last executing test programs:

34m35.55687572s ago: executing program 1 (id=2):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {@grpquota}, {@usrquota}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x2c, 0x6319, &(0x7f0000002080)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x51)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r2, 0x0, &(0x7f000009de80), 0x0)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0))
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x8}, @fwd={0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/105, 0x45, 0x69, 0x1, 0x5, 0x10000, @value=r3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140), 0x2000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000200)={0xb000, 0x103000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000400)={0xfffffffffffff001, 0x13000, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c616773000702000000000200000000020000000008020000000002", 0x41)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18})
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f0000001000))
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000002000))
ioctl$KVM_RUN(r9, 0xae80, 0x0)

34m34.458291035s ago: executing program 1 (id=5):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0xfffffffd, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3)
bind$alg(r5, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

34m30.105046655s ago: executing program 1 (id=10):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38)

34m29.528420469s ago: executing program 32 (id=10):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40000)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "b8155244614427c8", "6120cc39c039a8222816358a7d0637f0dd5d60d0d3ec50524456c96e4db1b2f7", "75223cec", "ae1b8a64b7c9bf3c"}, 0x38)

29m56.163026005s ago: executing program 3 (id=668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004)

29m55.363586905s ago: executing program 3 (id=670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0)

29m54.915581407s ago: executing program 3 (id=673):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080)

29m54.740299041s ago: executing program 3 (id=675):
rseq(0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x3)
r0 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
munlock(&(0x7f0000280000/0x8000)=nil, 0x8000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0)

29m53.171555034s ago: executing program 3 (id=679):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdir(&(0x7f00000001c0)='./file0\x00', 0x124)
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0)
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

29m53.055994532s ago: executing program 3 (id=681):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000076c0)={0x14}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$media(&(0x7f00000003c0), 0x4, 0x404541)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900020073797a3200000000140000001100010000000000700fb55df503db49"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@local})

29m36.528212739s ago: executing program 33 (id=681):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000076c0)={0x14}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$media(&(0x7f00000003c0), 0x4, 0x404541)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007470726f78790000140002800800024000000011080001400000000a0900020073797a3200000000140000001100010000000000700fb55df503db49"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@local})

6m58.380957495s ago: executing program 5 (id=5263):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x6, 0x7, 0xf}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef)

6m58.104726698s ago: executing program 5 (id=5265):
socket(0x10, 0x3, 0x0)
syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c240303010105030251c70011240202"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

6m56.019147783s ago: executing program 5 (id=5271):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000005f100000000000001500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000030601080000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}})
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})

6m54.473318326s ago: executing program 5 (id=5274):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x4000ffff, 0xdff, 'syz1\x00', 0x2})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89fe, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006a013e001001000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000800)=0x10001)
getsockopt$inet6_int(r0, 0x29, 0x7, 0xffffffffffffffff, &(0x7f0000001100))
syz_usb_connect$uac2(0x5, 0xec, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"})
sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="5f870e74a9917940c64d8ae3c13cee7c905481bb1edfc185c1fa446cfc3f5762624d0ae35e3d61dbe3c6c68c8b76346c49045a6f56c8a8a8edad6a79c39cf039f7ec991a453e7885295accdd07f574f13082164ccc22caba79c72e40b0a1d630b36d0b0d9a2b2bfd24b8c4b61e84805565823abec81a556f4395", 0x7a, 0x4004880, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x8)

6m53.245284207s ago: executing program 5 (id=5277):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
io_setup(0x5, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, 0x0, 0xa50003d1)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x2c)
listen(r0, 0x5)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4018, 0x0, 0x0)

6m51.868492047s ago: executing program 5 (id=5280):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d104020"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00 '], 0xc)

6m35.294855197s ago: executing program 34 (id=5280):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d104020"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00 '], 0xc)

18.658606025s ago: executing program 4 (id=6067):
openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x3ac)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$set_timeout(0xf, r4, 0x4b2)
msgrcv(r2, 0x0, 0x0, 0x0, 0x800)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/126)
syz_clone3(0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x1d, 0x803, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgctl$IPC_STAT(r2, 0x2, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)
getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409", @ANYRES32], 0x0)
r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xcf67be709939eb5e)
ioctl$CEC_ADAP_G_PHYS_ADDR(r8, 0x80026101, &(0x7f00000000c0))

13.412922885s ago: executing program 4 (id=6074):
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13.332516456s ago: executing program 0 (id=6075):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
ioctl(r3, 0x8b1a, &(0x7f0000000040))

13.108830735s ago: executing program 6 (id=6076):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]})
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780))
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x3, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
socket$vsock_stream(0x28, 0x1, 0x0)

12.069444426s ago: executing program 6 (id=6077):
socket$packet(0x11, 0x3, 0x300)
ioctl(0xffffffffffffffff, 0xc138fd03, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

11.36808123s ago: executing program 6 (id=6078):
r0 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd8f, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x8000000000002, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0xeeee0000, 0x12d7})
ioctl$KVM_SMI(r6, 0xaeb7)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0a0004000111000008001b0000000000"], 0x28}}, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0x2}, {0x2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x24040084)

9.891010216s ago: executing program 4 (id=6081):
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc10", 0x2a, r2}, 0x68)
prctl$PR_MCE_KILL(0x23, 0x7, 0x7fffffffeffe)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x2a442, 0x0)
truncate(0x0, 0x6)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x210}}], 0x1, 0x20000080)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f00000000c0)=0xc, 0x4)

9.815152125s ago: executing program 0 (id=6082):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb)
setpriority(0x1, 0x0, 0x80000000)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000c40)={{0x2, 0x1}, {0x7f, 0xff}, 0x9, 0x5, 0xc})
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@dont_appraise}, {@appraise}]}})
write(r3, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x482, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa)

9.051723745s ago: executing program 4 (id=6083):
openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = msgget$private(0x0, 0x3ac)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$set_timeout(0xf, r4, 0x4b2)
msgrcv(r2, 0x0, 0x0, 0x0, 0x800)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/126)
syz_clone3(0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
socket(0x1d, 0x803, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgctl$IPC_STAT(r2, 0x2, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050)
getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000619b3b4063070120af9c0000000109021b0002000000000904b60000ff81ca00090409", @ANYRES32], 0x0)
r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xcf67be709939eb5e)
ioctl$CEC_ADAP_G_PHYS_ADDR(r8, 0x80026101, &(0x7f00000000c0))

8.986012302s ago: executing program 2 (id=6084):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl(r1, 0x40186f40, &(0x7f00000001c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x8, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)

6.867444035s ago: executing program 0 (id=6085):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]})
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780))
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x3, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
socket$vsock_stream(0x28, 0x1, 0x0)

6.23725158s ago: executing program 2 (id=6086):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f)

5.898963068s ago: executing program 6 (id=6087):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x2c, 0x0, 0x8, 0x0})
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r2, r2, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc)
getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1d4}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r6 = epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r7=>0x0, <r8=>0x0})
epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000240)={r7, r8+10000000}, &(0x7f00000002c0)={[0xe000]}, 0x8)
r9 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x90, 0x40102000, r9, 0x0)
inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r10 = gettid()
fcntl$setown(r0, 0x8, r10)

5.836711455s ago: executing program 0 (id=6088):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00')
openat(r0, 0x0, 0x141c00, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)

5.735490101s ago: executing program 2 (id=6089):
socket$inet6(0xa, 0x1, 0x0)
r0 = io_uring_setup(0x6430, &(0x7f0000002b00)={0x0, 0x6201, 0x400, 0x1, 0x3c1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000001c0)='./file0\x00', 0x21488b, &(0x7f0000000540)=ANY=[], 0x1, 0x65c, &(0x7f0000000cc0)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

4.704308791s ago: executing program 2 (id=6090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
setns(0xc9, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
ioctl(r3, 0x8b1a, &(0x7f0000000040))

3.655589365s ago: executing program 6 (id=6091):
r0 = syz_usb_connect$hid(0x0, 0x34, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0xa, '\f\x00'}, @global=@item_4={0x3, 0x1, 0x2, "63a7bef9"}, @local=@item_4, @local]}}, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x3617e52f46362eb, 0x22, 0x1, 0x9}, {0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0x1, 0xff}, {0x9, 0x5, 0x6, 0x3, 0x8, 0x3, 0x8, 0x5}}}}}}]}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
write$char_usb(r2, 0x0, 0x0)
ioctl$EVIOCGABS20(r3, 0x80184560, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.59842448s ago: executing program 4 (id=6092):
syz_emit_ethernet(0x66, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='hfsplus\x00', &(0x7f00000003c0)='hfsplus\x00', 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)
listen(r1, 0x0)
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000})
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, 0x0)
timer_create(0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)

3.528769158s ago: executing program 2 (id=6093):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb)
setpriority(0x1, 0x0, 0x80000000)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000c40)={{0x2, 0x1}, {0x7f, 0xff}, 0x9, 0x5, 0xc})
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@dont_appraise}, {@appraise}]}})
write(r3, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x482, 0x0)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa)

1.926178546s ago: executing program 0 (id=6094):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl(r1, 0x40186f40, &(0x7f00000001c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x8, 0x0, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)

1.751561122s ago: executing program 2 (id=6095):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x12)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000100)="ea8c82f9e77f8604d4a97969c43269745144ea6ca358208309446e4432d65e3088e0144d3735aee4c2c8c1868843bb4a531e2f601de9ea16ab32f828bd708e0ba154299ef44a672f5ba354ce727fd10f28d3ab8074653854571e486edbabf63a3cab900abf1d104966774a02290f9a069ef5205bde800a40c7f3cab4378b455f", 0x80}], 0x1, 0x3815, 0x1)

141.392253ms ago: executing program 6 (id=6096):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = dup(0xffffffffffffffff)
syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1})
write$sndseq(r4, &(0x7f0000000140), 0x0)
ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0)
write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
gettid()
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r2)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0xa78, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xa38, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c756a48acf9b2945cc32efb3277a3166c68eb2ac3112795bead06cd1821c10c4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e22f5a32021056eab3214c555aefc7eb7b8447f2c680ff2e9f9eb750d7f915ca"}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc845}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x8}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @remote, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xe, @remote, 0x3f35}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75eb6500fed04e9c713faa5b4f34fbf254000000000000006af68ee200"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x478, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c912f38a286d238054e5d4674c96a731e9dc14abeb9bcee5361280bfdaec56fb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9886ba422ab3bf0466d9a5d5c978449d3a9cee445480c865d732230c7d1458bd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @empty, 0x130}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)

68.906182ms ago: executing program 0 (id=6097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]})
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780))
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x3, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
socket$vsock_stream(0x28, 0x1, 0x0)

0s ago: executing program 4 (id=6098):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
dup(r0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000140))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dd, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0xc3, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x2b7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

kernel console output (not intermixed with test programs):

ialNumber=3
[ 1894.165172][T21817] usb 3-1: Product: syz
[ 1894.169627][T21817] usb 3-1: Manufacturer: syz
[ 1894.174241][T21817] usb 3-1: SerialNumber: syz
[ 1894.318045][T25751] loop6: detected capacity change from 0 to 512
[ 1894.407250][T25751] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.5549: corrupted in-inode xattr: invalid ea_ino
[ 1894.453966][T21817] usb 3-1: unit 0 not found!
[ 1894.458647][T21817] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[ 1894.479632][T21817] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1894.490598][T25751] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.5549: couldn't read orphan inode 15 (err -117)
[ 1894.522011][T21817] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[ 1894.531580][T25751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1894.532933][T21817] usb 3-1: USB disconnect, device number 71
[ 1894.582257][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1895.302179][T24577] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1895.444222][T25764] loop2: detected capacity change from 0 to 1024
[ 1895.471770][T25764] EXT4-fs: Ignoring removed bh option
[ 1895.547933][T25764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[ 1896.052550][T25772] loop6: detected capacity change from 0 to 64
[ 1896.462607][T22182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[ 1898.661988][T25797] ip_tables: iptables: counters copy to user failed while replacing table
[ 1899.267303][T25803] loop4: detected capacity change from 0 to 1024
[ 1899.275298][T25803] EXT4-fs: Ignoring removed bh option
[ 1899.557300][T25803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[ 1900.108423][T24231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1900.159811][T25809] comedi comedi0: No channels found!
[ 1900.627744][T25809] kAFS: unable to lookup cell 'Þ({^ú@'
[ 1900.900489][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[ 1901.151929][T25817] MTRR 1 not used
[ 1903.727996][T18097] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1903.967417][T25845] loop6: detected capacity change from 0 to 1024
[ 1903.984787][T25845] EXT4-fs: Ignoring removed bh option
[ 1903.999025][T18097] usb 3-1: Using ep0 maxpacket: 32
[ 1904.011709][T18097] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1904.047524][T25845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[ 1904.062994][T18097] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1904.288988][T18097] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1904.354502][T18097] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1904.530272][T18097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1904.580032][T18097] usb 3-1: config 0 descriptor??
[ 1905.598865][T18097] input: HID 04e7:0009 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04E7:0009.0057/input/input191
[ 1906.147739][ T5083] Bluetooth: hci4: command 0x0406 tx timeout
[ 1907.004067][T24577] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[ 1907.519015][T18097] elo 0003:04E7:0009.0057: input,hidraw0: USB HID vd.8f Joystick [HID 04e7:0009] on usb-dummy_hcd.2-1/input0
[ 1907.588707][T18097] usb 3-1: USB disconnect, device number 72
[ 1907.769729][T25868] fido_id[25868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1908.383285][   T28] audit: type=1400 audit(1790345138.857:693): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=25866 comm="syz.6.5577"
[ 1908.818543][T25878] loop6: detected capacity change from 0 to 512
[ 1908.917029][T25878] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.5582: couldn't read orphan inode 26 (err -116)
[ 1908.968806][T25878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1908.984762][T25878] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1909.175000][T25885] loop4: detected capacity change from 0 to 2048
[ 1909.344045][T25890] EXT4-fs error (device loop6): ext4_lookup:1860: inode #15: comm syz.6.5582: iget: bad i_size value: 360287970189639690
[ 1909.444369][T25891] EXT4-fs error (device loop6): ext4_lookup:1860: inode #15: comm syz.6.5582: iget: bad i_size value: 360287970189639690
[ 1909.547851][T25885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1909.630941][T25885] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1909.883163][T24577] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1910.420901][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1910.848483][T18097] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1911.145560][T18097] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1911.181643][T18097] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1911.204505][T25909] loop4: detected capacity change from 0 to 512
[ 1911.226332][T18097] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1911.263055][T25909] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.5587: corrupted in-inode xattr: invalid ea_ino
[ 1911.280791][T18097] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1911.310880][T25909] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.5587: couldn't read orphan inode 15 (err -117)
[ 1911.346400][T18097] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1911.366924][T18097] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1911.380086][T25909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1911.401893][T18097] usb 3-1: Product: syz
[ 1911.410811][T18097] usb 3-1: Manufacturer: syz
[ 1911.442876][T18097] cdc_wdm: probe of 3-1:1.0 failed with error -22
[ 1911.659090][T22285] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1911.718291][T18097] usb 3-1: USB disconnect, device number 73
[ 1911.903594][T22285] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1911.919610][T22285] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1911.941471][T22285] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1911.972074][T22285] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1911.993032][T22285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1912.010366][T22285] usb 7-1: Product: syz
[ 1912.019250][T22285] usb 7-1: Manufacturer: syz
[ 1912.029224][T22285] usb 7-1: SerialNumber: syz
[ 1912.132300][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1912.143671][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1912.168383][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1912.303021][T22285] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 1912.423396][T24231] Bluetooth: hci2: unexpected event for opcode 0x2003
[ 1912.450390][T22285] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[ 1912.649363][T22285] usb 7-1: USB disconnect, device number 7
[ 1913.145219][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1914.121949][T24231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1915.419405][T25940] loop2: detected capacity change from 0 to 512
[ 1915.444611][T25939] loop4: detected capacity change from 0 to 2048
[ 1915.518356][T25940] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.5597: corrupted in-inode xattr: invalid ea_ino
[ 1915.545409][T25939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1915.609153][T25940] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.5597: couldn't read orphan inode 15 (err -117)
[ 1915.627570][T25939] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1915.696154][T25940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1915.963015][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1916.410365][T22182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1917.307783][T21817] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1917.557422][T21817] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1917.567242][T21817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1917.605808][T21817] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1918.539736][T21817] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1918.554068][T21817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1918.562128][T21817] usb 3-1: Product: syz
[ 1918.617111][T21817] usb 3-1: Manufacturer: syz
[ 1918.633402][T21817] usb 3-1: SerialNumber: syz
[ 1918.803603][ T5083] Bluetooth: hci4: command 0x0406 tx timeout
[ 1918.942381][T21817] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1918.997714][T21817] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1919.039716][T25986] netlink: 'syz.6.5608': attribute type 1 has an invalid length.
[ 1919.063546][T21817] usb 3-1: USB disconnect, device number 74
[ 1919.112077][T25989] loop4: detected capacity change from 0 to 2048
[ 1919.144788][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1919.267065][T25986] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1919.276829][T25989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1919.281959][T25986] bond1: (slave bond2): making interface the new active one
[ 1919.315050][T25989] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1919.345996][T25986] bond1: (slave bond2): Enslaving as an active interface with an up link
[ 1919.480206][T25993] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[ 1919.709119][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1920.661888][T26011] gadgetfs: bound to dummy_udc driver
[ 1921.303349][T25184] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 1922.039219][    C0] gadgetfs: connected
[ 1922.089288][T25184] gadgetfs: disconnected
[ 1922.341932][    C0] gadgetfs: connected
[ 1922.354518][T25184] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1922.424981][T26011] gadgetfs: suspended from state 3
[ 1922.455611][T25184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 1922.462991][T26011] gadgetfs: disconnected
[ 1922.504444][T25184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.648628][T25184] usb 1-1: can't set config #1, error -71
[ 1922.672515][T25184] usb 1-1: USB disconnect, device number 53
[ 1922.707209][ T5083] Bluetooth: hci4: command 0x0406 tx timeout
[ 1922.726623][T22285] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1922.987631][T22285] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1923.008278][T22285] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[ 1923.028559][T22285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1923.110254][T22285] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1923.125665][T22285] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1923.173013][T22285] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1923.181080][T22285] usb 3-1: Product: syz
[ 1923.185352][T22285] usb 3-1: Manufacturer: syz
[ 1923.211396][T22285] cdc_wdm 3-1:1.0: skipping garbage
[ 1923.249133][T22285] cdc_wdm: probe of 3-1:1.0 failed with error -22
[ 1923.462988][ T5828] usb 3-1: USB disconnect, device number 75
[ 1924.254708][T21817] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1924.271430][T26033] loop2: detected capacity change from 0 to 2048
[ 1924.287233][T22285] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1924.361462][T26033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1924.434869][T21817] usb 7-1: device descriptor read/64, error -71
[ 1924.441387][T26033] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1924.505590][T22285] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1924.515700][T22285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1924.558283][T22285] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1924.583750][T22285] usb 5-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1924.593302][T22285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1924.601833][T22285] usb 5-1: Product: syz
[ 1924.606849][T22285] usb 5-1: Manufacturer: syz
[ 1924.612709][T22285] usb 5-1: SerialNumber: syz
[ 1924.630260][T26037] overlayfs: missing 'lowerdir'
[ 1924.850753][T21817] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1924.922259][T22182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1924.937091][T22285] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 1925.016541][T22285] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[ 1925.045969][T21817] usb 7-1: device descriptor read/64, error -71
[ 1925.050439][T22285] usb 5-1: USB disconnect, device number 15
[ 1925.133435][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1925.209368][T21817] usb usb7-port1: attempt power cycle
[ 1925.696649][T21817] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1925.765236][T21817] usb 7-1: device descriptor read/8, error -71
[ 1926.336898][T21817] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1926.437854][T21817] usb 7-1: device descriptor read/8, error -71
[ 1926.595974][T21817] usb usb7-port1: unable to enumerate USB device
[ 1928.203824][T26065] comedi comedi0: No channels found!
[ 1928.357690][T26067] loop2: detected capacity change from 0 to 2048
[ 1928.476341][T26067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1928.492344][T26067] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1929.638165][T26078] overlayfs: missing 'lowerdir'
[ 1929.815700][T22182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1930.021327][ T5083] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1930.031754][ T5083] CPU: 0 PID: 5083 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1930.039337][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1930.049429][ T5083] Workqueue: hci0 hci_rx_work
[ 1930.054157][ T5083] Call Trace:
[ 1930.057458][ T5083]  <TASK>
[ 1930.060414][ T5083]  dump_stack_lvl+0x18c/0x250
[ 1930.065139][ T5083]  ? show_regs_print_info+0x20/0x20
[ 1930.070346][ T5083]  ? load_image+0x420/0x420
[ 1930.074870][ T5083]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1930.080012][ T5083]  ? __lock_acquire+0x7d80/0x7d80
[ 1930.085038][ T5083]  ? sysfs_warn_dup+0xa0/0xa0
[ 1930.089718][ T5083]  ? do_raw_spin_unlock+0x121/0x230
[ 1930.094922][ T5083]  kobject_add_internal+0x617/0xc90
[ 1930.100126][ T5083]  kobject_add+0x164/0x240
[ 1930.104544][ T5083]  ? kobject_init+0x1d0/0x1d0
[ 1930.109220][ T5083]  ? get_device_parent+0x366/0x390
[ 1930.114340][ T5083]  device_add+0x3fa/0xc40
[ 1930.118673][ T5083]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1930.123617][ T5083]  le_conn_complete_evt+0xe9a/0x1480
[ 1930.128915][ T5083]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1930.135164][ T5083]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1930.140802][ T5083]  ? mutex_unlock+0x10/0x10
[ 1930.145303][ T5083]  ? skb_pull_data+0xf0/0x1f0
[ 1930.149984][ T5083]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1930.155882][ T5083]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[ 1930.162300][ T5083]  ? hci_remote_host_features_evt+0x150/0x150
[ 1930.168367][ T5083]  hci_event_packet+0x7b4/0x1280
[ 1930.173312][ T5083]  ? __lock_acquire+0x7d80/0x7d80
[ 1930.178337][ T5083]  ? lock_chain_count+0x20/0x20
[ 1930.183188][ T5083]  ? bis_list+0x290/0x290
[ 1930.187523][ T5083]  ? kcov_remote_start+0x513/0x810
[ 1930.192636][ T5083]  ? lockdep_hardirqs_on+0x98/0x150
[ 1930.197835][ T5083]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1930.203036][ T5083]  hci_rx_work+0x43a/0xd60
[ 1930.207458][ T5083]  ? process_scheduled_works+0x975/0x1600
[ 1930.213177][ T5083]  process_scheduled_works+0xa60/0x1600
[ 1930.218750][ T5083]  ? worker_attach_to_pool+0x370/0x370
[ 1930.224212][ T5083]  ? assign_work+0x3cc/0x5d0
[ 1930.228806][ T5083]  worker_thread+0xa5e/0xfe0
[ 1930.233428][ T5083]  kthread+0x2fa/0x390
[ 1930.237517][ T5083]  ? pr_cont_work+0x550/0x550
[ 1930.242193][ T5083]  ? kthread_blkcg+0xd0/0xd0
[ 1930.246777][ T5083]  ret_from_fork+0x48/0x80
[ 1930.251192][ T5083]  ? kthread_blkcg+0xd0/0xd0
[ 1930.255779][ T5083]  ret_from_fork_asm+0x11/0x20
[ 1930.260557][ T5083]  </TASK>
[ 1930.267463][ T5083] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1930.281619][ T5083] Bluetooth: hci0: failed to register connection device
[ 1931.368150][ T5828] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0
[ 1931.415993][ T5828] hid-generic 0000:0000:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1932.365062][ T5811] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1932.591313][ T5828] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1933.304188][ T5828] usb 5-1: device descriptor read/64, error -71
[ 1933.355932][T26108] comedi comedi0: No channels found!
[ 1933.380388][ T5811] usb 3-1: Using ep0 maxpacket: 32
[ 1933.629570][ T5828] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1934.396518][ T5811] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1934.409763][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1934.417799][ T5811] usb 3-1: Product: syz
[ 1934.453040][ T5828] usb 5-1: device descriptor read/64, error -71
[ 1934.482945][ T5811] usb 3-1: Manufacturer: syz
[ 1934.513382][ T5811] usb 3-1: SerialNumber: syz
[ 1934.554016][ T5811] usb 3-1: config 0 descriptor??
[ 1934.588890][ T5828] usb usb5-port1: attempt power cycle
[ 1934.745720][ T5811] usb 3-1: can't set config #0, error -71
[ 1934.767375][ T5811] usb 3-1: USB disconnect, device number 76
[ 1935.059918][ T5828] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1935.127185][ T5828] usb 5-1: device descriptor read/8, error -71
[ 1938.194391][T26142] loop6: detected capacity change from 0 to 2048
[ 1938.409718][T26142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1939.083246][T26142] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1939.102377][ T5083] Bluetooth: hci4: command 0x0406 tx timeout
[ 1939.341066][T26142] overlayfs: missing 'lowerdir'
[ 1939.504746][T24577] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1939.644376][ T5828] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1939.807046][ T5828] usb 1-1: device descriptor read/64, error -71
[ 1940.155762][ T5828] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1940.500512][ T5828] usb 1-1: device descriptor read/64, error -71
[ 1941.260611][ T5828] usb usb1-port1: attempt power cycle
[ 1941.736012][ T5828] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1941.790856][ T5828] usb 1-1: device descriptor read/8, error -71
[ 1942.109453][ T5828] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1942.215505][ T5828] usb 1-1: device descriptor read/8, error -71
[ 1942.398294][ T5828] usb usb1-port1: unable to enumerate USB device
[ 1943.536228][ T5083] Bluetooth: hci4: command 0x0406 tx timeout
[ 1945.025239][T26188] TC_ACT_REPEAT abuse ?
[ 1946.858669][T26200] netlink: 'syz.6.5658': attribute type 1 has an invalid length.
[ 1949.130451][T24231] Bluetooth: hci4: command 0x0406 tx timeout
[ 1953.014162][T26249] TC_ACT_REPEAT abuse ?
[ 1954.698124][T25184] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1954.947367][T25184] usb 5-1: Using ep0 maxpacket: 16
[ 1954.966015][T25184] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1954.981297][T25184] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1955.005507][T25184] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1955.036280][T25184] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[ 1955.055074][T25184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1955.080388][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5689'.
[ 1955.089611][T25184] usb 5-1: Product: syz
[ 1955.098094][T25184] usb 5-1: Manufacturer: syz
[ 1955.102939][T25184] usb 5-1: SerialNumber: syz
[ 1955.353383][T25184] usb 5-1: unit 2 not found!
[ 1955.364460][T25184] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu
[ 1955.399715][T25184] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1955.423334][T25184] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[ 1955.434014][T25184] usb 5-1: USB disconnect, device number 20
[ 1955.467945][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1955.634342][   T28] audit: type=1326 audit(1790345182.491:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1955.676162][   T28] audit: type=1326 audit(1790345182.491:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1955.702832][   T28] audit: type=1326 audit(1790345182.510:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1955.781813][ T5811] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1956.888952][   T28] audit: type=1326 audit(1790345182.510:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1956.913553][   T28] audit: type=1326 audit(1790345182.510:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1956.938850][   T28] audit: type=1326 audit(1790345182.510:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1956.978507][   T28] audit: type=1326 audit(1790345182.510:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1957.027366][   T28] audit: type=1326 audit(1790345182.510:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1957.053094][   T28] audit: type=1326 audit(1790345182.510:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1957.140244][   T28] audit: type=1326 audit(1790345182.510:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26280 comm="syz.2.5691" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 1957.208403][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1957.243809][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1957.257691][T26287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'.
[ 1957.322710][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1957.391538][ T5811] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1957.689130][ T5828] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1958.378382][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1958.437862][ T5811] usb 1-1: config 0 descriptor??
[ 1958.574108][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1958.599248][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1958.632156][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1958.699739][ T5811] usbhid 1-1:0.0: can't add hid device: -71
[ 1958.706200][ T5811] usbhid: probe of 1-1:0.0 failed with error -71
[ 1958.713264][ T5828] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1958.747688][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1958.747756][ T5811] usb 1-1: USB disconnect, device number 58
[ 1958.787678][ T5828] usb 3-1: Product: syz
[ 1958.791905][ T5828] usb 3-1: Manufacturer: syz
[ 1958.810828][ T5828] usb 3-1: SerialNumber: syz
[ 1959.105548][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1959.156433][ T5828] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1959.172215][ T5828] usb 3-1: USB disconnect, device number 77
[ 1959.201978][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1959.279961][T26306] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1960.084353][ T5828] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1960.897286][ T5811] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1961.005541][ T5828] usb 3-1: Using ep0 maxpacket: 16
[ 1961.026740][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1961.059157][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1961.074111][ T5828] usb 3-1: can't read configurations, error -71
[ 1961.131651][ T5811] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1961.142923][ T5811] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[ 1961.153790][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1961.172406][ T5811] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1961.197510][ T5811] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1961.214059][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1961.222313][ T5811] usb 5-1: Product: syz
[ 1961.226512][ T5811] usb 5-1: Manufacturer: syz
[ 1961.247269][ T5811] cdc_wdm 5-1:1.0: skipping garbage
[ 1961.252533][ T5811] cdc_wdm 5-1:1.0: skipping garbage
[ 1961.263638][ T5811] cdc_wdm: probe of 5-1:1.0 failed with error -22
[ 1961.395651][T21817] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1961.471614][T18097] usb 5-1: USB disconnect, device number 21
[ 1961.493274][T22285] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1961.620765][T21817] usb 7-1: config 0 has an invalid interface number: 182 but max is 1
[ 1961.638117][T21817] usb 7-1: config 0 has an invalid interface number: 9 but max is 1
[ 1961.657811][T21817] usb 7-1: config 0 has no interface number 0
[ 1961.664458][T21817] usb 7-1: config 0 has no interface number 1
[ 1961.671318][T21817] usb 7-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 1961.682568][T21817] usb 7-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1961.707030][T21817] usb 7-1: config 0 interface 9 has no altsetting 0
[ 1961.717999][T21817] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 1961.739929][T21817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1961.761547][T21817] usb 7-1: config 0 descriptor??
[ 1961.804346][T21817] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 1961.825712][T21817] snd-usb-audio: probe of 7-1:0.182 failed with error -2
[ 1961.864539][T21817] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 1961.886672][T22285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1961.899043][T22285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1961.909091][T22285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1962.154071][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1962.154138][   T28] audit: type=1400 audit(1790345188.323:708): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26325 comm="syz.2.5709"
[ 1962.541873][T22285] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1962.551089][T22285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1962.653932][T15382] udevd[15382]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1962.713499][T21817] snd-usb-audio: probe of 7-1:0.9 failed with error -2
[ 1962.729611][T22285] usb 1-1: config 0 descriptor??
[ 1962.906311][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5712'.
[ 1963.184576][ T5828] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1963.201120][T22285] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving
[ 1963.228818][T22285] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1963.413636][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1963.433797][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1963.454847][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1963.470987][ T5828] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1963.480534][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1963.489011][ T5828] usb 3-1: Product: syz
[ 1963.493279][ T5828] usb 3-1: Manufacturer: syz
[ 1963.497986][ T5828] usb 3-1: SerialNumber: syz
[ 1963.761158][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1963.795046][ T5828] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1963.809443][ T5828] usb 3-1: USB disconnect, device number 80
[ 1963.847075][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1964.902072][T21817] usb 7-1: USB disconnect, device number 12
[ 1964.940069][ T5828] usb 1-1: USB disconnect, device number 59
[ 1965.090566][T26349] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1965.117925][T26349] gadgetfs: bound to dummy_udc driver
[ 1965.560374][T26354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1965.577817][ T5828] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 1965.722602][T26354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1966.422603][T26349] gadgetfs: suspended from state 2
[ 1966.728222][T21817] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1966.966542][T21817] usb 7-1: Using ep0 maxpacket: 16
[ 1967.045788][   T28] audit: type=1400 audit(1790345193.019:709): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26357 comm="syz.2.5720"
[ 1967.211143][T21817] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1967.380998][T21817] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1967.487817][T21817] usb 7-1: can't read configurations, error -71
[ 1967.850671][T26368] syzkaller0: entered promiscuous mode
[ 1967.880846][T26368] syzkaller0: entered allmulticast mode
[ 1968.071915][ T5811] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1968.973563][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1968.993793][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1969.005015][ T5811] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1969.044250][ T5811] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1969.057956][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1969.079574][ T5811] usb 3-1: Product: syz
[ 1969.084181][ T5811] usb 3-1: Manufacturer: syz
[ 1969.088814][ T5811] usb 3-1: SerialNumber: syz
[ 1969.173986][T26385] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1969.237085][T26385] gadgetfs: bound to dummy_udc driver
[ 1969.558763][T21817] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[ 1969.692786][    C0] gadgetfs: connected
[ 1969.701095][T21817] gadgetfs: disconnected
[ 1970.033987][    C0] gadgetfs: connected
[ 1970.042148][T21817] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1970.186596][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1970.215707][T21817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 1970.309992][T21817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1970.499818][    C0] gadgetfs: configuration #1
[ 1970.536888][T26386] gadgetfs: suspended from state 3
[ 1970.548072][T21817] usb 1-1: can't set config #1, error -71
[ 1970.567496][ T5811] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1970.586415][T26386] gadgetfs: disconnected
[ 1970.627566][T21817] usb 1-1: USB disconnect, device number 61
[ 1970.664801][ T5811] usb 3-1: USB disconnect, device number 81
[ 1970.697073][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1971.051411][ T5828] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1971.084592][T21817] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1972.029494][   T28] audit: type=1400 audit(1790345197.033:710): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26395 comm="syz.4.5731"
[ 1972.104298][ T5828] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1972.130800][ T5828] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1972.265911][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1972.297080][ T5828] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1972.384986][ T5828] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1972.442735][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1972.470074][ T5828] usb 7-1: Product: syz
[ 1972.501482][ T5828] usb 7-1: Manufacturer: syz
[ 1972.542800][ T5828] cdc_wdm 7-1:1.0: skipping garbage
[ 1972.578493][ T5828] cdc_wdm 7-1:1.0: skipping garbage
[ 1972.584264][ T5828] cdc_wdm 7-1:1.0: skipping garbage
[ 1972.603752][ T5828] cdc_wdm: probe of 7-1:1.0 failed with error -22
[ 1972.969162][ T5828] usb 7-1: USB disconnect, device number 15
[ 1973.317182][T21817] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1973.587811][T21817] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1973.617463][T21817] usb 1-1: can't read configurations, error -71
[ 1973.678050][T26408] syzkaller0: entered promiscuous mode
[ 1973.683670][T26408] syzkaller0: entered allmulticast mode
[ 1973.959050][T26412] loop6: detected capacity change from 0 to 1024
[ 1973.980349][T26412] EXT4-fs: Ignoring removed bh option
[ 1974.052548][T26412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1974.249673][T24577] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1974.262527][ T5828] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1974.778880][   T28] audit: type=1400 audit(1790345200.152:711): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26425 comm="syz.6.5741"
[ 1974.835465][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1974.861382][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1974.898562][ T5828] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1974.988739][ T5828] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 1975.019304][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1975.105982][ T5828] usb 3-1: Product: syz
[ 1975.110459][ T5828] usb 3-1: Manufacturer: syz
[ 1975.115241][ T5828] usb 3-1: SerialNumber: syz
[ 1975.428121][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1976.212322][T21817] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1976.358442][ T5828] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1976.372526][ T5828] usb 3-1: USB disconnect, device number 82
[ 1976.420910][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1976.553562][T26446] syzkaller0: entered promiscuous mode
[ 1976.560936][T26446] syzkaller0: entered allmulticast mode
[ 1976.634671][T21817] usb 1-1: config 0 has an invalid interface number: 182 but max is 1
[ 1976.656898][T21817] usb 1-1: config 0 has an invalid interface number: 9 but max is 1
[ 1976.677040][T21817] usb 1-1: config 0 has no interface number 0
[ 1976.698924][T21817] usb 1-1: config 0 has no interface number 1
[ 1976.705116][T21817] usb 1-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 1976.731050][T21817] usb 1-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1976.763566][T21817] usb 1-1: config 0 interface 9 has no altsetting 0
[ 1976.781196][T21817] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 1976.795165][T21817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1976.816270][T21817] usb 1-1: config 0 descriptor??
[ 1976.840322][T21817] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1976.862048][T21817] snd-usb-audio: probe of 1-1:0.182 failed with error -2
[ 1976.886519][T21817] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1976.947964][ T5828] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1977.025906][T21817] snd-usb-audio: probe of 1-1:0.9 failed with error -2
[ 1977.166903][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1977.182795][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1977.193076][ T5828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1977.211555][ T5828] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1977.222722][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1977.273957][ T5828] usb 7-1: config 0 descriptor??
[ 1977.809129][ T5828] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving
[ 1977.852981][ T5828] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1978.555408][T21817] usb 1-1: USB disconnect, device number 64
[ 1978.725896][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 1978.732368][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 1980.329242][ T5828] usb 7-1: USB disconnect, device number 16
[ 1980.519527][T26479] syzkaller0: entered promiscuous mode
[ 1980.538834][T26479] syzkaller0: entered allmulticast mode
[ 1980.882010][T22285] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1981.077011][T22285] usb 1-1: Using ep0 maxpacket: 16
[ 1981.085793][T22285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1981.096018][T22285] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1981.122925][T22285] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1981.133116][T22285] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1981.142069][T22285] usb 1-1: Product: syz
[ 1981.148357][T22285] usb 1-1: Manufacturer: syz
[ 1981.167956][T22285] usb 1-1: SerialNumber: syz
[ 1982.626794][T22285] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1982.878349][T22285] usb 3-1: config 0 has an invalid interface number: 182 but max is 1
[ 1982.897759][T22285] usb 3-1: config 0 has an invalid interface number: 9 but max is 1
[ 1982.905846][T22285] usb 3-1: config 0 has no interface number 0
[ 1982.919418][T22285] usb 3-1: config 0 has no interface number 1
[ 1982.926008][T22285] usb 3-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 1982.954851][T22285] usb 3-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1982.984492][T22285] usb 3-1: config 0 interface 9 has no altsetting 0
[ 1982.991197][T22285] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 1983.013469][T22285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1983.040504][T22285] usb 3-1: config 0 descriptor??
[ 1983.059246][T22285] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1983.082769][T22285] snd-usb-audio: probe of 3-1:0.182 failed with error -2
[ 1983.105498][T22285] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1983.189870][T18239] udevd[18239]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1983.192743][T22285] snd-usb-audio: probe of 3-1:0.9 failed with error -2
[ 1984.428474][T25184] usb 1-1: USB disconnect, device number 65
[ 1984.718526][T22285] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1984.991794][T22285] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1985.397202][T26518] syzkaller0: entered promiscuous mode
[ 1985.443675][T22285] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1985.453588][T22285] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1985.466457][T25184] usb 3-1: USB disconnect, device number 83
[ 1985.468802][T26518] syzkaller0: entered allmulticast mode
[ 1985.488034][T22285] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1985.504107][T22285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1985.521676][T22285] usb 7-1: config 0 descriptor??
[ 1987.697895][T22285] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving
[ 1987.745469][T22285] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1989.432956][T22285] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1989.592460][T25184] usb 7-1: USB disconnect, device number 17
[ 1989.650932][T22285] usb 1-1: Using ep0 maxpacket: 16
[ 1989.669275][T22285] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[ 1989.693061][T22285] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1989.703210][T22285] usb 1-1: config 1 has no interface number 0
[ 1989.725599][T22285] usb 1-1: config 1 interface 105 altsetting 2 has an invalid endpoint with address 0x0, skipping
[ 1989.738312][T22285] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1989.752042][T22285] usb 1-1: config 1 interface 105 has no altsetting 0
[ 1990.627236][T22285] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1990.636405][T22285] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1990.644507][T22285] usb 1-1: Product: syz
[ 1990.648777][T22285] usb 1-1: Manufacturer: syz
[ 1990.653396][T22285] usb 1-1: SerialNumber: syz
[ 1990.701406][T26557] netlink: 'syz.2.5777': attribute type 1 has an invalid length.
[ 1990.891941][T22285] aqc111: probe of 1-1:1.105 failed with error -22
[ 1990.937715][T26560] bond1: (slave gretap1): making interface the new active one
[ 1990.983563][T26560] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1991.836094][T26567] syzkaller0: entered promiscuous mode
[ 1991.854249][T26567] syzkaller0: entered allmulticast mode
[ 1992.302190][T26576] ubi0: attaching mtd0
[ 1992.311646][T26576] ubi0: scanning is finished
[ 1992.317476][T26576] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1992.343442][T26576] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1992.500258][T21817] usb 1-1: USB disconnect, device number 66
[ 1993.439095][T26593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5786'.
[ 1995.453568][T26600] bond1 (unregistering): Released all slaves
[ 1995.573533][T26604] syzkaller0: entered promiscuous mode
[ 1995.585100][T26604] syzkaller0: entered allmulticast mode
[ 1996.168571][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5797'.
[ 1997.229843][   T28] audit: type=1326 audit(1790345220.866:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.258226][   T28] audit: type=1326 audit(1790345220.866:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.289691][   T28] audit: type=1326 audit(1790345220.894:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.468898][   T28] audit: type=1326 audit(1790345220.894:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.506735][   T28] audit: type=1326 audit(1790345220.894:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.539826][   T28] audit: type=1326 audit(1790345220.894:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.571097][   T28] audit: type=1326 audit(1790345220.894:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.600846][   T28] audit: type=1326 audit(1790345220.894:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.657541][   T28] audit: type=1326 audit(1790345220.894:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1997.687325][   T28] audit: type=1326 audit(1790345220.894:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.0.5800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa279d9e159 code=0x7ffc0000
[ 1998.271179][T26646] syzkaller0: entered promiscuous mode
[ 1998.276902][T26646] syzkaller0: entered allmulticast mode
[ 1998.770594][T26653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5806'.
[ 1999.967283][T25184] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 2000.198160][T25184] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2000.215446][T25184] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 2000.238700][T25184] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2000.258548][T25184] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping
[ 2000.275887][T25184] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2000.289665][T25184] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2000.298774][T25184] usb 5-1: Product: syz
[ 2000.313379][T25184] usb 5-1: Manufacturer: syz
[ 2000.338322][T25184] cdc_wdm 5-1:1.0: skipping garbage
[ 2000.350281][T25184] cdc_wdm 5-1:1.0: skipping garbage
[ 2000.362919][T25184] cdc_wdm: probe of 5-1:1.0 failed with error -22
[ 2001.243749][T25184] usb 5-1: USB disconnect, device number 22
[ 2003.577218][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2003.577234][   T28] audit: type=1326 audit(1790345226.725:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2004.590093][   T28] audit: type=1326 audit(1790345226.725:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2004.649685][   T28] audit: type=1326 audit(1790345226.753:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2004.674375][   T28] audit: type=1326 audit(1790345226.753:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2004.710828][   T28] audit: type=1326 audit(1790345226.753:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2004.806354][T26687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5815'.
[ 2005.028659][T22285] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 2005.551116][   T28] audit: type=1326 audit(1790345226.753:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2005.575529][   T28] audit: type=1326 audit(1790345226.753:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2005.599856][   T28] audit: type=1326 audit(1790345226.753:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2005.624345][   T28] audit: type=1326 audit(1790345226.753:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2005.654188][   T28] audit: type=1326 audit(1790345226.753:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26677 comm="syz.4.5814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06e59e159 code=0x7ffc0000
[ 2005.862989][T22285] usb 5-1: Using ep0 maxpacket: 16
[ 2005.870720][T22285] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[ 2005.879501][T22285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2005.899413][T22285] usb 5-1: config 1 has no interface number 0
[ 2005.905778][T22285] usb 5-1: config 1 interface 105 altsetting 2 has an invalid endpoint with address 0x0, skipping
[ 2005.924348][T22285] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2005.941526][T22285] usb 5-1: config 1 interface 105 has no altsetting 0
[ 2005.975028][T22285] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 2005.986978][T22285] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2005.995585][T22285] usb 5-1: Product: syz
[ 2005.999966][T22285] usb 5-1: Manufacturer: syz
[ 2006.005283][T22285] usb 5-1: SerialNumber: syz
[ 2006.220361][T26699] bond3 (unregistering): Released all slaves
[ 2006.249752][T22285] aqc111: probe of 5-1:1.105 failed with error -22
[ 2008.431877][T25184] usb 5-1: USB disconnect, device number 23
[ 2008.613212][T26725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5826'.
[ 2010.877484][T26739] loop6: detected capacity change from 0 to 4096
[ 2010.895292][T26739] __ntfs_error: 4 callbacks suppressed
[ 2010.895305][T26739] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 2012.191456][T26739] ntfs: volume version 3.1.
[ 2012.608223][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'.
[ 2017.742691][   T28] audit: type=1400 audit(1790345239.800:740): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26787 comm="syz.4.5846"
[ 2018.733957][T26798] syzkaller0: entered promiscuous mode
[ 2018.739755][T26798] syzkaller0: entered allmulticast mode
[ 2018.749779][T26798] tc mirred to Houston: device batadv_slave_0 is down
[ 2021.230059][T22285] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2021.746148][   T28] audit: type=1400 audit(1790345243.150:741): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=26825 comm="syz.6.5858"
[ 2022.206722][T22285] usb 5-1: Using ep0 maxpacket: 16
[ 2022.660718][T22285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 2022.823265][T22285] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 2023.290122][T22285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2023.450476][T22285] usb 5-1: Product: syz
[ 2023.456165][T22285] usb 5-1: Manufacturer: syz
[ 2023.461251][T22285] usb 5-1: SerialNumber: syz
[ 2023.692376][T22285] usb 5-1: config 0 descriptor??
[ 2023.752681][T22285] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[ 2023.804902][T22285] usb 5-1: Detected FT232R
[ 2023.963710][T22285] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 2024.013472][T22285] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 2024.057577][T22285] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[ 2024.080245][T22285] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 2024.138748][T22285] usb 5-1: USB disconnect, device number 24
[ 2024.206909][T22285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 2024.280410][T22285] ftdi_sio 5-1:0.0: device disconnected
[ 2026.357233][T22285] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 2026.563213][T22285] usb 7-1: Using ep0 maxpacket: 32
[ 2026.571626][T22285] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2026.581297][T22285] usb 7-1: config 165 has an invalid interface number: 162 but max is 0
[ 2026.590967][T22285] usb 7-1: config 165 has no interface number 0
[ 2026.597654][T22285] usb 7-1: config 165 interface 162 has no altsetting 0
[ 2026.608764][T22285] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24
[ 2026.618434][T22285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2026.626569][T22285] usb 7-1: Product: syz
[ 2026.631795][T22285] usb 7-1: Manufacturer: syz
[ 2026.636563][T22285] usb 7-1: SerialNumber: syz
[ 2026.938902][T26874] netlink: 'syz.6.5867': attribute type 21 has an invalid length.
[ 2026.963555][T26874] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5867'.
[ 2026.996773][ T5828] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 2027.209732][ T5828] usb 3-1: config 0 has an invalid interface number: 182 but max is 1
[ 2027.230300][ T5828] usb 3-1: config 0 has an invalid interface number: 9 but max is 1
[ 2027.242872][ T5828] usb 3-1: config 0 has no interface number 0
[ 2027.253476][ T5828] usb 3-1: config 0 has no interface number 1
[ 2027.262402][ T5828] usb 3-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 2027.277466][ T5828] usb 3-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2027.296551][ T5828] usb 3-1: config 0 interface 9 has no altsetting 0
[ 2027.305075][ T5828] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 2027.320257][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2027.343064][ T5828] usb 3-1: config 0 descriptor??
[ 2027.373140][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2027.397946][T18097] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2027.418793][ T5828] snd-usb-audio: probe of 3-1:0.182 failed with error -2
[ 2027.443929][ T5828] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2027.461131][T22285] usb 7-1: USB disconnect, device number 18
[ 2027.589395][ T5828] snd-usb-audio: probe of 3-1:0.9 failed with error -2
[ 2027.602742][T15361] udevd[15361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2027.687686][T18097] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2027.702860][T18097] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2027.713592][T18097] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2027.730947][T18097] usb 1-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2027.740767][T18097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2027.762262][T18097] usb 1-1: Product: syz
[ 2027.767035][T18097] usb 1-1: Manufacturer: syz
[ 2027.771783][T18097] usb 1-1: SerialNumber: syz
[ 2028.096170][T18097] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 2028.134169][T26886] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2028.163941][T26886] gadgetfs: bound to dummy_udc driver
[ 2028.686234][T18097] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[ 2028.880826][T18097] usb 1-1: USB disconnect, device number 67
[ 2029.464604][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2030.543806][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5873'.
[ 2031.432020][T21817] usb 3-1: USB disconnect, device number 84
[ 2032.730164][T25184] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 2032.859703][T26918] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2032.886852][T26918] gadgetfs: bound to dummy_udc driver
[ 2032.949283][T25184] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2033.197273][T22285] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[ 2033.248891][    C1] gadgetfs: connected
[ 2033.255560][T22285] gadgetfs: disconnected
[ 2033.478353][    C1] gadgetfs: connected
[ 2033.486642][T22285] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2033.547426][T22285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2033.642288][T22285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.796999][    C1] gadgetfs: configuration #1
[ 2034.242442][T25184] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2034.257909][T25184] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2034.265261][T26918] gadgetfs: suspended from state 3
[ 2034.282024][T25184] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2034.290629][T22285] usb 1-1: can't set config #1, error -71
[ 2034.291118][T25184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2034.304973][T25184] usb 7-1: Product: syz
[ 2034.309153][T25184] usb 7-1: Manufacturer: syz
[ 2034.309493][T22285] usb 1-1: USB disconnect, device number 69
[ 2034.313991][T25184] usb 7-1: SerialNumber: syz
[ 2034.332620][T26918] gadgetfs: disconnected
[ 2034.626612][T25184] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2034.682865][T25184] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[ 2034.736892][T25184] usb 7-1: USB disconnect, device number 19
[ 2034.749818][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2035.831075][T26929] netlink: 'syz.2.5884': attribute type 1 has an invalid length.
[ 2037.041163][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2037.053233][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2037.063523][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2037.072022][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2037.100042][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2037.107452][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2037.192801][T21165] syz_tun (unregistering): left allmulticast mode
[ 2038.820625][T22285] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 2039.054393][T22285] usb 7-1: config 0 has an invalid interface number: 182 but max is 1
[ 2039.429584][ T5083] Bluetooth: hci1: command tx timeout
[ 2039.656859][T22285] usb 7-1: config 0 has an invalid interface number: 9 but max is 1
[ 2039.671849][T22285] usb 7-1: config 0 has no interface number 0
[ 2039.678383][T22285] usb 7-1: config 0 has no interface number 1
[ 2039.684644][T22285] usb 7-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 2039.695773][T22285] usb 7-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2039.709335][T22285] usb 7-1: config 0 interface 9 has no altsetting 0
[ 2039.715991][T22285] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 2039.796706][T22285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2039.825063][T22285] usb 7-1: config 0 descriptor??
[ 2039.880461][T22285] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2039.916045][T22285] snd-usb-audio: probe of 7-1:0.182 failed with error -2
[ 2039.943955][T22285] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2040.055678][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2040.062145][T22285] snd-usb-audio: probe of 7-1:0.9 failed with error -2
[ 2040.290644][T26938] chnl_net:caif_netlink_parms(): no params data found
[ 2040.572349][T26938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2040.579862][T26938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2040.587889][T26938] bridge_slave_0: entered allmulticast mode
[ 2040.595365][T26938] bridge_slave_0: entered promiscuous mode
[ 2040.811469][T26938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2040.863433][T26938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2040.935741][T26938] bridge_slave_1: entered allmulticast mode
[ 2041.021008][T26938] bridge_slave_1: entered promiscuous mode
[ 2041.607503][T26972] loop4: detected capacity change from 0 to 256
[ 2041.660965][ T5083] Bluetooth: hci1: command tx timeout
[ 2041.714281][T25184] usb 7-1: USB disconnect, device number 20
[ 2041.960522][T26938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2042.062775][T26938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2042.180799][T22285] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 2042.229894][T26938] team0: Port device team_slave_0 added
[ 2042.347075][T26938] team0: Port device team_slave_1 added
[ 2042.400895][T22285] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2042.433550][T22285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2042.466626][T26938] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2042.483844][T22285] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2042.496990][T26938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2042.554236][T22285] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2042.563752][T22285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2042.571950][T26938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2042.582540][T22285] usb 3-1: Product: syz
[ 2042.586742][T22285] usb 3-1: Manufacturer: syz
[ 2042.591370][T22285] usb 3-1: SerialNumber: syz
[ 2042.668811][T26938] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2042.675835][T26938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2042.788282][T26938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2042.943867][T22285] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2042.988484][T22285] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 2043.017498][T22285] usb 3-1: USB disconnect, device number 85
[ 2043.074473][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2043.339246][T26938] hsr_slave_0: entered promiscuous mode
[ 2043.358264][T26938] hsr_slave_1: entered promiscuous mode
[ 2043.378109][T26938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2043.394258][T26938] Cannot create hsr debugfs directory
[ 2043.979817][ T5083] Bluetooth: hci1: command tx timeout
[ 2045.997934][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 2046.004272][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 2046.170599][T27010] Bluetooth: hci1: command tx timeout
[ 2047.278663][   T49] hsr_slave_0: left promiscuous mode
[ 2047.368335][   T49] hsr_slave_1: left promiscuous mode
[ 2047.507841][   T49] bond3 (unregistering): Released all slaves
[ 2048.292035][   T49] bond2 (unregistering): Released all slaves
[ 2048.423794][T24231] Bluetooth: hci1: command tx timeout
[ 2048.451144][   T28] audit: type=1326 audit(1790345268.127:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.510929][   T28] audit: type=1326 audit(1790345268.127:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.543392][   T28] audit: type=1326 audit(1790345268.127:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.607591][   T28] audit: type=1326 audit(1790345268.127:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.726376][   T28] audit: type=1326 audit(1790345268.127:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.796311][   T28] audit: type=1326 audit(1790345268.127:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2048.820935][   T28] audit: type=1326 audit(1790345268.127:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2049.286910][   T28] audit: type=1326 audit(1790345268.127:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2049.391691][   T28] audit: type=1326 audit(1790345268.127:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2049.503765][   T28] audit: type=1326 audit(1790345268.127:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27031 comm="syz.6.5900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2050.480568][   T49] bond1 (unregistering): Released all slaves
[ 2050.724995][T24231] Bluetooth: hci1: command tx timeout
[ 2050.767013][T27051] loop4: detected capacity change from 0 to 256
[ 2052.121247][T27058] loop4: detected capacity change from 0 to 256
[ 2052.180329][T27058] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[ 2054.023947][   T49] bond0 (unregistering): Released all slaves
[ 2058.995068][T27093] loop2: detected capacity change from 0 to 256
[ 2060.375054][T27107] bond5 (unregistering): Released all slaves
[ 2061.019410][T26938] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2061.046051][T26938] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2061.064634][T26938] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2061.084271][T26938] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2061.267169][T26938] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2061.307715][T26938] 8021q: adding VLAN 0 to HW filter on device team0
[ 2061.319820][T18097] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 2061.343798][T13257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2061.350972][T13257] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2061.381504][T13257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2061.388733][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2061.526410][T18097] usb 7-1: Using ep0 maxpacket: 32
[ 2061.534946][T18097] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2061.568392][T18097] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2061.606818][T18097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2061.645741][T18097] usb 7-1: config 0 descriptor??
[ 2061.809492][T27140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5918'.
[ 2061.818813][T27140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5918'.
[ 2061.829610][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5918'.
[ 2061.879792][T26938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2061.943057][T21817] usb 7-1: USB disconnect, device number 21
[ 2062.032936][T26938] veth0_vlan: entered promiscuous mode
[ 2062.136007][T26938] veth1_vlan: entered promiscuous mode
[ 2062.656662][T26938] veth0_macvtap: entered promiscuous mode
[ 2062.922475][T26938] veth1_macvtap: entered promiscuous mode
[ 2063.900300][T24231] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2063.983212][T26938] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2064.262512][T26938] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2064.334708][T27156] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2064.369618][T27156] gadgetfs: bound to dummy_udc driver
[ 2064.449339][T26938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.485773][T26938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.494773][T26938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2064.503598][T26938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2065.178404][T18097] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 2065.187074][    C1] gadgetfs: connected
[ 2065.200972][T18097] gadgetfs: disconnected
[ 2065.422038][    C1] gadgetfs: connected
[ 2065.430283][T18097] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2065.704629][T18097] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2065.818517][T18097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.150388][    C1] gadgetfs: configuration #1
[ 2067.415561][T27156] gadgetfs: suspended from state 3
[ 2067.415828][T18097] usb 1-1: can't set config #1, error -71
[ 2067.458178][T18097] usb 1-1: USB disconnect, device number 70
[ 2067.491394][T27156] gadgetfs: disconnected
[ 2067.549506][T27170] loop6: detected capacity change from 0 to 256
[ 2067.692993][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2067.700867][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2067.871796][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2067.891189][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2068.223137][T27184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5928'.
[ 2068.232281][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5928'.
[ 2068.241253][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'.
[ 2070.073629][T27200] ubi0: attaching mtd0
[ 2070.321404][T27200] ubi0: scanning is finished
[ 2070.618995][T27200] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2070.780411][T27200] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2070.789095][T27210] loop2: detected capacity change from 0 to 256
[ 2072.289164][T27225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5937'.
[ 2072.298164][T27225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5937'.
[ 2072.308248][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5937'.
[ 2073.936935][T27256] loop4: detected capacity change from 0 to 512
[ 2073.953442][T27256] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2073.977497][T27256] ext4: Unknown parameter 'fsname'
[ 2075.981975][T27274] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 2075.991221][T27274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2076.548400][T27277] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5949'.
[ 2076.557403][T27277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5949'.
[ 2076.566521][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5949'.
[ 2076.727612][T27282] ubi0: attaching mtd0
[ 2076.740703][T27282] ubi0: scanning is finished
[ 2076.766310][T27282] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2077.008120][T27282] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2077.381614][T24231] Bluetooth: hci1: command tx timeout
[ 2078.984040][T27304] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2079.108047][T27304] gadgetfs: bound to dummy_udc driver
[ 2080.229988][ T5828] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[ 2080.282101][    C1] gadgetfs: connected
[ 2080.286464][ T5828] gadgetfs: disconnected
[ 2080.493810][    C1] gadgetfs: connected
[ 2080.499704][ T5828] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2080.517367][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2080.542346][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2080.838620][T21817] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2081.556588][    C1] gadgetfs: configuration #1
[ 2081.729413][T27334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2081.750973][T21817] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2081.770227][T27334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2081.782963][T21817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2081.811460][T21817] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2081.838713][T21817] usb 5-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2081.853225][T21817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2081.862668][T21817] usb 5-1: Product: syz
[ 2081.867171][T21817] usb 5-1: Manufacturer: syz
[ 2081.872540][ T9302] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 2081.880197][T21817] usb 5-1: SerialNumber: syz
[ 2082.089114][ T9302] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2082.099156][ T9302] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2082.112941][ T9302] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2082.142034][ T9302] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2082.157519][T21817] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2082.167720][ T9302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.180919][ T9302] usb 7-1: Product: syz
[ 2082.187772][ T9302] usb 7-1: Manufacturer: syz
[ 2082.192823][ T9302] usb 7-1: SerialNumber: syz
[ 2082.213827][T21817] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[ 2082.230833][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2082.251602][T21817] usb 5-1: USB disconnect, device number 25
[ 2082.469473][ T9302] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2082.479706][T27304] gadgetfs: suspended from state 3
[ 2082.484921][T27304] gadgetfs: disconnected
[ 2082.490689][ T5828] usb 1-1: can't set config #1, error -71
[ 2082.615295][ T5828] usb 1-1: USB disconnect, device number 71
[ 2082.663677][T27352] CIFS: Attempting to mount //127.0.0.1/share
[ 2082.693094][T27352] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 2082.700861][T27352] CIFS: VFS: cifs_mount failed w/return code = -111
[ 2082.861090][ T9302] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[ 2083.002844][ T9302] usb 7-1: USB disconnect, device number 22
[ 2083.431171][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2083.593028][T27361] ubi0: attaching mtd0
[ 2083.606018][T27361] ubi0: scanning is finished
[ 2083.610776][T27361] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2085.196951][T27361] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2086.412685][   T28] kauditd_printk_skb: 5 callbacks suppressed
[ 2086.412705][   T28] audit: type=1326 audit(1790345304.156:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2086.485154][   T28] audit: type=1326 audit(1790345304.156:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.651160][   T28] audit: type=1326 audit(1790345304.156:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.676287][   T28] audit: type=1326 audit(1790345304.156:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.735592][   T28] audit: type=1326 audit(1790345304.156:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.766069][   T28] audit: type=1326 audit(1790345304.184:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.797206][   T28] audit: type=1326 audit(1790345304.184:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.821473][   T28] audit: type=1326 audit(1790345304.184:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.845870][   T28] audit: type=1326 audit(1790345304.184:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.870229][   T28] audit: type=1326 audit(1790345304.184:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27378 comm="syz.2.5973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5ff9e159 code=0x7ffc0000
[ 2087.971941][T27387] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2088.074009][T27387] gadgetfs: bound to dummy_udc driver
[ 2088.208304][ T9302] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 2088.373096][T27390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2088.390901][T27390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2088.403505][T25184] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 2088.420953][ T9302] usb 3-1: Using ep0 maxpacket: 8
[ 2088.421130][    C0] gadgetfs: connected
[ 2088.429550][ T9302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2088.434369][T25184] gadgetfs: disconnected
[ 2088.456282][ T9302] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2088.477324][ T9302] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2088.506720][ T9302] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 2088.520992][ T9302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2088.539476][ T9302] usb 3-1: Product: syz
[ 2088.543784][ T9302] usb 3-1: Manufacturer: syz
[ 2088.555181][ T9302] usb 3-1: SerialNumber: syz
[ 2088.642112][    C0] gadgetfs: connected
[ 2088.654160][T25184] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2088.663833][T25184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2088.674257][T25184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2088.691585][    C0] gadgetfs: configuration #1
[ 2089.129804][T27395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2089.138774][T27395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2089.245272][ T9302] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 2089.269572][ T9302] usb 3-1: clock source 0 is not valid, cannot use
[ 2089.278113][ T9302] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[ 2090.597255][T27383] gadgetfs: suspended from state 3
[ 2090.614302][T25184] usb 1-1: can't set config #1, error -71
[ 2090.614346][T27383] gadgetfs: disconnected
[ 2090.635745][T25184] usb 1-1: USB disconnect, device number 72
[ 2090.845031][ T9302] usb 3-1: USB disconnect, device number 86
[ 2092.402488][T25184] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 2093.293591][T25184] usb 7-1: Using ep0 maxpacket: 16
[ 2093.309546][T25184] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[ 2093.318246][T25184] usb 7-1: config 1 has no interface number 0
[ 2093.325805][T25184] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2093.336207][T25184] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2093.469626][T25184] usb 7-1: config 1 interface 105 has no altsetting 0
[ 2093.594780][T25184] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 2093.726421][T25184] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2093.945558][T25184] usb 7-1: Product: syz
[ 2093.949866][T25184] usb 7-1: Manufacturer: syz
[ 2094.009177][T25184] usb 7-1: SerialNumber: syz
[ 2094.017793][T27411] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2094.054841][T27411] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2094.196786][T27437] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2094.527168][ T9302] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 2094.793232][ T9302] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2094.818523][ T9302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2094.845447][ T9302] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2095.174236][T27442] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2095.248595][T27437] gadgetfs: bound to dummy_udc driver
[ 2095.259682][T27442] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2095.272460][ T9302] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2095.300139][ T9302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.308339][ T9302] usb 3-1: Product: syz
[ 2095.312532][ T9302] usb 3-1: Manufacturer: syz
[ 2095.317155][ T9302] usb 3-1: SerialNumber: syz
[ 2095.346128][T25184] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[ 2095.400860][T25184] aqc111: probe of 7-1:1.105 failed with error -32
[ 2095.504136][T25184] usb 7-1: USB disconnect, device number 23
[ 2095.556563][T25185] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[ 2096.423509][    C0] gadgetfs: connected
[ 2096.427886][T25185] gadgetfs: disconnected
[ 2096.451017][ T9302] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2096.515372][ T9302] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 2096.540765][ T9302] usb 3-1: USB disconnect, device number 87
[ 2096.585405][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2096.640641][    C0] gadgetfs: connected
[ 2096.646380][T25185] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2096.657061][T25185] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2096.693514][T25185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2096.724527][    C0] gadgetfs: configuration #1
[ 2097.722114][T27459] netlink: 'syz.6.5995': attribute type 1 has an invalid length.
[ 2097.885555][T27462] 8021q: adding VLAN 0 to HW filter on device bond7
[ 2097.897633][T27462] bond6: (slave bond7): making interface the new active one
[ 2097.909793][T27462] bond6: (slave bond7): Enslaving as an active interface with an up link
[ 2098.416164][T27437] gadgetfs: suspended from state 3
[ 2098.428377][T25185] usb 1-1: can't set config #1, error -71
[ 2098.434206][T27437] gadgetfs: disconnected
[ 2098.982399][T25185] usb 1-1: USB disconnect, device number 73
[ 2103.587226][T22285] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2103.797700][T22285] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2103.989141][T22285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2104.012780][T22285] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2104.076790][T22285] usb 5-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2104.087177][T22285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2104.095257][T22285] usb 5-1: Product: syz
[ 2104.116132][T22285] usb 5-1: Manufacturer: syz
[ 2104.139198][T22285] usb 5-1: SerialNumber: syz
[ 2104.644611][T22285] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2104.719181][T22285] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[ 2104.749141][T22285] usb 5-1: USB disconnect, device number 26
[ 2104.797900][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2104.807295][T27510] netlink: 'syz.0.6006': attribute type 1 has an invalid length.
[ 2104.864456][T27510] bond1 (unregistering): Released all slaves
[ 2104.997865][T27519] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2105.064735][T27519] gadgetfs: bound to dummy_udc driver
[ 2105.364848][T22285] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[ 2106.004107][    C1] gadgetfs: connected
[ 2106.008356][T22285] gadgetfs: disconnected
[ 2106.199205][    C1] gadgetfs: connected
[ 2106.215079][T22285] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2106.242731][T22285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2106.254770][T22285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2106.720817][    C1] gadgetfs: configuration #1
[ 2107.442212][T27538] loop6: detected capacity change from 0 to 256
[ 2107.485759][T27538] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2108.876469][T27519] gadgetfs: suspended from state 3
[ 2108.881743][T27519] gadgetfs: disconnected
[ 2108.886790][T22285] usb 1-1: can't set config #1, error -71
[ 2108.896926][T22285] usb 1-1: USB disconnect, device number 74
[ 2109.157816][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2109.157832][   T28] audit: type=1800 audit(1790345325.138:771): pid=27538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6015" name="file1" dev="loop6" ino=1048853 res=0 errno=0
[ 2110.382639][T27552] input: syz0 as /devices/virtual/input/input192
[ 2111.682942][T22285] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 2111.738474][ T9302] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 2111.806439][T27574] ubi0: attaching mtd0
[ 2111.831844][T27574] ubi0: scanning is finished
[ 2111.849859][T27574] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2111.893398][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[ 2112.008854][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[ 2112.022162][T22285] usb 3-1: Using ep0 maxpacket: 16
[ 2112.084672][T27574] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2112.788086][ T9302] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2112.809638][T22285] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[ 2112.819097][ T9302] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2112.842596][T22285] usb 3-1: config 1 has no interface number 0
[ 2112.848764][T22285] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2112.870264][ T9302] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2112.883848][T22285] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2112.894188][T22285] usb 3-1: config 1 interface 105 has no altsetting 0
[ 2112.905191][ T9302] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2112.916209][T22285] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 2112.925475][T22285] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2112.933944][ T9302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2112.942342][T22285] usb 3-1: Product: syz
[ 2112.946528][T22285] usb 3-1: Manufacturer: syz
[ 2112.951232][ T9302] usb 7-1: Product: syz
[ 2112.955411][ T9302] usb 7-1: Manufacturer: syz
[ 2112.960030][ T9302] usb 7-1: SerialNumber: syz
[ 2112.964722][T22285] usb 3-1: SerialNumber: syz
[ 2112.973463][T27562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2112.980731][T27562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2114.689310][ T9302] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2114.894776][T22285] aqc111: probe of 3-1:1.105 failed with error -71
[ 2114.907285][T22285] usb 3-1: USB disconnect, device number 88
[ 2114.942634][ T9302] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[ 2115.031899][ T9302] usb 7-1: USB disconnect, device number 24
[ 2115.466913][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2115.984272][T27593] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2116.015227][T27593] gadgetfs: bound to dummy_udc driver
[ 2116.310664][T25185] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[ 2116.381451][    C0] gadgetfs: connected
[ 2116.391662][T25185] gadgetfs: disconnected
[ 2116.638198][    C0] gadgetfs: connected
[ 2116.667262][T25185] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2116.770111][T25185] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2116.884005][T25185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2117.125357][    C0] gadgetfs: configuration #1
[ 2117.367748][T27593] gadgetfs: suspended from state 3
[ 2117.381182][T25185] usb 1-1: can't set config #1, error -71
[ 2117.392089][T27593] gadgetfs: disconnected
[ 2117.430188][T25185] usb 1-1: USB disconnect, device number 75
[ 2117.658465][T27604] ubi0: attaching mtd0
[ 2117.675368][T27604] ubi0: scanning is finished
[ 2117.719534][T27604] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2117.914848][ T5811] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 2118.009302][T27604] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2118.144088][ T5811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2118.163183][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2118.186735][ T5811] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2118.217328][ T5811] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[ 2118.230756][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2118.247857][ T5811] usb 7-1: Product: syz
[ 2118.257005][ T5811] usb 7-1: Manufacturer: syz
[ 2118.267762][ T5811] usb 7-1: SerialNumber: syz
[ 2118.466431][T27616] No source specified
[ 2119.518875][T22285] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 2119.546466][T27602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2119.556971][T27602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2119.572293][T27602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2119.585625][ T9302] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2119.597216][T27602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2119.614381][ T5811] usb 7-1: USB disconnect, device number 25
[ 2119.620452][    C0] usb 7-1: comm data receiver aborted.
[ 2119.748215][T22285] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2119.772160][T22285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2119.800331][ T9302] usb 1-1: Using ep0 maxpacket: 16
[ 2119.819477][T22285] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2119.836603][ T9302] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[ 2119.846998][ T9302] usb 1-1: config 1 has no interface number 0
[ 2119.858140][T22285] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2119.867943][ T9302] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2119.887148][T22285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2119.911035][T22285] usb 3-1: Product: syz
[ 2119.915247][T22285] usb 3-1: Manufacturer: syz
[ 2119.922046][ T9302] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2119.938998][T22285] usb 3-1: SerialNumber: syz
[ 2119.946123][ T9302] usb 1-1: config 1 interface 105 has no altsetting 0
[ 2119.985279][ T9302] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 2120.004700][ T9302] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2120.022951][ T9302] usb 1-1: Product: syz
[ 2120.032485][ T9302] usb 1-1: Manufacturer: syz
[ 2120.044466][ T9302] usb 1-1: SerialNumber: syz
[ 2120.059146][T27620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2120.073458][T27620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2120.322911][T22285] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2120.383981][T22285] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 2120.430205][T22285] usb 3-1: USB disconnect, device number 89
[ 2120.530872][T19938] udevd[19938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2120.538829][T27620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2120.591726][T27620] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2120.747506][T27632] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2120.783131][T27632] gadgetfs: bound to dummy_udc driver
[ 2121.090616][T22285] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[ 2121.123039][ T9302] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[ 2121.192941][    C1] gadgetfs: connected
[ 2121.222573][T22285] gadgetfs: disconnected
[ 2121.309326][ T9302] aqc111: probe of 1-1:1.105 failed with error -32
[ 2121.463810][ T9302] usb 1-1: USB disconnect, device number 76
[ 2121.511181][    C1] gadgetfs: connected
[ 2121.526574][T22285] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2121.671234][T22285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2121.829075][T22285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2122.002081][ T5828] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2122.040304][    C1] gadgetfs: configuration #1
[ 2122.148489][T27632] gadgetfs: suspended from state 3
[ 2122.162511][T22285] usb 2-1: can't set config #1, error -71
[ 2122.174186][T27632] gadgetfs: disconnected
[ 2122.216584][T22285] usb 2-1: USB disconnect, device number 5
[ 2122.331357][T27641] ubi0: attaching mtd0
[ 2122.338446][T27641] ubi0: scanning is finished
[ 2122.343112][T27641] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2122.351844][ T5828] usb 5-1: Using ep0 maxpacket: 32
[ 2122.359990][ T5828] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2122.379784][ T5828] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2122.397876][T27641] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2122.405928][ T5828] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2122.413488][ T5828] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 2122.422557][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2122.442433][ T5828] usb 5-1: config 0 descriptor??
[ 2122.531515][ T9302] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2122.737569][ T9302] usb 1-1: Using ep0 maxpacket: 8
[ 2122.751392][ T9302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2122.764123][ T9302] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2122.778145][ T9302] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2122.796409][ T9302] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 2122.808866][ T9302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2122.819186][ T9302] usb 1-1: Product: syz
[ 2122.823475][ T9302] usb 1-1: Manufacturer: syz
[ 2122.828434][ T9302] usb 1-1: SerialNumber: syz
[ 2123.523627][ T9302] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 2123.556112][ T9302] usb 1-1: clock source 0 is not valid, cannot use
[ 2123.595048][ T9302] usb 1-1: 1:1: cannot get freq (v2/v3): err -32
[ 2123.630180][ T9302] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 2123.715662][ T9302] usb 1-1: USB disconnect, device number 77
[ 2124.148492][ T5828] usbhid 5-1:0.0: can't add hid device: -71
[ 2124.159188][ T5828] usbhid: probe of 5-1:0.0 failed with error -71
[ 2124.178969][ T5828] usb 5-1: USB disconnect, device number 27
[ 2124.211293][T18097] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 2124.545688][T18097] usb 7-1: config 0 has an invalid interface number: 182 but max is 1
[ 2124.579680][T18097] usb 7-1: config 0 has an invalid interface number: 9 but max is 1
[ 2124.632597][T18097] usb 7-1: config 0 has no interface number 0
[ 2124.657062][T18097] usb 7-1: config 0 has no interface number 1
[ 2124.673726][T18097] usb 7-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 2124.721225][T18097] usb 7-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2124.786702][T18097] usb 7-1: config 0 interface 9 has no altsetting 0
[ 2124.836715][T18097] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 2124.897852][T18097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2125.885118][T18097] usb 7-1: config 0 descriptor??
[ 2125.938907][T18097] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2125.967044][ T5811] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2125.989125][T18097] snd-usb-audio: probe of 7-1:0.182 failed with error -2
[ 2126.047488][T18097] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2126.192704][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2126.195384][T18097] snd-usb-audio: probe of 7-1:0.9 failed with error -2
[ 2126.214332][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2126.353759][ T5811] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2126.386416][ T5811] usb 5-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2126.411059][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2126.439083][ T5811] usb 5-1: Product: syz
[ 2126.455658][ T5811] usb 5-1: Manufacturer: syz
[ 2126.460802][ T5811] usb 5-1: SerialNumber: syz
[ 2127.012545][ T5811] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2127.068840][ T5811] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[ 2127.120326][ T5811] usb 5-1: USB disconnect, device number 28
[ 2127.155416][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2127.338772][T25185] usb 7-1: USB disconnect, device number 26
[ 2127.362055][T27678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6057'.
[ 2127.371229][T27678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6057'.
[ 2127.380297][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'.
[ 2127.600823][T27681] ubi0: attaching mtd0
[ 2127.630258][T27681] ubi0: scanning is finished
[ 2127.734788][T27681] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2127.950100][T27685] No source specified
[ 2128.413835][T27681] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2128.795029][T27694] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2128.821077][T27694] gadgetfs: bound to dummy_udc driver
[ 2130.963317][T18097] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 2131.223541][T18097] usb 3-1: Using ep0 maxpacket: 32
[ 2131.244141][T18097] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2131.283105][T18097] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2131.326180][T18097] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2131.352494][T18097] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 2131.395153][T18097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2131.451802][T18097] usb 3-1: config 0 descriptor??
[ 2132.119524][T27720] No source specified
[ 2133.152553][ T9302] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2133.393114][ T9302] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2133.435182][ T9302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2133.464735][ T9302] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2133.490177][ T9302] usb 1-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2133.491736][T25185] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2133.503871][ T9302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2133.515307][ T9302] usb 1-1: Product: syz
[ 2133.519555][ T9302] usb 1-1: Manufacturer: syz
[ 2133.524240][ T9302] usb 1-1: SerialNumber: syz
[ 2133.765797][T25185] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[ 2133.811115][T25185] usb 5-1: config 0 has an invalid interface number: 9 but max is 1
[ 2133.820513][ T9302] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 2133.855102][T25185] usb 5-1: config 0 has no interface number 0
[ 2133.873326][T25185] usb 5-1: config 0 has no interface number 1
[ 2133.897770][T25185] usb 5-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 2133.961653][ T9302] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[ 2133.963336][T25185] usb 5-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2134.051116][T25185] usb 5-1: config 0 interface 9 has no altsetting 0
[ 2134.069409][ T9302] usb 1-1: USB disconnect, device number 78
[ 2134.073661][T25185] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 2134.116093][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2134.146987][T25185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.206522][T25185] usb 5-1: config 0 descriptor??
[ 2134.365268][T25185] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2134.611138][T18097] usbhid 3-1:0.0: can't add hid device: -71
[ 2134.873898][T18097] usbhid: probe of 3-1:0.0 failed with error -71
[ 2135.201571][T25185] snd-usb-audio: probe of 5-1:0.182 failed with error -2
[ 2135.213305][T25185] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2135.232191][T18097] usb 3-1: USB disconnect, device number 90
[ 2135.263821][T25185] snd-usb-audio: probe of 5-1:0.9 failed with error -2
[ 2135.359373][T15382] udevd[15382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2135.409307][T27732] ubi0: attaching mtd0
[ 2135.414993][T27732] ubi0: scanning is finished
[ 2135.458473][T27732] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2135.497681][T27735] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2135.524483][T27735] gadgetfs: bound to dummy_udc driver
[ 2136.897846][T27732] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2137.031919][T25184] usb 5-1: USB disconnect, device number 29
[ 2137.498497][ T9302] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 2137.510954][   T28] audit: type=1326 audit(1790345351.306:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.168372][   T28] audit: type=1326 audit(1790345351.306:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.251717][ T9302] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2138.310417][T25184] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2138.328593][ T9302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2138.351972][ T9302] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2138.365517][   T28] audit: type=1326 audit(1790345351.306:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.390108][ T9302] usb 3-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2138.399827][ T9302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2138.407842][ T9302] usb 3-1: Product: syz
[ 2138.412261][ T9302] usb 3-1: Manufacturer: syz
[ 2138.416872][ T9302] usb 3-1: SerialNumber: syz
[ 2138.485710][   T28] audit: type=1326 audit(1790345351.306:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.549719][   T28] audit: type=1326 audit(1790345351.306:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.559010][T27754] netlink: 'syz.6.6077': attribute type 1 has an invalid length.
[ 2138.611066][T25184] usb 5-1: Using ep0 maxpacket: 8
[ 2138.653549][T25184] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2138.668852][T25184] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2138.677917][T25184] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2138.709781][ T9302] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 2138.709892][T25184] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 2138.726509][T25184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2138.734799][T25184] usb 5-1: Product: syz
[ 2138.735708][   T28] audit: type=1326 audit(1790345351.324:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.739326][T25184] usb 5-1: Manufacturer: syz
[ 2138.768246][T25184] usb 5-1: SerialNumber: syz
[ 2138.777373][   T28] audit: type=1326 audit(1790345351.324:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.837709][ T9302] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 2138.843094][   T28] audit: type=1326 audit(1790345351.324:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.871141][ T9302] usb 3-1: USB disconnect, device number 91
[ 2138.909802][   T28] audit: type=1326 audit(1790345351.324:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2138.948129][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2138.981199][   T28] audit: type=1326 audit(1790345351.324:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27748 comm="syz.6.6076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42ab9e159 code=0x7ffc0000
[ 2139.481503][T25184] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 2139.544713][  T970] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 2139.578253][T25184] usb 5-1: clock source 0 is not valid, cannot use
[ 2139.878375][T25184] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 2139.889452][  T970] usb 7-1: Using ep0 maxpacket: 32
[ 2139.967332][  T970] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2140.105331][  T970] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2140.265654][  T970] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2140.302123][  T970] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 2140.313796][T25184] usb 5-1: USB disconnect, device number 30
[ 2140.332855][  T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2140.411320][T15382] udevd[15382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2140.431893][  T970] usb 7-1: config 0 descriptor??
[ 2140.824664][T27775] loop4: detected capacity change from 0 to 256
[ 2140.876540][T27775] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2141.587997][T27780] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2141.621511][T27780] gadgetfs: bound to dummy_udc driver
[ 2142.017783][T25184] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[ 2142.161798][    C0] gadgetfs: connected
[ 2142.166582][T25184] gadgetfs: disconnected
[ 2142.437512][    C0] gadgetfs: connected
[ 2142.466834][T25184] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2142.651343][T25184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[ 2142.970081][T25184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2142.992842][T27785] ubi0: attaching mtd0
[ 2143.026895][T27780] gadgetfs: suspended from state 3
[ 2143.033692][T27785] ubi0: scanning is finished
[ 2143.078702][T25184] usb 1-1: can't set config #1, error -71
[ 2143.096156][T25184] usb 1-1: USB disconnect, device number 80
[ 2143.252616][T27780] gadgetfs: disconnected
[ 2143.257240][T27785] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2143.579860][T27785] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2143.717061][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2143.717847][   T28] audit: type=1326 audit(1790345357.027:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2143.761914][   T28] audit: type=1326 audit(1790345357.027:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2143.764673][  T970] usbhid 7-1:0.0: can't add hid device: -71
[ 2143.787096][   T28] audit: type=1326 audit(1790345357.027:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2143.830119][   T28] audit: type=1326 audit(1790345357.027:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.140494][   T28] audit: type=1326 audit(1790345357.027:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.509122][  T970] usbhid: probe of 7-1:0.0 failed with error -71
[ 2144.527170][  T970] usb 7-1: USB disconnect, device number 27
[ 2144.533451][   T28] audit: type=1326 audit(1790345357.027:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.603065][T27801] input: syz0 as /devices/virtual/input/input193
[ 2144.659775][   T28] audit: type=1326 audit(1790345357.027:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.704698][T25184] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 2144.728318][   T28] audit: type=1326 audit(1790345357.027:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.776733][   T28] audit: type=1326 audit(1790345357.063:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2144.833479][   T28] audit: type=1326 audit(1790345357.063:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27795 comm="syz.0.6085" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2145.042451][T25184] usb 5-1: config 0 has an invalid interface number: 182 but max is 1
[ 2145.051050][T25184] usb 5-1: config 0 has an invalid interface number: 9 but max is 1
[ 2145.059948][T25184] usb 5-1: config 0 has no interface number 0
[ 2145.066478][T25184] usb 5-1: config 0 has no interface number 1
[ 2145.072869][T25184] usb 5-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30
[ 2145.084606][T25184] usb 5-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2145.117645][T22285] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 2145.293209][T25184] usb 5-1: config 0 interface 9 has no altsetting 0
[ 2145.318615][T25184] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[ 2145.330522][T27809] loop2: detected capacity change from 0 to 164
[ 2145.380278][T25184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2145.403485][T25184] usb 5-1: config 0 descriptor??
[ 2145.426375][T25184] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2145.443191][T25184] snd-usb-audio: probe of 5-1:0.182 failed with error -2
[ 2145.468527][T25184] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 2145.528960][T22285] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2145.560179][T22285] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2145.592569][T25184] snd-usb-audio: probe of 5-1:0.9 failed with error -2
[ 2145.599136][T22285] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2145.644362][T22285] usb 7-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice= 0.40
[ 2145.665689][T22285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2145.685909][T22285] usb 7-1: Product: syz
[ 2145.697463][T22285] usb 7-1: Manufacturer: syz
[ 2145.708327][T22285] usb 7-1: SerialNumber: syz
[ 2146.075450][T22285] usb 7-1: Quirk or no altest; falling back to MIDI 1.0
[ 2146.111236][T22285] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[ 2146.129625][T22285] usb 7-1: USB disconnect, device number 28
[ 2146.156190][T18242] udevd[18242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2146.880517][T25184] usb 5-1: USB disconnect, device number 31
[ 2147.105021][T27822] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 2147.137800][T27822] gadgetfs: bound to dummy_udc driver
[ 2147.382626][ T9302] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 2149.186190][T27821] loop4: detected capacity change from 0 to 32768
[ 2149.251290][T27826] ubi0: attaching mtd0
[ 2149.285401][T27826] ubi0: scanning is finished
[ 2149.312118][T27826] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 2149.815260][T27826] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 2149.969619][T27821] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 2150.025644][T27821] VFS: Lookup of '' in ocfs2 loop4 would have caused loop
[ 2150.338844][ T9302] usb 7-1: device descriptor read/all, error -71
[ 2150.555172][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2150.555188][   T28] audit: type=1326 audit(1790345363.338:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.645839][   T28] audit: type=1326 audit(1790345363.338:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.726278][T21534] ocfs2: Unmounting device (7,4) on (node local)
[ 2150.739618][   T28] audit: type=1326 audit(1790345363.338:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.747306][T21534] VFS: Busy inodes after unmount of loop4 (ocfs2)
[ 2150.806192][   T28] audit: type=1326 audit(1790345363.338:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.878945][T21534] ------------[ cut here ]------------
[ 2150.885092][T21534] kernel BUG at fs/super.c:697!
[ 2150.895697][   T28] audit: type=1326 audit(1790345363.338:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.945751][   T28] audit: type=1326 audit(1790345363.366:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2150.979727][T21534] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 2150.985845][T21534] CPU: 0 PID: 21534 Comm: syz-executor Not tainted syzkaller #0
[ 2150.993491][T21534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2151.003561][T21534] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0
[ 2151.009746][T21534] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 dc 4e f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 b6 d7 8a 48 89 de e8 d3 fa 95 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00
[ 2151.029379][T21534] RSP: 0018:ffffc90003a07d30 EFLAGS: 00010246
[ 2151.035464][T21534] RAX: 000000000000002f RBX: ffff88802ff26660 RCX: 211418b235487500
[ 2151.043443][T21534] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 2151.051421][T21534] RBP: 1ffff11005fe4cf2 R08: ffffc90003a07a27 R09: 1ffff92000740f44
[ 2151.059400][T21534] R10: dffffc0000000000 R11: fffff52000740f45 R12: 0000000000000000
[ 2151.067378][T21534] R13: dffffc0000000000 R14: ffffffff8d64ca80 R15: ffff88802ff26790
[ 2151.075367][T21534] FS:  000055555b04d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2151.084313][T21534] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2151.090905][T21534] CR2: 0000200000031000 CR3: 0000000085286000 CR4: 00000000003506f0
[ 2151.098889][T21534] Call Trace:
[ 2151.102173][T21534]  <TASK>
[ 2151.105107][T21534]  kill_block_super+0x44/0x90
[ 2151.109802][T21534]  deactivate_locked_super+0x97/0x100
[ 2151.115184][T21534]  cleanup_mnt+0x3d7/0x460
[ 2151.119612][T21534]  task_work_run+0x1d4/0x260
[ 2151.124217][T21534]  ? task_work_cancel+0x220/0x220
[ 2151.129250][T21534]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2151.134720][T21534]  exit_to_user_mode_loop+0xe6/0x110
[ 2151.140044][T21534]  exit_to_user_mode_prepare+0xee/0x180
[ 2151.145613][T21534]  syscall_exit_to_user_mode+0x1a/0x50
[ 2151.151095][T21534]  do_syscall_64+0x61/0xb0
[ 2151.155532][T21534]  ? clear_bhb_loop+0x40/0x90
[ 2151.160220][T21534]  ? clear_bhb_loop+0x40/0x90
[ 2151.164911][T21534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2151.170820][T21534] RIP: 0033:0x7fc06e59f397
[ 2151.175247][T21534] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 2151.194874][T21534] RSP: 002b:00007ffee972b588 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2151.203311][T21534] RAX: 0000000000000000 RBX: 00007fc06e6344bb RCX: 00007fc06e59f397
[ 2151.211302][T21534] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee972b640
[ 2151.219291][T21534] RBP: 00007ffee972b640 R08: 00007ffee972c640 R09: 00000000ffffffff
[ 2151.227279][T21534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee972c6d0
[ 2151.235271][T21534] R13: 00007fc06e6344bb R14: 00000000001eb020 R15: 00007ffee972c710
[ 2151.243272][T21534]  </TASK>
[ 2151.246302][T21534] Modules linked in:
[ 2151.263273][   T28] audit: type=1326 audit(1790345363.366:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2151.300414][T21534] ---[ end trace 0000000000000000 ]---
[ 2151.305980][T21534] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0
[ 2151.312216][T21534] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 dc 4e f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 b6 d7 8a 48 89 de e8 d3 fa 95 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00
[ 2151.327365][   T28] audit: type=1326 audit(1790345363.366:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2151.336724][T21534] RSP: 0018:ffffc90003a07d30 EFLAGS: 00010246
[ 2151.382972][T21534] RAX: 000000000000002f RBX: ffff88802ff26660 RCX: 211418b235487500
[ 2151.426421][   T28] audit: type=1326 audit(1790345363.366:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2151.489232][T21534] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 2151.510396][   T28] audit: type=1326 audit(1790345363.366:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27837 comm="syz.0.6097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374639e159 code=0x7ffc0000
[ 2151.515106][T21534] RBP: 1ffff11005fe4cf2 R08: ffffc90003a07a27 R09: 1ffff92000740f44
[ 2151.608770][T21534] R10: dffffc0000000000 R11: fffff52000740f45 R12: 0000000000000000
[ 2151.630445][T21534] R13: dffffc0000000000 R14: ffffffff8d64ca80 R15: ffff88802ff26790
[ 2151.642857][T21534] FS:  000055555b04d500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 2151.663806][T21534] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2151.673178][T21534] CR2: 00002000000c6030 CR3: 0000000085286000 CR4: 00000000003506e0
[ 2151.685947][T21534] Kernel panic - not syncing: Fatal exception
[ 2151.692328][T21534] Kernel Offset: disabled
[ 2151.696639][T21534] Rebooting in 86400 seconds..