-1:1.0: skipping garbage
[  494.418571][T11432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  494.691031][ T5815] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  494.877810][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.936034][ T5815] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  495.042194][ T5815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  495.081789][T11432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  495.099631][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.152839][   T23] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  495.166482][ T5815] usb 2-1: Product: syz
[  495.196222][ T5815] usb 2-1: Manufacturer: syz
[  495.254574][ T5815] usb 2-1: SerialNumber: syz
[  495.341306][   T23] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  495.352448][ T5815] cdc_mbim 2-1:1.0: skipping garbage
[  495.358412][   T23] wwan wwan0: port wwan0mbim0 attached
[  495.379118][   T23] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9e:01:53:51:84:9f
[  495.402912][   T23] usb 4-1: USB disconnect, device number 14
[  495.409867][   T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  495.563068][T11458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  495.603971][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  496.188642][T11458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  496.202712][ T5815] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  496.228304][ T5815] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  496.260124][ T5815] wwan wwan0: port wwan0mbim0 attached
[  496.309142][ T5815] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 96:4c:b7:04:ee:29
[  496.443153][T11491] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  496.453352][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.460199][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.466641][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.473387][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.479892][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.486634][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.493077][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.499825][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.506571][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.513295][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.519789][    C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  496.526517][    C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  496.551298][ T5815] usb 2-1: USB disconnect, device number 14
[  496.558206][ T5815] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  496.733674][ T5815] wwan wwan0: port wwan0mbim0 disconnected
[  496.802748][T11502] overlay: filesystem on ./file0 not supported as upperdir
[  498.502474][T11542] fuse: Bad value for 'fd'
[  499.364349][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.398768][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.359563][T11596] fuse: Bad value for 'fd'
[  501.627648][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.634619][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  501.809239][T11627] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  501.867011][T11625] syzkaller0: entered promiscuous mode
[  501.883244][T11625] syzkaller0: entered allmulticast mode
[  503.227547][T11660] fuse: Bad value for 'fd'
[  503.232308][ T5815] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  503.457924][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.487072][ T5815] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  503.523454][ T5815] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  503.543533][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.560411][ T5815] usb 3-1: Product: syz
[  503.571310][ T5815] usb 3-1: Manufacturer: syz
[  503.581283][ T5815] usb 3-1: SerialNumber: syz
[  503.610643][ T5815] cdc_mbim 3-1:1.0: skipping garbage
[  504.401819][T11670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  505.623264][T11698] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  506.471077][   T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  506.649869][ T5815] cdc_mbim 3-1:1.0: bind() failure
[  506.687155][ T5815] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  506.690388][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.710864][   T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  506.716971][ T5815] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  506.743945][ T5815] usbtest: probe of 3-1:1.1 failed with error -71
[  506.770660][   T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  506.783651][ T5815] usb 3-1: USB disconnect, device number 15
[  506.803083][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.819691][   T27] usb 2-1: Product: syz
[  506.826843][   T27] usb 2-1: Manufacturer: syz
[  506.843188][   T27] usb 2-1: SerialNumber: syz
[  506.879778][   T27] cdc_mbim 2-1:1.0: skipping garbage
[  507.121772][T11713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  507.830441][T11713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  507.961065][   T27] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  507.993644][   T27] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  508.021496][   T27] wwan wwan0: port wwan0mbim0 attached
[  508.651422][   T27] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 02:1d:23:fb:b0:e3
[  508.698450][   T27] usb 2-1: USB disconnect, device number 15
[  508.717343][   T27] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  508.873919][   T27] wwan wwan0: port wwan0mbim0 disconnected
[  508.899151][T11751] syzkaller0: entered promiscuous mode
[  508.917411][T11751] syzkaller0: entered allmulticast mode
[  509.115342][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.134528][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.811092][  T173] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  511.003322][  T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.014653][  T173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  511.053086][  T173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  511.080948][  T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.115914][  T173] usb 4-1: Product: syz
[  511.126331][  T173] usb 4-1: Manufacturer: syz
[  511.136212][  T173] usb 4-1: SerialNumber: syz
[  511.161612][  T173] cdc_mbim 4-1:1.0: skipping garbage
[  511.218380][T11800] syzkaller0: entered promiscuous mode
[  511.224462][T11800] syzkaller0: entered allmulticast mode
[  511.359104][T11785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  511.982461][T11785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  511.997402][  T173] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  512.006364][  T173] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  512.019556][  T173] wwan wwan0: port wwan0mbim0 attached
[  513.658519][  T173] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, e6:59:e1:e6:ba:cc
[  513.691193][  T173] usb 4-1: USB disconnect, device number 15
[  513.717339][  T173] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  513.883677][  T173] wwan wwan0: port wwan0mbim0 disconnected
[  514.191352][   T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  514.661926][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.856455][   T23] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  515.042044][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  515.058772][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.101232][   T23] usb 2-1: Product: syz
[  515.105550][   T23] usb 2-1: Manufacturer: syz
[  515.110236][   T23] usb 2-1: SerialNumber: syz
[  515.140870][T11836] syzkaller0: entered promiscuous mode
[  515.147091][T11836] syzkaller0: entered allmulticast mode
[  515.169186][   T23] cdc_mbim 2-1:1.0: skipping garbage
[  515.374768][T11826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  515.409046][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.448163][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.932882][T11857] syzkaller0: entered promiscuous mode
[  515.938431][T11857] syzkaller0: entered allmulticast mode
[  515.991681][T11826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  516.017772][   T23] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  516.027790][   T23] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  516.061538][   T23] wwan wwan0: port wwan0mbim0 attached
[  516.161238][   T23] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0e:74:05:a9:f2:ee
[  516.258584][   T23] usb 2-1: USB disconnect, device number 16
[  516.273231][   T23] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  516.418946][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  518.491301][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  518.671187][   T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  518.716522][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.729983][   T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  518.748351][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  518.765324][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.773915][   T23] usb 4-1: Product: syz
[  518.778403][   T23] usb 4-1: Manufacturer: syz
[  518.783114][   T23] usb 4-1: SerialNumber: syz
[  518.799031][   T23] cdc_mbim 4-1:1.0: skipping garbage
[  518.873855][   T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.886426][   T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  518.899576][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  518.908860][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.917023][   T27] usb 3-1: Product: syz
[  518.921330][   T27] usb 3-1: Manufacturer: syz
[  518.926020][   T27] usb 3-1: SerialNumber: syz
[  518.940592][   T27] cdc_mbim 3-1:1.0: skipping garbage
[  518.998124][T11892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  519.142881][T11900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  519.625500][T11892] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  519.657259][   T23] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  519.801350][T11900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  520.275521][   T27] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  520.509563][   T23] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  520.529473][   T27] cdc_mbim 3-1:1.0: cdc-wdm1: USB WDM device
[  520.538940][   T23] wwan wwan0: port wwan0mbim0 attached
[  520.548579][   T27] wwan wwan1: port wwan1mbim0 attached
[  520.568798][   T23] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7e:4f:2c:ce:ec:aa
[  520.604925][   T27] cdc_mbim 3-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, f6:e2:75:ca:29:1e
[  520.623911][   T23] usb 4-1: USB disconnect, device number 16
[  520.637951][   T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  520.661416][   T27] usb 3-1: USB disconnect, device number 16
[  520.761310][   T27] cdc_mbim 3-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  520.841984][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  520.924861][   T27] wwan wwan1: port wwan1mbim0 disconnected
[  522.306067][T11945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.315287][T11945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.078834][T11955] fuse: Bad value for 'fd'
[  526.143791][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.154206][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.352226][T11980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.405884][T11980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.612010][T11983] fuse: Bad value for 'fd'
[  530.901663][   T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  531.009265][T12019] fuse: Bad value for 'fd'
[  531.113782][   T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.124986][   T27] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  531.138442][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  531.148540][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.156743][   T27] usb 3-1: Product: syz
[  531.161091][   T27] usb 3-1: Manufacturer: syz
[  531.165816][   T27] usb 3-1: SerialNumber: syz
[  531.189046][   T27] cdc_mbim 3-1:1.0: skipping garbage
[  531.241652][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  531.397510][T12004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  531.453427][    T9] usb 2-1: Using ep0 maxpacket: 8
[  531.478159][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  531.521953][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  531.589029][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.641559][    T9] usb 2-1: config 0 descriptor??
[  532.358318][T12030] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  532.404628][   T27] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  532.463040][   T27] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  532.471227][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[  532.488226][   T27] wwan wwan0: port wwan0mbim0 attached
[  532.522038][   T27] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ba:b0:58:49:21:40
[  532.632204][    T9] usb 2-1: USB disconnect, device number 17
[  532.672310][    C0] wdm_int_callback: 2 callbacks suppressed
[  532.672332][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.685040][    C0] wdm_int_callback: 2 callbacks suppressed
[  532.685056][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.697461][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.704202][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.710622][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.717349][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.723800][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.730532][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.736936][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.743671][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.750140][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.756875][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.763339][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.770060][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.777150][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.783897][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.790718][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.797461][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.803888][    C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71
[  532.810607][    C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes
[  532.827266][   T27] usb 3-1: USB disconnect, device number 17
[  532.852941][   T27] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  532.957782][   T27] wwan wwan0: port wwan0mbim0 disconnected
[  533.579359][  T173] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  535.835506][  T173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.867450][  T173] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  535.980474][  T173] usb 4-1: string descriptor 0 read error: -71
[  536.011271][  T173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  536.020379][  T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.113874][  T173] usb 4-1: can't set config #1, error -71
[  536.160363][  T173] usb 4-1: USB disconnect, device number 17
[  537.398971][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.524233][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.663451][T12073] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1703'.
[  541.041324][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  541.264434][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.341446][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  541.434461][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  541.493096][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.539038][    T9] usb 3-1: Product: syz
[  541.576483][    T9] usb 3-1: Manufacturer: syz
[  541.622074][    T9] usb 3-1: SerialNumber: syz
[  541.716219][    T9] cdc_mbim 3-1:1.0: skipping garbage
[  542.022467][T12079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  542.041250][T12096] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  542.081275][T12096] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  542.117813][T12096] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  542.131391][T12096] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  542.664955][T12079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  543.448579][    T9] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  543.456330][    T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  543.462788][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  543.484320][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  543.520770][    T9] wwan wwan0: port wwan0mbim0 attached
[  543.536207][T12115] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1715'.
[  543.569744][    T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c6:52:01:58:be:80
[  543.662739][    T9] usb 3-1: USB disconnect, device number 18
[  543.700207][    T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  543.752117][ T5815] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  543.843527][    T9] wwan wwan0: port wwan0mbim0 disconnected
[  543.951143][ T5815] usb 2-1: Using ep0 maxpacket: 8
[  543.969923][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  543.998113][ T5815] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  544.021186][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.055491][ T5815] usb 2-1: config 0 descriptor??
[  544.101820][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  544.181681][T10621] Bluetooth: hci3: command 0x0406 tx timeout
[  544.187912][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  544.342664][ T5815] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  544.646189][    T9] usb 2-1: USB disconnect, device number 18
[  544.857856][T12137] syzkaller0: entered promiscuous mode
[  544.868446][T12137] syzkaller0: entered allmulticast mode
[  545.767574][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  545.994712][T12152] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1725'.
[  546.716574][T12145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  546.723974][T12145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  546.730803][T12145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  546.972867][T12167] overlay: filesystem on ./file0 not supported as upperdir
[  547.031107][  T789] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  547.276237][  T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  547.311611][  T789] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  547.423268][  T789] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  547.524972][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.632233][  T789] usb 2-1: Product: syz
[  547.680468][  T789] usb 2-1: Manufacturer: syz
[  547.741288][  T789] usb 2-1: SerialNumber: syz
[  547.804123][  T789] cdc_mbim 2-1:1.0: skipping garbage
[  547.993679][T12156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  548.022451][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  548.028908][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  548.031286][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  548.126498][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.148351][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.461651][T12185] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1737'.
[  548.620304][T12156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  548.652080][  T789] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  548.741547][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  548.747689][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout
[  549.397621][  T789] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  549.409099][  T789] wwan wwan0: port wwan0mbim0 attached
[  549.428798][  T789] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 5a:65:3c:4a:d9:a6
[  549.452851][  T789] usb 2-1: USB disconnect, device number 19
[  549.460336][  T789] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  549.655644][  T789] wwan wwan0: port wwan0mbim0 disconnected
[  549.727388][T12194] overlay: filesystem on ./file0 not supported as upperdir
[  550.249656][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  550.576495][T12211] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  550.662845][T12197] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  550.669426][T12197] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  550.685948][T12197] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  551.661185][ T5815] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  551.753038][T12239] overlay: filesystem on ./file0 not supported as upperdir
[  551.853141][ T5815] usb 2-1: Using ep0 maxpacket: 8
[  551.872612][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  551.885793][T12242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.899540][ T5815] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  551.911338][T12242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.931544][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.941068][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  551.941963][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  551.951517][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout
[  551.977283][ T5815] usb 2-1: config 0 descriptor??
[  552.213923][ T5815] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  552.741381][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  552.747592][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout
[  552.876153][ T5841] usb 2-1: USB disconnect, device number 20
[  553.631076][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'.
[  553.786187][T12254] 8021q: adding VLAN 0 to HW filter on device bond8
[  553.977900][T12261] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  554.057963][T12265] bond8: entered promiscuous mode
[  554.076633][T12265] dummy0: entered promiscuous mode
[  554.100835][T12265] bond8: entered allmulticast mode
[  554.115338][T12265] dummy0: entered allmulticast mode
[  554.136105][T12247] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  554.143836][T12247] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  554.149973][T12247] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  554.752037][T12284] syzkaller0: entered promiscuous mode
[  554.763278][T12284] syzkaller0: entered allmulticast mode
[  555.381114][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  555.387688][T10621] Bluetooth: hci0: command 0x0c1a tx timeout
[  555.424709][   T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  555.471023][T10621] Bluetooth: hci1: command 0x0406 tx timeout
[  555.740711][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.825909][   T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  556.010803][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  556.090984][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.151498][   T23] usb 4-1: Product: syz
[  556.155790][   T23] usb 4-1: Manufacturer: syz
[  556.160472][   T23] usb 4-1: SerialNumber: syz
[  556.191689][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  556.191704][T10621] Bluetooth: hci2: command 0x0c1a tx timeout
[  556.237756][   T23] cdc_mbim 4-1:1.0: skipping garbage
[  556.435194][T12286] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  556.455634][T12298] random: crng reseeded on system resumption
[  559.570133][T12286] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  559.651921][   T23] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  559.659673][   T23] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  559.675071][   T23] wwan wwan0: port wwan0mbim0 attached
[  559.703054][   T23] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 92:f6:24:8b:3b:4c
[  559.892890][    C1] wdm_int_callback: 16 callbacks suppressed
[  559.892914][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  559.905599][    C1] wdm_int_callback: 16 callbacks suppressed
[  559.905619][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  559.917978][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  559.924714][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  559.941790][   T23] usb 4-1: USB disconnect, device number 18
[  559.964094][   T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  560.071797][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  560.242252][T12313] overlay: filesystem on ./file0 not supported as upperdir
[  560.711243][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  560.866297][T12331] syzkaller0: entered promiscuous mode
[  560.904320][T12331] syzkaller0: entered allmulticast mode
[  562.111403][T12350] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  562.212469][T12354] syzkaller0: entered promiscuous mode
[  562.281459][T12354] syzkaller0: entered allmulticast mode
[  563.069430][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  563.230593][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  563.741385][T12378] random: crng reseeded on system resumption
[  563.807522][T12368] netdevsim netdevsim12 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.922008][T12389] overlay: filesystem on ./file0 not supported as upperdir
[  567.866286][T12405] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  571.441767][T12429] random: crng reseeded on system resumption
[  572.836667][T12444] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  573.811038][   T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  574.024148][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.040966][   T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  574.074450][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  574.083995][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.102644][   T23] usb 4-1: Product: syz
[  574.111220][   T23] usb 4-1: Manufacturer: syz
[  574.121280][   T23] usb 4-1: SerialNumber: syz
[  574.148641][   T23] cdc_mbim 4-1:1.0: skipping garbage
[  574.420760][T12456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.138731][T12456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  575.149897][   T23] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  575.181471][   T23] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  575.197167][   T23] wwan wwan0: port wwan0mbim0 attached
[  575.230411][   T23] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5a:7e:45:65:12:1c
[  575.447536][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.454308][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.460925][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.467667][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.474287][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.481012][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.487425][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.494145][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.500968][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.507698][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.514121][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.520852][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.530985][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.537734][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.550977][    C1] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  575.557729][    C1] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  575.574374][   T23] usb 4-1: USB disconnect, device number 19
[  575.636254][   T23] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  575.646343][T12494] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1810'.
[  575.669015][T12495] random: crng reseeded on system resumption
[  576.118736][   T23] wwan wwan0: port wwan0mbim0 disconnected
[  576.822326][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'.
[  576.994309][T12500] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  579.090992][ T5841] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  579.303098][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.330931][ T5841] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  579.399893][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  579.413934][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.454590][ T5841] usb 2-1: Product: syz
[  579.487010][ T5841] usb 2-1: Manufacturer: syz
[  579.535119][ T5841] usb 2-1: SerialNumber: syz
[  579.703269][ T5841] cdc_mbim 2-1:1.0: skipping garbage
[  579.913583][T12547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  580.394355][T12570] random: crng reseeded on system resumption
[  580.558301][T12547] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  580.582387][ T5841] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  581.677557][ T5841] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  581.687837][ T5841] wwan wwan0: port wwan0mbim0 attached
[  581.702138][ T5841] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 9e:fd:8d:62:88:74
[  581.731100][ T5841] usb 2-1: USB disconnect, device number 21
[  581.738217][ T5841] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  582.352519][ T5841] wwan wwan0: port wwan0mbim0 disconnected
[  582.394615][T12576] warn_alloc: 1 callbacks suppressed
[  582.394631][T12576] syz.0.1829: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  582.456592][T12576] CPU: 0 PID: 12576 Comm: syz.0.1829 Not tainted syzkaller #0
[  582.464218][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  582.474323][T12576] Call Trace:
[  582.477651][T12576]  <TASK>
[  582.480619][T12576]  dump_stack_lvl+0x18c/0x250
[  582.485483][T12576]  ? show_regs_print_info+0x20/0x20
[  582.490741][T12576]  ? load_image+0x420/0x420
[  582.495337][T12576]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  582.501811][T12576]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  582.508366][T12576]  warn_alloc+0x246/0x340
[  582.512765][T12576]  ? zone_watermark_ok_safe+0x230/0x230
[  582.518365][T12576]  ? _raw_spin_unlock+0x28/0x40
[  582.523338][T12576]  __vmalloc_node_range+0x661/0x1320
[  582.528701][T12576]  ? __alloc_pages+0xae/0x460
[  582.533425][T12576]  ? free_vm_area+0x50/0x50
[  582.537991][T12576]  ? packet_set_ring+0x717/0x23e0
[  582.543118][T12576]  vzalloc+0x79/0x90
[  582.547067][T12576]  ? packet_set_ring+0x717/0x23e0
[  582.552144][T12576]  packet_set_ring+0x717/0x23e0
[  582.557077][T12576]  ? packet_mmap+0x510/0x510
[  582.561720][T12576]  ? __lock_acquire+0x7d80/0x7d80
[  582.566796][T12576]  ? __local_bh_enable_ip+0x13a/0x1c0
[  582.572218][T12576]  ? lockdep_hardirqs_on+0x98/0x150
[  582.577469][T12576]  ? __might_fault+0xaa/0x120
[  582.582199][T12576]  ? __might_fault+0xc6/0x120
[  582.586919][T12576]  ? __might_fault+0xaa/0x120
[  582.591750][T12576]  ? _copy_from_user+0xa5/0xe0
[  582.596573][T12576]  packet_setsockopt+0xdb0/0x1500
[  582.601650][T12576]  ? packet_ioctl+0x350/0x350
[  582.606382][T12576]  ? aa_sk_perm+0x83c/0x970
[  582.610965][T12576]  ? __fget_files+0x28/0x460
[  582.615619][T12576]  ? aa_af_perm+0x330/0x330
[  582.620182][T12576]  ? __fget_files+0x28/0x460
[  582.624834][T12576]  ? aa_sock_opt_perm+0x74/0x100
[  582.629816][T12576]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  582.635414][T12576]  ? security_socket_setsockopt+0x7e/0xa0
[  582.641182][T12576]  ? packet_ioctl+0x350/0x350
[  582.645915][T12576]  do_sock_setsockopt+0x175/0x1a0
[  582.651055][T12576]  ? __fdget+0x180/0x210
[  582.655363][T12576]  __x64_sys_setsockopt+0x182/0x200
[  582.660617][T12576]  do_syscall_64+0x55/0xb0
[  582.665091][T12576]  ? clear_bhb_loop+0x40/0x90
[  582.669903][T12576]  ? clear_bhb_loop+0x40/0x90
[  582.674625][T12576]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.680558][T12576] RIP: 0033:0x7f9ea5f9e019
[  582.685012][T12576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.704682][T12576] RSP: 002b:00007f9ea41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  582.713156][T12576] RAX: ffffffffffffffda RBX: 00007f9ea6225fa0 RCX: 00007f9ea5f9e019
[  582.721170][T12576] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[  582.729185][T12576] RBP: 00007f9ea603500c R08: 000000000000001c R09: 0000000000000000
[  582.737194][T12576] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  582.745207][T12576] R13: 00007f9ea6226038 R14: 00007f9ea6225fa0 R15: 00007ffc896ece38
[  582.753254][T12576]  </TASK>
[  582.832972][T12576] Mem-Info:
[  582.837192][T12576] active_anon:74520 inactive_anon:0 isolated_anon:0
[  582.837192][T12576]  active_file:18063 inactive_file:40159 isolated_file:0
[  582.837192][T12576]  unevictable:768 dirty:25 writeback:0
[  582.837192][T12576]  slab_reclaimable:10819 slab_unreclaimable:97657
[  582.837192][T12576]  mapped:35211 shmem:69479 pagetables:733
[  582.837192][T12576]  sec_pagetables:0 bounce:0
[  582.837192][T12576]  kernel_misc_reclaimable:0
[  582.837192][T12576]  free:1263867 free_pcp:7431 free_cma:0
[  582.933500][T12576] Node 0 active_anon:296680kB inactive_anon:0kB active_file:72252kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141444kB dirty:100kB writeback:0kB shmem:274980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12364kB pagetables:2932kB sec_pagetables:0kB all_unreclaimable? no
[  582.983599][T12576] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  583.023977][T12576] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB
[  583.062081][T12576] lowmem_reserve[]: 0 2521 2522 2522 2522
[  583.068125][T12576] Node 0 DMA32 free:1136864kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:296332kB inactive_anon:0kB active_file:72252kB inactive_file:159620kB unevictable:1536kB writepending:100kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:11540kB local_pcp:7496kB free_cma:0kB
[  583.107959][T12576] lowmem_reserve[]: 0 0 0 0 0
[  583.113750][T12576] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  583.160471][T12576] lowmem_reserve[]: 0 0 0 0 0
[  583.169645][T12576] Node 1 Normal free:3901512kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21696kB local_pcp:10560kB free_cma:0kB
[  583.207475][T12576] lowmem_reserve[]: 0 0 0 0 0
[  583.212827][T12576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB
[  583.236136][T12576] Node 0 DMA32: 0*4kB 2*8kB (UM) 1319*16kB (UME) 309*32kB (UME) 267*64kB (UME) 284*128kB (UM) 153*256kB (UM) 129*512kB (UM) 69*1024kB (UM) 2*2048kB (M) 213*4096kB (ME) = 1136864kB
[  583.309194][T12576] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  583.366436][T12576] Node 1 Normal: 180*4kB (UME) 65*8kB (UME) 51*16kB (UME) 68*32kB (UME) 23*64kB (UME) 6*128kB (UME) 3*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3901512kB
[  583.394416][T12576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  583.410484][T12576] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  583.427510][T12576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  583.437633][T12576] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  583.469067][T12576] 126853 total pagecache pages
[  583.489386][T12576] 0 pages in swap cache
[  583.500895][T12576] Free swap  = 124448kB
[  583.505176][T12576] Total swap = 124996kB
[  583.509405][T12576] 2097051 pages RAM
[  583.534004][T12576] 0 pages HighMem/MovableOnly
[  583.538842][T12576] 416955 pages reserved
[  583.568934][T12576] 0 pages cma reserved
[  584.232654][ T5818] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  584.291152][T12608] random: crng reseeded on system resumption
[  584.512725][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  584.566128][ T5818] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  584.644076][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.500784][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.541152][ T5818] usb 2-1: Product: syz
[  586.545476][ T5818] usb 2-1: Manufacturer: syz
[  586.550153][ T5818] usb 2-1: SerialNumber: syz
[  586.663049][ T5818] cdc_mbim 2-1:1.0: skipping garbage
[  586.843304][T12600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  587.526166][T12600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  587.619154][ T5818] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  587.650329][ T5818] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  587.717589][ T5818] wwan wwan0: port wwan0mbim0 attached
[  587.825150][ T5818] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 72:a2:eb:5e:a3:64
[  587.955948][ T5818] usb 2-1: USB disconnect, device number 22
[  588.018905][ T5818] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  588.123187][ T5818] wwan wwan0: port wwan0mbim0 disconnected
[  588.982726][T12631] syzkaller0: entered promiscuous mode
[  588.998480][T12631] syzkaller0: entered allmulticast mode
[  590.302822][   T23] usb 1-1: USB disconnect, device number 15
[  590.375421][   T23] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  591.091284][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  591.303249][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.330973][ T5841] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  591.353966][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  591.370930][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.378977][ T5841] usb 2-1: Product: syz
[  591.400098][ T5841] usb 2-1: Manufacturer: syz
[  591.411164][ T5841] usb 2-1: SerialNumber: syz
[  591.426785][ T5841] cdc_mbim 2-1:1.0: skipping garbage
[  591.631956][T12661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  592.271358][T12661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  592.286238][ T5841] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  592.294776][ T5841] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  592.318417][ T5841] wwan wwan0: port wwan0mbim0 attached
[  593.714906][ T5841] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 1a:35:db:e5:71:ea
[  593.877721][T12684] random: crng reseeded on system resumption
[  594.121027][   T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  594.370110][   T23] usb 1-1: Dual-Role OTG device on HNP port
[  594.393477][   T23] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  594.472220][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.634541][   T23] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:89:f8:dd:80:5b
[  594.711986][T12692] overlayfs: missing 'lowerdir'
[  596.163623][ T5841] usb 2-1: USB disconnect, device number 23
[  596.170289][ T5841] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  596.843881][ T5841] wwan wwan0: port wwan0mbim0 disconnected
[  597.501260][ T5841] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  597.537874][T12744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  597.723583][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.762698][ T5841] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  597.795632][ T5841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  597.808876][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.827560][ T5841] usb 2-1: Product: syz
[  597.835453][ T5841] usb 2-1: Manufacturer: syz
[  597.850338][ T5841] usb 2-1: SerialNumber: syz
[  597.861877][ T5841] cdc_mbim 2-1:1.0: skipping garbage
[  597.972119][  T173] usb 1-1: USB disconnect, device number 16
[  598.125314][  T173] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  598.205146][T12752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  598.801012][  T173] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  598.830014][T12729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  598.844286][ T5841] cdc_mbim 2-1:1.0: setting tx_max = 16384
[  598.878126][ T5841] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  598.932960][ T5841] wwan wwan0: port wwan0mbim0 attached
[  599.008551][  T173] usb 1-1: Dual-Role OTG device on HNP port
[  599.014713][ T5841] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 56:75:17:6a:2b:db
[  599.060106][  T173] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  599.133312][  T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.173347][ T5841] usb 2-1: USB disconnect, device number 24
[  599.245184][ T5841] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  599.349563][  T173] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:89:f8:dd:80:5b
[  599.533244][ T5841] wwan wwan0: port wwan0mbim0 disconnected
[  599.957402][T12783] syzkaller0: entered promiscuous mode
[  599.976999][T12783] syzkaller0: entered allmulticast mode
[  600.002246][T12782] syzkaller0: entered promiscuous mode
[  600.007776][T12782] syzkaller0: entered allmulticast mode
[  604.842443][T12815] random: crng reseeded on system resumption
[  605.060254][T12814] overlayfs: missing 'lowerdir'
[  606.250950][ T5818] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  607.242342][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.273604][ T5818] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  607.311346][ T5818] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  607.320450][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.378592][ T5818] usb 3-1: Product: syz
[  607.391786][T12850] syzkaller0: entered promiscuous mode
[  607.419447][ T5818] usb 3-1: Manufacturer: syz
[  607.427539][T12850] syzkaller0: entered allmulticast mode
[  607.437863][ T5818] usb 3-1: SerialNumber: syz
[  607.510676][ T5818] cdc_mbim 3-1:1.0: skipping garbage
[  607.737460][T12817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  608.391596][T12817] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  608.486663][ T5818] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  608.551700][ T5818] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  608.770400][ T5818] wwan wwan0: port wwan0mbim0 attached
[  609.313951][ T5818] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2a:1e:7f:94:53:95
[  609.342968][ T5818] usb 3-1: USB disconnect, device number 20
[  609.349948][ T5818] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  609.671382][ T5818] wwan wwan0: port wwan0mbim0 disconnected
[  612.611801][T12896] random: crng reseeded on system resumption
[  615.565156][T12926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.586519][T12926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.369177][T12943] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  621.340413][T12976] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  621.371452][T12980] random: crng reseeded on system resumption
[  622.321235][ T5841] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  623.284130][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.301906][ T5841] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  623.333853][ T5841] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  623.343307][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.361157][ T5841] usb 4-1: Product: syz
[  623.371166][ T5841] usb 4-1: Manufacturer: syz
[  623.375836][ T5841] usb 4-1: SerialNumber: syz
[  623.390968][ T5818] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  623.422515][ T5841] cdc_mbim 4-1:1.0: skipping garbage
[  623.550435][T13023] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  623.608437][ T5818] usb 3-1: Using ep0 maxpacket: 8
[  623.619004][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  623.636598][ T5818] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  623.641908][T12994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  623.650983][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.708361][ T5818] usb 3-1: config 0 descriptor??
[  623.957539][ T5818] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  624.205075][ T5835] usb 3-1: USB disconnect, device number 21
[  624.289922][T12994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  624.403879][ T5841] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  624.624385][ T5841] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  624.650781][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.662600][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  625.276659][ T5841] wwan wwan0: port wwan0mbim0 attached
[  625.346489][ T5841] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, e2:fd:8a:ec:60:7f
[  625.409037][ T5841] usb 4-1: USB disconnect, device number 20
[  625.419667][T13051] syzkaller0: entered promiscuous mode
[  625.443235][ T5841] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  625.455300][T13051] syzkaller0: entered allmulticast mode
[  625.552800][ T5841] wwan wwan0: port wwan0mbim0 disconnected
[  626.454326][T13056] random: crng reseeded on system resumption
[  631.385394][T13095] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  633.591560][T13100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.611408][T13100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.131204][ T5841] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  635.726185][ T5841] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.164978][ T5841] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  638.186892][T13128] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  638.206553][T13130] random: crng reseeded on system resumption
[  638.421327][ T5841] usb 3-1: string descriptor 0 read error: -71
[  638.427706][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  638.448369][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.464831][ T5841] usb 3-1: can't set config #1, error -71
[  638.482436][ T5841] usb 3-1: USB disconnect, device number 22
[  640.070950][ T5835] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  642.851058][ T5835] usb 2-1: Using ep0 maxpacket: 8
[  642.878381][ T5835] usb 2-1: device descriptor read/all, error -71
[  642.900347][T13173] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  643.042507][T13179] syzkaller0: entered promiscuous mode
[  643.048090][T13179] syzkaller0: entered allmulticast mode
[  644.394690][T13200] random: crng reseeded on system resumption
[  649.025156][T13250] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  653.133957][T13286] random: crng reseeded on system resumption
[  657.551955][ T5815] usb 1-1: USB disconnect, device number 17
[  657.559074][ T5815] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  657.624522][ T6437] ==================================================================
[  657.632651][ T6437] BUG: KASAN: slab-use-after-free in strlen+0x57/0x70
[  657.639493][ T6437] Read of size 1 at addr ffff8880259504c0 by task kworker/u4:19/6437
[  657.647588][ T6437] 
[  657.649956][ T6437] CPU: 0 PID: 6437 Comm: kworker/u4:19 Not tainted syzkaller #0
[  657.657660][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.667757][ T6437] Workqueue: events_unbound linkwatch_event
[  657.673787][ T6437] Call Trace:
[  657.677096][ T6437]  <TASK>
[  657.680057][ T6437]  dump_stack_lvl+0x18c/0x250
[  657.684775][ T6437]  ? read_lock_is_recursive+0x20/0x20
[  657.690188][ T6437]  ? show_regs_print_info+0x20/0x20
[  657.695429][ T6437]  ? load_image+0x420/0x420
[  657.699981][ T6437]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  657.705501][ T6437]  ? __virt_addr_valid+0x10c/0x380
[  657.710697][ T6437]  ? __virt_addr_valid+0x10c/0x380
[  657.715928][ T6437]  ? __virt_addr_valid+0x10c/0x380
[  657.721069][ T6437]  print_report+0xa8/0x210
[  657.725529][ T6437]  ? strlen+0x57/0x70
[  657.729518][ T6437]  kasan_report+0x117/0x150
[  657.734054][ T6437]  ? strlen+0x57/0x70
[  657.738054][ T6437]  strlen+0x57/0x70
[  657.741876][ T6437]  nla_put_string+0x19/0x30
[  657.746386][ T6437]  rtnl_fill_ifinfo+0x1ca8/0x1e50
[  657.751423][ T6437]  ? if_nlmsg_size+0x970/0x970
[  657.756203][ T6437]  ? __alloc_skb+0x138/0x2c0
[  657.760823][ T6437]  ? rcu_is_watching+0x15/0xb0
[  657.765645][ T6437]  ? __kmalloc_node_track_caller+0xe2/0x230
[  657.771562][ T6437]  ? __build_skb_around+0x245/0x3c0
[  657.776770][ T6437]  rtmsg_ifinfo_build_skb+0x18b/0x260
[  657.782151][ T6437]  rtmsg_ifinfo+0x8c/0x1a0
[  657.786580][ T6437]  netdev_state_change+0xfe/0x170
[  657.791667][ T6437]  ? netdev_features_change+0xd0/0xd0
[  657.797049][ T6437]  linkwatch_do_dev+0x10d/0x160
[  657.801913][ T6437]  __linkwatch_run_queue+0x417/0x670
[  657.807204][ T6437]  ? mutex_lock_nested+0x20/0x20
[  657.812149][ T6437]  ? linkwatch_run_queue+0x10/0x10
[  657.817263][ T6437]  ? _raw_spin_unlock_irq+0x23/0x50
[  657.822473][ T6437]  ? process_scheduled_works+0x975/0x1600
[  657.828204][ T6437]  ? process_scheduled_works+0x975/0x1600
[  657.833941][ T6437]  linkwatch_event+0x4c/0x60
[  657.838539][ T6437]  process_scheduled_works+0xa60/0x1600
[  657.844104][ T6437]  ? worker_attach_to_pool+0x370/0x370
[  657.849574][ T6437]  ? assign_work+0x3cc/0x5d0
[  657.854176][ T6437]  worker_thread+0xa5e/0xfe0
[  657.858784][ T6437]  kthread+0x2fa/0x390
[  657.862859][ T6437]  ? pr_cont_work+0x550/0x550
[  657.867655][ T6437]  ? kthread_blkcg+0xd0/0xd0
[  657.872248][ T6437]  ret_from_fork+0x48/0x80
[  657.876673][ T6437]  ? kthread_blkcg+0xd0/0xd0
[  657.881273][ T6437]  ret_from_fork_asm+0x11/0x20
[  657.886118][ T6437]  </TASK>
[  657.889157][ T6437] 
[  657.891480][ T6437] Allocated by task 12747:
[  657.895893][ T6437]  kasan_set_track+0x4e/0x70
[  657.900511][ T6437]  __kasan_kmalloc+0x8f/0xa0
[  657.905106][ T6437]  __kmalloc_node_track_caller+0xb4/0x230
[  657.910875][ T6437]  kvasprintf+0xec/0x1a0
[  657.915155][ T6437]  kobject_set_name_vargs+0x61/0x110
[  657.920498][ T6437]  dev_set_name+0xe3/0x140
[  657.924915][ T6437]  usb_add_gadget+0x475/0x6f0
[  657.929599][ T6437]  usb_add_gadget_udc_release+0x19c/0x1f0
[  657.935344][ T6437]  dummy_udc_probe+0x68a/0x780
[  657.940116][ T6437]  platform_probe+0x13b/0x1c0
[  657.944798][ T6437]  really_probe+0x247/0xae0
[  657.949308][ T6437]  __driver_probe_device+0x1f5/0x390
[  657.954602][ T6437]  device_driver_attach+0xe0/0x1d0
[  657.959725][ T6437]  bind_store+0x1cc/0x210
[  657.964059][ T6437]  kernfs_fop_write_iter+0x3a4/0x520
[  657.969353][ T6437]  vfs_write+0x474/0x9a0
[  657.973604][ T6437]  ksys_write+0x151/0x260
[  657.977943][ T6437]  do_syscall_64+0x55/0xb0
[  657.982383][ T6437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.988283][ T6437] 
[  657.990602][ T6437] Freed by task 13322:
[  657.994769][ T6437]  kasan_set_track+0x4e/0x70
[  657.999364][ T6437]  kasan_save_free_info+0x28/0x40
[  658.004391][ T6437]  ____kasan_slab_free+0x126/0x1f0
[  658.009505][ T6437]  slab_free_freelist_hook+0x130/0x1a0
[  658.014967][ T6437]  __kmem_cache_free+0xba/0x1f0
[  658.019828][ T6437]  kobject_put+0x260/0x450
[  658.024249][ T6437]  platform_remove+0x6d/0xe0
[  658.028847][ T6437]  device_release_driver_internal+0x408/0x6f0
[  658.035009][ T6437]  unbind_store+0x1a1/0x1d0
[  658.039517][ T6437]  kernfs_fop_write_iter+0x3a4/0x520
[  658.044809][ T6437]  vfs_write+0x474/0x9a0
[  658.049069][ T6437]  ksys_write+0x151/0x260
[  658.053490][ T6437]  do_syscall_64+0x55/0xb0
[  658.057908][ T6437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.063811][ T6437] 
[  658.066132][ T6437] The buggy address belongs to the object at ffff8880259504c0
[  658.066132][ T6437]  which belongs to the cache kmalloc-16 of size 16
[  658.080099][ T6437] The buggy address is located 0 bytes inside of
[  658.080099][ T6437]  freed 16-byte region [ffff8880259504c0, ffff8880259504d0)
[  658.093721][ T6437] 
[  658.096044][ T6437] The buggy address belongs to the physical page:
[  658.102479][ T6437] page:ffffea0000965400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880259503c0 pfn:0x25950
[  658.114035][ T6437] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  658.121594][ T6437] page_type: 0xffffffff()
[  658.125946][ T6437] raw: 00fff00000000800 ffff888017c413c0 ffffea0000905090 ffffea0000b266d0
[  658.134545][ T6437] raw: ffff8880259503c0 000000000080007a 00000001ffffffff 0000000000000000
[  658.143125][ T6437] page dumped because: kasan: bad access detected
[  658.149555][ T6437] page_owner tracks the page as allocated
[  658.155268][ T6437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5777, tgid 5777 (syz-executor), ts 372248860597, free_ts 372218982569
[  658.173788][ T6437]  post_alloc_hook+0x1c1/0x200
[  658.178563][ T6437]  get_page_from_freelist+0x2181/0x22a0
[  658.184113][ T6437]  __alloc_pages+0x1f0/0x460
[  658.188704][ T6437]  alloc_slab_page+0x4f/0x180
[  658.193383][ T6437]  new_slab+0x87/0x2d0
[  658.197469][ T6437]  ___slab_alloc+0xc5c/0x12f0
[  658.202155][ T6437]  __kmem_cache_alloc_node+0x11f/0x250
[  658.207632][ T6437]  __kmalloc_node+0xa6/0x240
[  658.212259][ T6437]  kvmalloc_node+0x70/0x180
[  658.216793][ T6437]  xt_replace_table+0x185/0x750
[  658.221743][ T6437]  __do_replace+0x169/0x9b0
[  658.226295][ T6437]  do_ip6t_set_ctl+0xb41/0xe10
[  658.231111][ T6437]  nf_setsockopt+0x263/0x280
[  658.235788][ T6437]  do_sock_setsockopt+0x175/0x1a0
[  658.240853][ T6437]  __x64_sys_setsockopt+0x182/0x200
[  658.246067][ T6437]  do_syscall_64+0x55/0xb0
[  658.250485][ T6437] page last free stack trace:
[  658.255152][ T6437]  free_unref_page_prepare+0x7d7/0x8f0
[  658.260615][ T6437]  free_unref_page+0x32/0x2e0
[  658.265296][ T6437]  tlb_finish_mmu+0x13e/0x220
[  658.270000][ T6437]  exit_mmap+0x428/0xb90
[  658.274259][ T6437]  __mmput+0x118/0x3a0
[  658.278344][ T6437]  exit_mm+0x23f/0x340
[  658.282431][ T6437]  do_exit+0x909/0x2530
[  658.286600][ T6437]  do_group_exit+0x22d/0x2f0
[  658.291220][ T6437]  __x64_sys_exit_group+0x3f/0x40
[  658.296248][ T6437]  do_syscall_64+0x55/0xb0
[  658.300671][ T6437]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.306602][ T6437] 
[  658.308925][ T6437] Memory state around the buggy address:
[  658.314579][ T6437]  ffff888025950380: fa fb fc fc fa fb fc fc fb fb fc fc fa fb fc fc
[  658.322645][ T6437]  ffff888025950400: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[  658.330708][ T6437] >ffff888025950480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  658.338776][ T6437]                                            ^
[  658.344926][ T6437]  ffff888025950500: fa fb fc fc fa fb fc fc 00 04 fc fc fa fb fc fc
[  658.352990][ T6437]  ffff888025950580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  658.361052][ T6437] ==================================================================
[  658.493843][T13330] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  658.504897][ T6437] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  658.512134][ T6437] CPU: 0 PID: 6437 Comm: kworker/u4:19 Not tainted syzkaller #0
[  658.519815][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  658.529898][ T6437] Workqueue: events_unbound linkwatch_event
[  658.535839][ T6437] Call Trace:
[  658.539237][ T6437]  <TASK>
[  658.542193][ T6437]  dump_stack_lvl+0x18c/0x250
[  658.546908][ T6437]  ? show_regs_print_info+0x20/0x20
[  658.552140][ T6437]  ? load_image+0x420/0x420
[  658.556694][ T6437]  panic+0x2ca/0x720
[  658.560604][ T6437]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  658.566763][ T6437]  ? bpf_jit_dump+0xd0/0xd0
[  658.571282][ T6437]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  658.577278][ T6437]  ? _raw_spin_unlock+0x40/0x40
[  658.582143][ T6437]  ? strlen+0x57/0x70
[  658.586132][ T6437]  check_panic_on_warn+0x84/0xa0
[  658.591083][ T6437]  ? strlen+0x57/0x70
[  658.595090][ T6437]  end_report+0x6f/0x130
[  658.599361][ T6437]  kasan_report+0x128/0x150
[  658.603872][ T6437]  ? strlen+0x57/0x70
[  658.607863][ T6437]  strlen+0x57/0x70
[  658.611680][ T6437]  nla_put_string+0x19/0x30
[  658.616213][ T6437]  rtnl_fill_ifinfo+0x1ca8/0x1e50
[  658.621243][ T6437]  ? if_nlmsg_size+0x970/0x970
[  658.626020][ T6437]  ? __alloc_skb+0x138/0x2c0
[  658.630634][ T6437]  ? rcu_is_watching+0x15/0xb0
[  658.635407][ T6437]  ? __kmalloc_node_track_caller+0xe2/0x230
[  658.641334][ T6437]  ? __build_skb_around+0x245/0x3c0
[  658.646627][ T6437]  rtmsg_ifinfo_build_skb+0x18b/0x260
[  658.652018][ T6437]  rtmsg_ifinfo+0x8c/0x1a0
[  658.656436][ T6437]  netdev_state_change+0xfe/0x170
[  658.661472][ T6437]  ? netdev_features_change+0xd0/0xd0
[  658.666874][ T6437]  linkwatch_do_dev+0x10d/0x160
[  658.671740][ T6437]  __linkwatch_run_queue+0x417/0x670
[  658.677048][ T6437]  ? mutex_lock_nested+0x20/0x20
[  658.681994][ T6437]  ? linkwatch_run_queue+0x10/0x10
[  658.687114][ T6437]  ? _raw_spin_unlock_irq+0x23/0x50
[  658.692321][ T6437]  ? process_scheduled_works+0x975/0x1600
[  658.698061][ T6437]  ? process_scheduled_works+0x975/0x1600
[  658.703789][ T6437]  linkwatch_event+0x4c/0x60
[  658.708387][ T6437]  process_scheduled_works+0xa60/0x1600
[  658.713953][ T6437]  ? worker_attach_to_pool+0x370/0x370
[  658.719432][ T6437]  ? assign_work+0x3cc/0x5d0
[  658.724030][ T6437]  worker_thread+0xa5e/0xfe0
[  658.728634][ T6437]  kthread+0x2fa/0x390
[  658.732709][ T6437]  ? pr_cont_work+0x550/0x550
[  658.737398][ T6437]  ? kthread_blkcg+0xd0/0xd0
[  658.741992][ T6437]  ret_from_fork+0x48/0x80
[  658.746417][ T6437]  ? kthread_blkcg+0xd0/0xd0
[  658.751016][ T6437]  ret_from_fork_asm+0x11/0x20
[  658.755797][ T6437]  </TASK>
[  658.759424][ T6437] Kernel Offset: disabled
[  658.763762][ T6437] Rebooting in 86400 seconds..