last executing test programs:

6m9.453136498s ago: executing program 3 (id=247):
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x4000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0xfd, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x2}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000030000000000000000000001fe80000000000000000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000fe800000000000000000000000000026fc02000000000000000000000000c1b2c91400000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6m7.902775445s ago: executing program 3 (id=248):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120110014030600839260100cb8f26abc7cd5ce6810001020c80910904a20900bd53cac2"], 0x0)

6m3.281093528s ago: executing program 3 (id=251):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc004e21000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1)

6m2.881672966s ago: executing program 3 (id=253):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x400000100002f, {0x5, 0x2, 0xa303, 0x201, 0x1}}) (async)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x400000100002f, {0x5, 0x2, 0xa303, 0x201, 0x1}})
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c)
sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40c4, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e390b, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x16c, &(0x7f00000000c0)=ANY=[@ANYBLOB="8100004ec7148ca53d203ecb6ae2338c792a228c2ea5446a957af349cae9542e4bd761476625874cfe06f10244447d8ddf3c0c5babbd3f6b9e972c39098dd9f4957b4345fe26dceacb812affb2aeeaf7fc4bc72e1dcaac7cdc3a385e0595f3b1bdc54e16d0ec0f92cc31eb6a854e1dc24a6d7613c6e06496e73b6e09e7b53601342edd89300000004800004e99d6793c0d1068ce106476d50862a2549c2b8dc315cc0344e5767c5f29006ab50df62e364d25c6aa417c65aec76c229e1dc1bdd6fd08cb7ef93cc9d21d608b51ea866907022165ce9200004e113e"])

6m1.043699108s ago: executing program 3 (id=259):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x30}}, 0x4) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x3c}}, 0x4) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00010000000000fbdbdf250a0000000800ca8044000680"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='c'], 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1}}, 0x20) (async)
r7 = socket(0x15, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) (async)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000787000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='\v+\x01\x00')
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x4c}}, 0x4810)

5m59.012595905s ago: executing program 3 (id=263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x1, [0x5]})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16], 0x14)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
prctl$PR_SET_THP_DISABLE(0x44, 0x4)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000380)=ANY=[@ANYBLOB="120101020000007fffffff32400001020301090275000301022000080b000201ff20040904000000010120000924010400091500070c2403060404fb020d09000309040100000102200009040101010102200009050109080004fefe082501033f01fbff09040200000102200009040201010102200009058209ff03050305082501803c790010"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})
r8 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3)
write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501"], &(0x7f0000000640)={0x0, 0x0, 0x8, 0x0})
syz_usb_connect$uac1(0x4, 0xd2, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x1, 0x40, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x42}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0xffff, 0x7, 'x'}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x80, 0xaa, "256f17e9"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x1, 0x1, 0x27c, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x6, 0x8, 0xa9, 0x37, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x2, 0xa, 0x2], 0x1f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x1, 0x6, {0x7, 0x25, 0x1, 0xc, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x80, 0x4, 0x3, 0xa, '1\b', "c92c6b"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0xc, 0x92, "2d03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3d, 0x1, 0x81, 0x3, '0'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xd, 0xe, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7f}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xa, 0x0, 0xc, 0x20, 0x5}, 0x1d5, &(0x7f0000000440)={0x5, 0xf, 0x1d5, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x2, 0x9c26, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0xdf, 0x2, 0xff, 0xff00, 0x4, [0xff3fcf, 0x0]}, @generic={0x97, 0x10, 0x2, "7db84ec4f04dbd3891588b79279036f6e8a41f7c4b3f17d00a390bb413a57f737c287a7ef1fd88b3889e2689742620e729085a3a9de1fda01a05bea82a64965f750e421a0345657e833459a731a97fb56ee97c79fa0e12e8d119199cdcfa458eb1d5f3eefed4fea5785fedfb56d9b17e4ee8f0290c153ce359241961c9e5c9ba224689f3602b8185a10221912a20cca781a3e105"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "77f170f34172065584f864a0d321e319"}, @generic={0xff, 0x10, 0xa, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x6, 0xfa}]}, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0xa4, &(0x7f0000000700)=ANY=[@ANYBLOB="a4038791933e3738bdb5546445e518fbd2ba72146b2bd9993b523c048cfbfdf8dfeb58aec25287f12df78b5b35f6577563203b1778bc6aa94cc3450e0847443965a6d439ad33ab50fb77ec99ad639b17fb623d698e9039857f4182c9a9ef81ead2bed125a90317ccf8afaeb6e7fa102ae92273007db6d51e622acecc74ebe96a23b0683f6d241e9e95c8418ffef7b70daacbadb8da9b311646258ec9fd9a1aa3da74230d"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x816}}, {0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "6915d2838b0f0e5042a44a6eb77a76189fa8c5f81b56cc665813835b869ac227471bcb51c8696e3b9d62ecdd7f4cf08021eca901e6adef3ceacf15da4d48383a54092c37c9e81a78169a6972e7e833b9771808cc55b5d85a6dd80ff60dd0cbadba1e6cde39d814ea11c4da523b2ee00a8531a8dd7b174d1e2be55c588735f6a757207f1d1d1d55a23d8bbda8312f3eb339f6ea03df4d19a12bac77c94f5381cdb726556cc212c6edf7798b0fc15f647ba5a37ccfd537bbbb68678dfda01156104d4c48d9ab8f31c542e9f201425b6736e16b57c6"}}]})

5m42.538074987s ago: executing program 32 (id=263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x1, [0x5]})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16], 0x14)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
prctl$PR_SET_THP_DISABLE(0x44, 0x4)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000380)=ANY=[@ANYBLOB="120101020000007fffffff32400001020301090275000301022000080b000201ff20040904000000010120000924010400091500070c2403060404fb020d09000309040100000102200009040101010102200009050109080004fefe082501033f01fbff09040200000102200009040201010102200009058209ff03050305082501803c790010"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})
r8 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3)
write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501"], &(0x7f0000000640)={0x0, 0x0, 0x8, 0x0})
syz_usb_connect$uac1(0x4, 0xd2, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x1, 0x40, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x42}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0xffff, 0x7, 'x'}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x80, 0xaa, "256f17e9"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x1, 0x1, 0x27c, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x6, 0x8, 0xa9, 0x37, 0x1}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x2, 0xa, 0x2], 0x1f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x1, 0x6, {0x7, 0x25, 0x1, 0xc, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x80, 0x4, 0x3, 0xa, '1\b', "c92c6b"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0xc, 0x92, "2d03"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3d, 0x1, 0x81, 0x3, '0'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0xd, 0xe, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7f}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xa, 0x0, 0xc, 0x20, 0x5}, 0x1d5, &(0x7f0000000440)={0x5, 0xf, 0x1d5, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x2, 0x9c26, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0xdf, 0x2, 0xff, 0xff00, 0x4, [0xff3fcf, 0x0]}, @generic={0x97, 0x10, 0x2, "7db84ec4f04dbd3891588b79279036f6e8a41f7c4b3f17d00a390bb413a57f737c287a7ef1fd88b3889e2689742620e729085a3a9de1fda01a05bea82a64965f750e421a0345657e833459a731a97fb56ee97c79fa0e12e8d119199cdcfa458eb1d5f3eefed4fea5785fedfb56d9b17e4ee8f0290c153ce359241961c9e5c9ba224689f3602b8185a10221912a20cca781a3e105"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "77f170f34172065584f864a0d321e319"}, @generic={0xff, 0x10, 0xa, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x6, 0xfa}]}, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x814}}, {0xa4, &(0x7f0000000700)=ANY=[@ANYBLOB="a4038791933e3738bdb5546445e518fbd2ba72146b2bd9993b523c048cfbfdf8dfeb58aec25287f12df78b5b35f6577563203b1778bc6aa94cc3450e0847443965a6d439ad33ab50fb77ec99ad639b17fb623d698e9039857f4182c9a9ef81ead2bed125a90317ccf8afaeb6e7fa102ae92273007db6d51e622acecc74ebe96a23b0683f6d241e9e95c8418ffef7b70daacbadb8da9b311646258ec9fd9a1aa3da74230d"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x816}}, {0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "6915d2838b0f0e5042a44a6eb77a76189fa8c5f81b56cc665813835b869ac227471bcb51c8696e3b9d62ecdd7f4cf08021eca901e6adef3ceacf15da4d48383a54092c37c9e81a78169a6972e7e833b9771808cc55b5d85a6dd80ff60dd0cbadba1e6cde39d814ea11c4da523b2ee00a8531a8dd7b174d1e2be55c588735f6a757207f1d1d1d55a23d8bbda8312f3eb339f6ea03df4d19a12bac77c94f5381cdb726556cc212c6edf7798b0fc15f647ba5a37ccfd537bbbb68678dfda01156104d4c48d9ab8f31c542e9f201425b6736e16b57c6"}}]})

2m48.525500956s ago: executing program 0 (id=497):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x8010, r0, 0x981a2000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r3, 0x80c3e000)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f048})
sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00')
fchdir(r7)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x219)
r9 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)
r10 = socket(0x1d, 0x3, 0xe0000)
write(r10, &(0x7f0000000040)='&\x00\x00\x00\"', 0x5)
io_setup(0x3, &(0x7f00000000c0)=<r11=>0x0)
r12 = eventfd2(0x6347, 0x80000)
io_submit(r11, 0x1, &(0x7f0000001780)=[&(0x7f0000001400)={0x0, 0x0, 0x0, 0x8, 0xa, r6, &(0x7f0000000400)="d433270cd890c0578e0bc38e9f0b055263e7081d5bbc49cc3971b7173b6f66ff5f1e91905e0cdb990f2105916da5dd063431e0410c5033ef1ef2107284dd34f14c53af9e1ce12f81792e9619ff6e10b300c34bd80976e90bc514c8e6e16bac8567a3dee464ad5d9fdc3f17f2d1d68d117a13905b322646ef517a93ae9993429314a7ecbfbc654058872d96a6f798f8410527fbb91ba0c9852a1f222385ebccbc539f3e2ad6d9916a44ddd93942cff94ea9bb289c1efa434e57cb8058034be12d6f04092116002c9a853c1c0a8129772bd9c5d6988cc50b9de3f7cc5dbb265ce48d47cf577177978396ddb8e36e99b4801ee32f4741e2db40ee6fab51aee4de0f675092ce3179473cfbb259b3372e54a4fd0046a180fd5e34b4eabd87a6f195d7316407deffdefd62220a3f54798213345477034ed20ef632a4458fb5d9fee599e0c36d8845b6cfca63675dd19d52bddc16636e5b550d99af1120b114a16fae66de1a871ce2d171e309d7de6680cd6ad42535c974c18529bc2175d56a00c828b1153a2c6fb23f23ab9b7cc82e5341924bc91acef77b24ef87723a16c4261b16ef4fd5041196304a9913ea37987e4a06eebf61f186803feecdf19e78072fe62a465053cf81ad5f9f81f5689d6e09a02dfb4c6427c68e38500844568164447df81a2d106d9a1e6d4e79843cc4f6e802f1b331680be6af6a1312527752a0db23d9cf31b2a885f37d71c583539c60d9bc3708ce446ff5292f493d26557ff5f9674cc8eade0bfc1008e0440c23c2633ffee823dad5ca3553e1268fbf179795b50bc6ce399f2f2a008b7a3c5fb42ef8df114b1c7965ccd444d12e5c2f2a7b79811d9b910f3e6f47eb156427bbd4ae5120a7c2124de738e2d92b9dab54c0ee1ad6e7cdcaf3b7c628809c1f38dd26074310ddce5de3f57c38bfe52f419dabee4c0b8832de9f78b8ebd8aaa569b60954153237cf16b29aad0d887f3b0faddcd118042bcf6d929e455634dedfcb0c08904adebcf8a459e1af01a8f44ff1fc891637014c3342a33923e32cce90d836dbfd79fd3cbefd4229ca893ae7f27899a7604ae2b4bf45537093e1bf41d558ef2bb1946fd571838b594ec77f36cbc89004ab9fabbbeaa70cd76685f656cace7a425f011f7092258dc07797c21ba5c33cd8817e899be3766aa92d3cacea65bd6c77fa062e6a8be4b169e7700cdbcb68ab0b05dddcbd20b26c0b34fe4d8c0e2a0f88deb3a7d5c2999256dfef45494a1811785c5443b67ef37655c638c1d68dc0b59415689de91b2241f605993777cfc47e6cdce141f577af21517ec2ef8eb092a8fb7c8b9ec96449410dd30df8715ab689681df585e19dad313ab78fdefa6244e68c4352e66f00f5a35b1306db5d9a0040e2739113066e0ddf85506141cb9fea6dc5b86a799398fc5c72309f071c5603124c9f2394132c0ed2463b60b984800663d040df94e9a37fa645f71321ae0ec6f66832e07a991bc2d75adbfc271fb8c1312e72b53fd9b6370c339ef4be475f0f25fca7a47e178ac036fb5a95051095290001cf69817b4e15de7690dca7c0fdb734bf17d6290839bd975aeedaed7da14fbb486bde9a14c6eff7dc015d2e96c934808f7dd71af39dac789e52f0f8258e563cd4db9b532bd959c9418a1919e7664dd74d29cb7363b755c170210624b1b32e78ac65bbf28c11f014ed25c3941eebdfbd2474fea93a5b7487b054bf235c98158b37ba3e9c47f3eb95691c90bb7ca5b605d5a61939b439f3ac698493a3fa9678274825846ee16452025cbe0f47700d3c965b11c4f2ab723775", 0x501, 0x8000000000000001, 0x0, 0x1, r12}])

2m45.459543941s ago: executing program 0 (id=508):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "07017555d000000000000000000020", '\x00', "0500", '\x00', ["8ba859c7eaa817c478dcf6e9", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]})

2m45.325666047s ago: executing program 0 (id=510):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-blowfish-asm,crc32c-intel)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @stop_pts=0x43})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x1fd, 0x4, 0xffff1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="54246e5c7b5dfb32eca01935000000000027000900020073797a32000000000900020073efc1c35745dd8c72adf1b0af797a300000000009000300737972310000000005000100070000000900030073797a32000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])
r5 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000025c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4e, 0x130, 0x3, "", [{{0x9, 0x4, 0x0, 0x13, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x9d4a3f91d7477bf3, 0x5, 0x7, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, &(0x7f0000002dc0)={0x14, 0x0, &(0x7f0000002cc0)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "bd1f4e0d0582c4c8dce243dc4b023c26f1225cd97aff940c1909334b43b41a3b0ccf88ecb2c60ea29306e2786449c5e05bd75bd477f746c779bb238aaaf83a348fbaaa124e0effb15fc987b4f12b2906076ede69c9cdca4f48abbdf04528f5007063f70d800d7e1de5de7b"}}}, 0x0)

2m39.691057342s ago: executing program 0 (id=523):
ioprio_set$pid(0x1, 0x0, 0x6000)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x800001c)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0xffffffff, 0x7, 0x100, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x1}})
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x42)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
setresuid(0x0, 0xee01, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7})
r4 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0)
ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9, 0x1, 0x80, 0x0, 0x0, r3})

2m36.42659889s ago: executing program 0 (id=529):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000083000000000b11200000b37488dffcc62d6faa6c984251b7888cb1509b65aa0d3387ba9e388906158cff274a552e5171804f55bf0cc5dbace29405a067b1ea8b0c134f22eef40170344ecbf897b47369597dc7ba532b975bddcbe9b95d5201d94f6102500c86866f047d3d1a722b16252ab66d4b1cdef23f87c466403e34cfc9ddd7d87aed4fea823a007dc56af534c9ffbc5154a29d0ceb0c030ce18ad35d95e6848dec8620"], 0x0}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
keyctl$set_reqkey_keyring(0xe, 0x5)
r1 = syz_usb_connect(0x0, 0x41b, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x1b, 0x5e, 0xd6, 0x0, 0x257a, 0x1604, 0x1944, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x409, 0x1, 0x0, 0x3, 0xb0, 0x0, "", [{{0x9, 0x4, 0xc5, 0xf0, 0x9, 0x66, 0x9c, 0x56, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "628b19c3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x6d3d, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x40, 0x6}, @country_functional={0x10, 0x24, 0x7, 0xfa, 0x7, [0x101, 0x5, 0x7, 0x101, 0x200]}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x20}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "50ecc41b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x60e, 0x2, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0xfff9, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0xb5}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x8000, 0x0, 0x4, 0xfffa, 0x1}]}], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x15, 0xff, 0xcd, [@generic={0xe3, 0x5, "1810831da4c9717f4e2db80c1ff66b050ed9636ba284e5e47118017c8422f12d2a2dcd52bc746613361f7bb56564583fbdc6747450097a56770b2a69d4643d0c77341cc0cc96e035560d8d93cef6a35824128767f7dc217b2319155c102032bf55348b8cafe4ab2fb734eb965bc2b70d03e26a16305e7c1702f73161c7f00b82cfc2d316fdc90b18de4e8e7bcb84e10e6ee2e6f0e5d22c5ef3c551c28f34eea12481573f68b9a497c9cb3c21114e48c538c37615200d74690dac07faa5015887e9f41d4849f10bb0801b6827081336ba2feccc385b3881695d3ae345f729a2f8f3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xc8, 0x0, 0x8a, [@generic={0x56, 0x10, "ff0b107458667fae703319efc7d3731647a4baf04e14e3769c71371ccddf01b9dde633e6ec420d2ceb33a06b443779ba532b5f8e282d722aeb93b4a1b881eb24740e5e8b18cffa97e12751ab7f56fba1045945e2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x2, 0x1, 0x3, [@generic={0x26, 0x21, "4a7d17a31f3edc01b9179819c878ec8988078bb07aa8fb4f99bc08bea0b729bb3dda3432"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x9, 0x10, 0x2, [@generic={0x1d, 0xc, "90f7c61b35e67412da6c5f8251e12759e36de7f93a9c4db970200b"}]}}, {{0x9, 0x5, 0x1, 0x7, 0x8, 0x1, 0x0, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0x5, 0xfe, [@generic={0xb5, 0xc, "dd96ab7c1adca0f86d360006589b201f8f6734170a9afba791b328fc981e284fed4647178565d5056ffccac70fb58798b7d55c8e6b17b9a1fa2ba17ce04f56714dd3a3b5c161fabf7e504f4d15c188420cf4a31a0e304bb4da940fcdbede151943489f9ea7bece902698934b3660f44a8fb5f76ba79b01694f4a302cbcd038fc51cb50c4e36d6b63dbaa847f148edce38e1a2ef513c789ef4be43e1df24aae10cdacab3af2dbc9e02b811fe5ce14d014151a5c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd, 0x3, 0x3, [@generic={0xe7, 0x8, "8462ab696fae0c8cc110cc19f2778afc72835f84ae1d011461a84cd3abd0c90364312b62f513d8c5ecaa0a2cbffcfc73b40d85423fa830ed8a2ebf82fa15f19b17be20bbe401af576883969d30a79a07b7060b8e7c468e5c69dd0e1a8b9bad79bf604adfaa8652f9cfd3a23c8f24f4a0d4e118e3890c3a8911b818db2f7cb4251f0d787cbf40ac1cf7aeac240533a45a1365addec756c03c6aefc7f59949c328d608c3d7bacd9b44842bf3e4f77b43709566174862b269a63cae4cf4f82d776ba9ae69cffc2b31fb216b1ce70cabe15268376dc6257efb29b9c8fb45f7fa9a6a97553c5cc0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x7, 0x9d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x110, 0x5, 0x6, 0x23, 0x10, 0x8}, 0xaf, &(0x7f00000010c0)={0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "4c299ad80873ef2cc428938866951fae71e5603e51d3ea54819f1820bd3432b7d074225b1f13d017e0603c832bc5b7bf01da360d3c6245fcf0a6ae83b2064c5b6f4e3224a0d0d38d42665219e0b95efbb11c3e9c37e2f898b823b67ae0640e56f2edf6bbf9fb7f90856e3eefc5862a18585fbbe777052ca53a983e715866a303c68bc0022ba073bdb44dd52be2b9aa3e79a1d398e8fabd9d3bc4ac9500e52434de26f5aab70151"}]}, 0x6, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x11, &(0x7f0000001240)=@string={0x11, 0x3, "9a5f55e615cacbdda86911c2946086"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000001480)={0x14, &(0x7f0000001380)={0x40, 0xe, 0x7d, {0x7d, 0x6, "29c01654dbf50038b1be5c7ed66c00dfedfcb9955bc8de65ad55c55c53458e3ffae756c1c4e6cc6e3bbb234f8dcc046a68030589143e9393541caae5996ec3931292856f2a46e0402e47a86c8be07bdaf8d1c737c8c01ac9f65f5908923d19cade8c8b4c0f8b91cc91e808e80e936f807b5adf3c3526bc1c4983ef"}}, &(0x7f0000001440)={0x0, 0x3, 0x39, @string={0x39, 0x3, "6c05d241356f92bb948a0b170c033476babf3da165ec9cea8b5dbcb273209455cd826677022d394d00ecc6ee61c9c6035b4059f9d2011e"}}}, &(0x7f00000016c0)={0x44, &(0x7f00000014c0)={0x20, 0x9, 0x13, "015be2f5dd52ac49d0a31486fe7c4354794b4a"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000001580)={0x20, 0x81, 0x3, "4ce1af"}, &(0x7f00000015c0)={0x20, 0x82, 0x3, "c6d1c5"}, &(0x7f0000001600)={0x20, 0x83, 0x3, "a93c41"}, &(0x7f0000001640)={0x20, 0x84, 0x3, "f7487e"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "af3ade"}})
vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
fsetxattr$security_ima(r7, &(0x7f0000000440), &(0x7f0000000740)=@ng={0x4, 0x9, "ac0f17fc2ffdda864cba4b8111cd77d6"}, 0x12, 0x2)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000001040)=ANY=[@ANYBLOB="200e280000002804c263138526790a000000ce918d0fb7da7591d0b27b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x8f, {0x8f, 0xe, "708daef82f2052246faa3c87499a0d526721df70363296c8382fc7432276e3122f9dcf20b0396508215bd4321d0ef467dbea992237e91466fb0af20a62a3aab5bb8a493cfa50c993e02090513afabf5d8a54e5ac94acf9cb23b27e6fe1b3c39062b91ab3aca4f53a0de77c5f7036c5eb454fb13a5286460eb9f408a9570e823475d10f3163fa5b66765ecae421"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000580)={0x0, 0xf, 0xdc, {0x5, 0xf, 0xdc, 0x4, [@generic={0x8, 0x10, 0x3, "6e6fb1f41d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x6, 0x9952}, @generic={0xbe, 0x10, 0x2, "1821665aec26bb1a3e5f3cbd314e184d802e4e0af41ed1c351c92a96404769ba958848b9449b6ec34a47879194df9bf9c5c914c9f3f6cae6e2cbfcc1fe76129f083704e93b64c5223ef9eb436a7aed35d742f5401d9fa842a5fdd3f9d6bf87a14d1bd1c71c94e95c39641adf764cf847f5bc4a7252411f6679b3c4a33f1ee8b6e16d8f45666df0389ca9a838987ac3290567d5d17bdcfee478b761434d3c4fe75af6d204c185a5b55d574ab520314cf53c6efc626a1fca87a73216"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4, 0x9}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x17, 0x80, 0x7, 0x63, "a996111a", "23d40e37"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x2, 0x7, 0x4, 0x33, 0x1, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000001a00)={0x20, 0x11, 0xe3, "72408762fabcaa05c6afa6fe56d711332f35d1696532956e3da2005498f57adc097e91fc87dac39d5d84dd65c81878d663d37d0665af31d3edf68e3711b9877dc4f1a9bff45eb48500a3d06d9fd4b976c69c322a4d0ef6679977513e1edcc9db8b2bc1e7e03d043fdfc155b559149bd35df123584c96f74e8d53d1427aeb8bccddb46deb2739a015b1b97b3de37193b2c0dd09ba43afa5ed69afa6cf928c6db88d1143d51bfcb6375f00f31fcb19babd9aee55a7d6e2bb0aa9a38054195f93e12f5677e4a0798eab9cbe69014277d4dafa775187b9bbd0b50fb87a855b77bc3fcdf473"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x23}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x140, 0x2caaa645f949895f, [0xf0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xf800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8b33"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "ef90"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}})

2m33.203139016s ago: executing program 0 (id=532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000001200000000000001"], 0xfdef)

2m16.195116462s ago: executing program 33 (id=532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000001200000000000001"], 0xfdef)

1m50.344283503s ago: executing program 1 (id=590):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r1)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r2)
socket$inet6(0xa, 0x2, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=<r8=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r3, r8, &(0x7f0000000640)={0x0, 0x1463, 0x100, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x20, 0x401, 0x31b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7681, 0x8000, 0x1, 0x3df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x5, 0x64, 0x700, 0x0}}, 0x0)

1m50.118701718s ago: executing program 1 (id=591):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd00000003000000000000002000", [0x14, 0x40000000000005]}})

1m49.990333181s ago: executing program 1 (id=592):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000083000000000b11200000b37488dffcc62d6faa6c984251b7888cb1509b65aa0d3387ba9e388906158cff274a552e5171804f55bf0cc5dbace29405a067b1ea8b0c134f22eef40170344ecbf897b47369597dc7ba532b975bddcbe9b95d5201d94f6102500c86866f047d3d1a722b16252ab66d4b1cdef23f87c466403e34cfc9ddd7d87aed4fea823a007dc56af534c9ffbc5154a29d0ceb0c030ce18ad35d95e6848dec8620"], 0x0}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
keyctl$set_reqkey_keyring(0xe, 0x5)
r1 = syz_usb_connect(0x0, 0x41b, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x1b, 0x5e, 0xd6, 0x0, 0x257a, 0x1604, 0x1944, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x409, 0x1, 0x0, 0x3, 0xb0, 0x0, "", [{{0x9, 0x4, 0xc5, 0xf0, 0x9, 0x66, 0x9c, 0x56, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "628b19c3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x6d3d, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x40, 0x6}, @country_functional={0x10, 0x24, 0x7, 0xfa, 0x7, [0x101, 0x5, 0x7, 0x101, 0x200]}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x20}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "50ecc41b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x60e, 0x2, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0xfff9, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0xb5}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x8000, 0x0, 0x4, 0xfffa, 0x1}]}], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x15, 0xff, 0xcd, [@generic={0xe3, 0x5, "1810831da4c9717f4e2db80c1ff66b050ed9636ba284e5e47118017c8422f12d2a2dcd52bc746613361f7bb56564583fbdc6747450097a56770b2a69d4643d0c77341cc0cc96e035560d8d93cef6a35824128767f7dc217b2319155c102032bf55348b8cafe4ab2fb734eb965bc2b70d03e26a16305e7c1702f73161c7f00b82cfc2d316fdc90b18de4e8e7bcb84e10e6ee2e6f0e5d22c5ef3c551c28f34eea12481573f68b9a497c9cb3c21114e48c538c37615200d74690dac07faa5015887e9f41d4849f10bb0801b6827081336ba2feccc385b3881695d3ae345f729a2f8f3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xc8, 0x0, 0x8a, [@generic={0x56, 0x10, "ff0b107458667fae703319efc7d3731647a4baf04e14e3769c71371ccddf01b9dde633e6ec420d2ceb33a06b443779ba532b5f8e282d722aeb93b4a1b881eb24740e5e8b18cffa97e12751ab7f56fba1045945e2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x2, 0x1, 0x3, [@generic={0x26, 0x21, "4a7d17a31f3edc01b9179819c878ec8988078bb07aa8fb4f99bc08bea0b729bb3dda3432"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x9, 0x10, 0x2, [@generic={0x1d, 0xc, "90f7c61b35e67412da6c5f8251e12759e36de7f93a9c4db970200b"}]}}, {{0x9, 0x5, 0x1, 0x7, 0x8, 0x1, 0x0, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0x5, 0xfe, [@generic={0xb5, 0xc, "dd96ab7c1adca0f86d360006589b201f8f6734170a9afba791b328fc981e284fed4647178565d5056ffccac70fb58798b7d55c8e6b17b9a1fa2ba17ce04f56714dd3a3b5c161fabf7e504f4d15c188420cf4a31a0e304bb4da940fcdbede151943489f9ea7bece902698934b3660f44a8fb5f76ba79b01694f4a302cbcd038fc51cb50c4e36d6b63dbaa847f148edce38e1a2ef513c789ef4be43e1df24aae10cdacab3af2dbc9e02b811fe5ce14d014151a5c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd, 0x3, 0x3, [@generic={0xe7, 0x8, "8462ab696fae0c8cc110cc19f2778afc72835f84ae1d011461a84cd3abd0c90364312b62f513d8c5ecaa0a2cbffcfc73b40d85423fa830ed8a2ebf82fa15f19b17be20bbe401af576883969d30a79a07b7060b8e7c468e5c69dd0e1a8b9bad79bf604adfaa8652f9cfd3a23c8f24f4a0d4e118e3890c3a8911b818db2f7cb4251f0d787cbf40ac1cf7aeac240533a45a1365addec756c03c6aefc7f59949c328d608c3d7bacd9b44842bf3e4f77b43709566174862b269a63cae4cf4f82d776ba9ae69cffc2b31fb216b1ce70cabe15268376dc6257efb29b9c8fb45f7fa9a6a97553c5cc0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x7, 0x9d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x110, 0x5, 0x6, 0x23, 0x10, 0x8}, 0xaf, &(0x7f00000010c0)={0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "4c299ad80873ef2cc428938866951fae71e5603e51d3ea54819f1820bd3432b7d074225b1f13d017e0603c832bc5b7bf01da360d3c6245fcf0a6ae83b2064c5b6f4e3224a0d0d38d42665219e0b95efbb11c3e9c37e2f898b823b67ae0640e56f2edf6bbf9fb7f90856e3eefc5862a18585fbbe777052ca53a983e715866a303c68bc0022ba073bdb44dd52be2b9aa3e79a1d398e8fabd9d3bc4ac9500e52434de26f5aab70151"}]}, 0x6, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x11, &(0x7f0000001240)=@string={0x11, 0x3, "9a5f55e615cacbdda86911c2946086"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000001480)={0x14, &(0x7f0000001380)={0x40, 0xe, 0x7d, {0x7d, 0x6, "29c01654dbf50038b1be5c7ed66c00dfedfcb9955bc8de65ad55c55c53458e3ffae756c1c4e6cc6e3bbb234f8dcc046a68030589143e9393541caae5996ec3931292856f2a46e0402e47a86c8be07bdaf8d1c737c8c01ac9f65f5908923d19cade8c8b4c0f8b91cc91e808e80e936f807b5adf3c3526bc1c4983ef"}}, &(0x7f0000001440)={0x0, 0x3, 0x39, @string={0x39, 0x3, "6c05d241356f92bb948a0b170c033476babf3da165ec9cea8b5dbcb273209455cd826677022d394d00ecc6ee61c9c6035b4059f9d2011e"}}}, &(0x7f00000016c0)={0x44, &(0x7f00000014c0)={0x20, 0x9, 0x13, "015be2f5dd52ac49d0a31486fe7c4354794b4a"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000001580)={0x20, 0x81, 0x3, "4ce1af"}, &(0x7f00000015c0)={0x20, 0x82, 0x3, "c6d1c5"}, &(0x7f0000001600)={0x20, 0x83, 0x3, "a93c41"}, &(0x7f0000001640)={0x20, 0x84, 0x3, "f7487e"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "af3ade"}})
vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
fsetxattr$security_ima(r6, &(0x7f0000000440), &(0x7f0000000740)=@ng={0x4, 0x9, "ac0f17fc2ffdda864cba4b8111cd77d6"}, 0x12, 0x2)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000001040)=ANY=[@ANYBLOB="200e280000002804c263138526790a000000ce918d0fb7da7591d0b27b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x8f, {0x8f, 0xe, "708daef82f2052246faa3c87499a0d526721df70363296c8382fc7432276e3122f9dcf20b0396508215bd4321d0ef467dbea992237e91466fb0af20a62a3aab5bb8a493cfa50c993e02090513afabf5d8a54e5ac94acf9cb23b27e6fe1b3c39062b91ab3aca4f53a0de77c5f7036c5eb454fb13a5286460eb9f408a9570e823475d10f3163fa5b66765ecae421"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000580)={0x0, 0xf, 0xdc, {0x5, 0xf, 0xdc, 0x4, [@generic={0x8, 0x10, 0x3, "6e6fb1f41d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x6, 0x9952}, @generic={0xbe, 0x10, 0x2, "1821665aec26bb1a3e5f3cbd314e184d802e4e0af41ed1c351c92a96404769ba958848b9449b6ec34a47879194df9bf9c5c914c9f3f6cae6e2cbfcc1fe76129f083704e93b64c5223ef9eb436a7aed35d742f5401d9fa842a5fdd3f9d6bf87a14d1bd1c71c94e95c39641adf764cf847f5bc4a7252411f6679b3c4a33f1ee8b6e16d8f45666df0389ca9a838987ac3290567d5d17bdcfee478b761434d3c4fe75af6d204c185a5b55d574ab520314cf53c6efc626a1fca87a73216"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4, 0x9}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x17, 0x80, 0x7, 0x63, "a996111a", "23d40e37"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x2, 0x7, 0x4, 0x33, 0x1, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000001a00)={0x20, 0x11, 0xe3, "72408762fabcaa05c6afa6fe56d711332f35d1696532956e3da2005498f57adc097e91fc87dac39d5d84dd65c81878d663d37d0665af31d3edf68e3711b9877dc4f1a9bff45eb48500a3d06d9fd4b976c69c322a4d0ef6679977513e1edcc9db8b2bc1e7e03d043fdfc155b559149bd35df123584c96f74e8d53d1427aeb8bccddb46deb2739a015b1b97b3de37193b2c0dd09ba43afa5ed69afa6cf928c6db88d1143d51bfcb6375f00f31fcb19babd9aee55a7d6e2bb0aa9a38054195f93e12f5677e4a0798eab9cbe69014277d4dafa775187b9bbd0b50fb87a855b77bc3fcdf473"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x23}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x140, 0x2caaa645f949895f, [0xf0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xf800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8b33"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "ef90"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}})

1m49.857681683s ago: executing program 1 (id=593):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}], 0x1)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x400000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})

1m49.694463465s ago: executing program 1 (id=594):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000006c0)="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", 0x2c3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="0085cd2f341c2000", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1, 0x0, 0x0, 0x1000000}}], 0x3, 0x119e75c40277adee)

1m49.272804668s ago: executing program 1 (id=595):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x101, @private2}, 0x1c, &(0x7f0000001b80)}}], 0x1, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x1, 0x8, 0x4a, @mcast2, @rand_addr=' \x01\x00', 0x700, 0x10, 0x3}}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x7f, 0x5, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@generic={0x86, 0x5, "04a7ad"}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0xa, [{@local, 0xbac}, {@private=0xa010100, 0x4}, {@remote, 0x1}, {@broadcast, 0x9}, {@empty, 0x4}, {@multicast2, 0x952c}, {@loopback, 0x1}]}, @generic={0x89, 0xc, "e49e708e8810a38d863e"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7, 0x40, 0x6, 0x6, {{0xf, 0x4, 0x2, 0x3b, 0x3c, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast2, @multicast1, {[@generic={0x44, 0xd, "d254da5d22a3f59d9a6184"}, @lsrr={0x83, 0x17, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000006c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000680)={&(0x7f0000000840)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r5 = socket$netlink(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

1m33.357826094s ago: executing program 34 (id=595):
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x101, @private2}, 0x1c, &(0x7f0000001b80)}}], 0x1, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x1, 0x8, 0x4a, @mcast2, @rand_addr=' \x01\x00', 0x700, 0x10, 0x3}}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x7f, 0x5, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x66, 0x0, 0x9, 0x29, 0x0, @empty, @empty, {[@generic={0x86, 0x5, "04a7ad"}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0xa, [{@local, 0xbac}, {@private=0xa010100, 0x4}, {@remote, 0x1}, {@broadcast, 0x9}, {@empty, 0x4}, {@multicast2, 0x952c}, {@loopback, 0x1}]}, @generic={0x89, 0xc, "e49e708e8810a38d863e"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7, 0x40, 0x6, 0x6, {{0xf, 0x4, 0x2, 0x3b, 0x3c, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast2, @multicast1, {[@generic={0x44, 0xd, "d254da5d22a3f59d9a6184"}, @lsrr={0x83, 0x17, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @loopback, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000006c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000680)={&(0x7f0000000840)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r5 = socket$netlink(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

5.879079712s ago: executing program 6 (id=599):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000083000000000b11200000b37488dffcc62d6faa6c984251b7888cb1509b65aa0d3387ba9e388906158cff274a552e5171804f55bf0cc5dbace29405a067b1ea8b0c134f22eef40170344ecbf897b47369597dc7ba532b975bddcbe9b95d5201d94f6102500c86866f047d3d1a722b16252ab66d4b1cdef23f87c466403e34cfc9ddd7d87aed4fea823a007dc56af534c9ffbc5154a29d0ceb0c030ce18ad35d95e6848dec8620"], 0x0}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x7)
keyctl$set_reqkey_keyring(0xe, 0x5)
r1 = syz_usb_connect(0x0, 0x41b, &(0x7f0000000c00)={{0x12, 0x1, 0x300, 0x1b, 0x5e, 0xd6, 0x0, 0x257a, 0x1604, 0x1944, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x409, 0x1, 0x0, 0x3, 0xb0, 0x0, "", [{{0x9, 0x4, 0xc5, 0xf0, 0x9, 0x66, 0x9c, 0x56, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "628b19c3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x6d3d, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x40, 0x6}, @country_functional={0x10, 0x24, 0x7, 0xfa, 0x7, [0x101, 0x5, 0x7, 0x101, 0x200]}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x20}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "50ecc41b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x60e, 0x2, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x1a}, [@dmm={0x7, 0x24, 0x14, 0xfff9, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xff, 0xb5}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x8000, 0x0, 0x4, 0xfffa, 0x1}]}], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x15, 0xff, 0xcd, [@generic={0xe3, 0x5, "1810831da4c9717f4e2db80c1ff66b050ed9636ba284e5e47118017c8422f12d2a2dcd52bc746613361f7bb56564583fbdc6747450097a56770b2a69d4643d0c77341cc0cc96e035560d8d93cef6a35824128767f7dc217b2319155c102032bf55348b8cafe4ab2fb734eb965bc2b70d03e26a16305e7c1702f73161c7f00b82cfc2d316fdc90b18de4e8e7bcb84e10e6ee2e6f0e5d22c5ef3c551c28f34eea12481573f68b9a497c9cb3c21114e48c538c37615200d74690dac07faa5015887e9f41d4849f10bb0801b6827081336ba2feccc385b3881695d3ae345f729a2f8f3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xc8, 0x0, 0x8a, [@generic={0x56, 0x10, "ff0b107458667fae703319efc7d3731647a4baf04e14e3769c71371ccddf01b9dde633e6ec420d2ceb33a06b443779ba532b5f8e282d722aeb93b4a1b881eb24740e5e8b18cffa97e12751ab7f56fba1045945e2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x2, 0x1, 0x3, [@generic={0x26, 0x21, "4a7d17a31f3edc01b9179819c878ec8988078bb07aa8fb4f99bc08bea0b729bb3dda3432"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x9, 0x10, 0x2, [@generic={0x1d, 0xc, "90f7c61b35e67412da6c5f8251e12759e36de7f93a9c4db970200b"}]}}, {{0x9, 0x5, 0x1, 0x7, 0x8, 0x1, 0x0, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0x5, 0xfe, [@generic={0xb5, 0xc, "dd96ab7c1adca0f86d360006589b201f8f6734170a9afba791b328fc981e284fed4647178565d5056ffccac70fb58798b7d55c8e6b17b9a1fa2ba17ce04f56714dd3a3b5c161fabf7e504f4d15c188420cf4a31a0e304bb4da940fcdbede151943489f9ea7bece902698934b3660f44a8fb5f76ba79b01694f4a302cbcd038fc51cb50c4e36d6b63dbaa847f148edce38e1a2ef513c789ef4be43e1df24aae10cdacab3af2dbc9e02b811fe5ce14d014151a5c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd, 0x3, 0x3, [@generic={0xe7, 0x8, "8462ab696fae0c8cc110cc19f2778afc72835f84ae1d011461a84cd3abd0c90364312b62f513d8c5ecaa0a2cbffcfc73b40d85423fa830ed8a2ebf82fa15f19b17be20bbe401af576883969d30a79a07b7060b8e7c468e5c69dd0e1a8b9bad79bf604adfaa8652f9cfd3a23c8f24f4a0d4e118e3890c3a8911b818db2f7cb4251f0d787cbf40ac1cf7aeac240533a45a1365addec756c03c6aefc7f59949c328d608c3d7bacd9b44842bf3e4f77b43709566174862b269a63cae4cf4f82d776ba9ae69cffc2b31fb216b1ce70cabe15268376dc6257efb29b9c8fb45f7fa9a6a97553c5cc0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x7, 0x9d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xb}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x110, 0x5, 0x6, 0x23, 0x10, 0x8}, 0xaf, &(0x7f00000010c0)={0x5, 0xf, 0xaf, 0x1, [@generic={0xaa, 0x10, 0xa, "4c299ad80873ef2cc428938866951fae71e5603e51d3ea54819f1820bd3432b7d074225b1f13d017e0603c832bc5b7bf01da360d3c6245fcf0a6ae83b2064c5b6f4e3224a0d0d38d42665219e0b95efbb11c3e9c37e2f898b823b67ae0640e56f2edf6bbf9fb7f90856e3eefc5862a18585fbbe777052ca53a983e715866a303c68bc0022ba073bdb44dd52be2b9aa3e79a1d398e8fabd9d3bc4ac9500e52434de26f5aab70151"}]}, 0x6, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x11, &(0x7f0000001240)=@string={0x11, 0x3, "9a5f55e615cacbdda86911c2946086"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io$uac2(r1, &(0x7f0000001480)={0x14, &(0x7f0000001380)={0x40, 0xe, 0x7d, {0x7d, 0x6, "29c01654dbf50038b1be5c7ed66c00dfedfcb9955bc8de65ad55c55c53458e3ffae756c1c4e6cc6e3bbb234f8dcc046a68030589143e9393541caae5996ec3931292856f2a46e0402e47a86c8be07bdaf8d1c737c8c01ac9f65f5908923d19cade8c8b4c0f8b91cc91e808e80e936f807b5adf3c3526bc1c4983ef"}}, &(0x7f0000001440)={0x0, 0x3, 0x39, @string={0x39, 0x3, "6c05d241356f92bb948a0b170c033476babf3da165ec9cea8b5dbcb273209455cd826677022d394d00ecc6ee61c9c6035b4059f9d2011e"}}}, &(0x7f00000016c0)={0x44, &(0x7f00000014c0)={0x20, 0x9, 0x13, "015be2f5dd52ac49d0a31486fe7c4354794b4a"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000001580)={0x20, 0x81, 0x3, "4ce1af"}, &(0x7f00000015c0)={0x20, 0x82, 0x3, "c6d1c5"}, &(0x7f0000001600)={0x20, 0x83, 0x3, "a93c41"}, &(0x7f0000001640)={0x20, 0x84, 0x3, "f7487e"}, &(0x7f0000001680)={0x20, 0x85, 0x3, "af3ade"}})
vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
fsetxattr$security_ima(r6, &(0x7f0000000440), &(0x7f0000000740)=@ng={0x4, 0x9, "ac0f17fc2ffdda864cba4b8111cd77d6"}, 0x12, 0x2)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000001040)=ANY=[@ANYBLOB="200e280000002804c263138526790a000000ce918d0fb7da7591d0b27b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x8f, {0x8f, 0xe, "708daef82f2052246faa3c87499a0d526721df70363296c8382fc7432276e3122f9dcf20b0396508215bd4321d0ef467dbea992237e91466fb0af20a62a3aab5bb8a493cfa50c993e02090513afabf5d8a54e5ac94acf9cb23b27e6fe1b3c39062b91ab3aca4f53a0de77c5f7036c5eb454fb13a5286460eb9f408a9570e823475d10f3163fa5b66765ecae421"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, &(0x7f0000000580)={0x0, 0xf, 0xdc, {0x5, 0xf, 0xdc, 0x4, [@generic={0x8, 0x10, 0x3, "6e6fb1f41d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x6, 0x9952}, @generic={0xbe, 0x10, 0x2, "1821665aec26bb1a3e5f3cbd314e184d802e4e0af41ed1c351c92a96404769ba958848b9449b6ec34a47879194df9bf9c5c914c9f3f6cae6e2cbfcc1fe76129f083704e93b64c5223ef9eb436a7aed35d742f5401d9fa842a5fdd3f9d6bf87a14d1bd1c71c94e95c39641adf764cf847f5bc4a7252411f6679b3c4a33f1ee8b6e16d8f45666df0389ca9a838987ac3290567d5d17bdcfee478b761434d3c4fe75af6d204c185a5b55d574ab520314cf53c6efc626a1fca87a73216"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x4, 0x9}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x17, 0x80, 0x7, 0x63, "a996111a", "23d40e37"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x2, 0x7, 0x4, 0x33, 0x1, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f0000001a00)={0x20, 0x11, 0xe3, "72408762fabcaa05c6afa6fe56d711332f35d1696532956e3da2005498f57adc097e91fc87dac39d5d84dd65c81878d663d37d0665af31d3edf68e3711b9877dc4f1a9bff45eb48500a3d06d9fd4b976c69c322a4d0ef6679977513e1edcc9db8b2bc1e7e03d043fdfc155b559149bd35df123584c96f74e8d53d1427aeb8bccddb46deb2739a015b1b97b3de37193b2c0dd09ba43afa5ed69afa6cf928c6db88d1143d51bfcb6375f00f31fcb19babd9aee55a7d6e2bb0aa9a38054195f93e12f5677e4a0798eab9cbe69014277d4dafa775187b9bbd0b50fb87a855b77bc3fcdf473"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x23}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x140, 0x2caaa645f949895f, [0xf0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0xf800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000900)={0x40, 0xb, 0x2, "8b33"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "ef90"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}})

5.878201577s ago: executing program 5 (id=693):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000200)})
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
timer_delete(r3)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv0\x00', 0x0})

5.258633642s ago: executing program 4 (id=682):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200100001200130700000000"], 0x120}}, 0x0)
recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40000000)

4.934092725s ago: executing program 4 (id=683):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002f80), 0x3, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r5, 0x0, 0x102)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000780)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
recvmmsg(r2, 0x0, 0x0, 0x40002122, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
open(&(0x7f0000000080)='./file1\x00', 0x400, 0x100)

4.142015216s ago: executing program 5 (id=685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)

3.552622755s ago: executing program 5 (id=688):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYBLOB="c8"], 0x0)
syz_usb_ep_write(r0, 0x8d, 0x1, &(0x7f00000001c0)="d0")

2.310196053s ago: executing program 6 (id=692):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d300012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140fffffffffffffffd080003400000013a"], 0xbc}}, 0x20050800)

1.922736488s ago: executing program 6 (id=695):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x4, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x4002, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0xfffffffb, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x5195, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0xa, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.822139946s ago: executing program 5 (id=697):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.53193463s ago: executing program 6 (id=698):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1e0001000000000000000000000000fc02000000000000000000000000000000000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac14140c000000000000000000000000fc020000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c0000001000000002"], 0xa0}}, 0x0)

1.531600008s ago: executing program 2 (id=699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0)

1.36756451s ago: executing program 6 (id=700):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2514"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.347359725s ago: executing program 2 (id=701):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
io_setup(0x8a, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}])

1.115961874s ago: executing program 6 (id=702):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0x4)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.082365078s ago: executing program 5 (id=703):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044004}, 0xc050)

1.051417409s ago: executing program 2 (id=704):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
dup(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

843.283332ms ago: executing program 5 (id=705):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb)

772.831703ms ago: executing program 2 (id=706):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)

757.098623ms ago: executing program 4 (id=707):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)

543.93811ms ago: executing program 2 (id=708):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f00000a4000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r1, 0xf, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, &(0x7f00000005c0)=""/43, 0x2b, 0x0)

543.626207ms ago: executing program 4 (id=709):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

241.623608ms ago: executing program 4 (id=710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0)

82.039565ms ago: executing program 4 (id=711):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)

0s ago: executing program 2 (id=712):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioperm(0x5, 0x6, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x8040)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

][ T5786] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  124.521571][ T5786] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  124.710403][ T5786] usb 1-1: USB disconnect, device number 7
[  124.713367][ T5718] usb 3-1: USB disconnect, device number 8
[  124.871606][ T5718] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  124.874060][ T6275] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  126.251370][ T1260] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  126.281950][ T1260] usb 4-1: invalid MIDI in EP 0
[  127.219694][ T1260] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  127.258034][ T1260] usb 4-1: USB disconnect, device number 7
[  127.349428][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.610878][ T1260] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  127.774189][ T1260] usb 4-1: unable to get BOS descriptor or descriptor too short
[  127.776961][ T1260] usb 4-1: not running at top speed; connect to a high speed hub
[  127.800616][ T1260] usb 4-1: config 1 has an invalid interface number: 93 but max is 0
[  127.800645][ T1260] usb 4-1: config 1 has no interface number 0
[  127.802463][ T1260] usb 4-1: config 1 interface 93 has no altsetting 0
[  127.826535][ T1260] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[  127.826566][ T1260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.826826][ T1260] usb 4-1: Product: syz
[  127.826844][ T1260] usb 4-1: Manufacturer: syz
[  127.826860][ T1260] usb 4-1: SerialNumber: syz
[  128.116966][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.122154][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.140834][ T5718] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  128.186468][ T1260] usb 4-1: USB disconnect, device number 8
[  128.320905][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  128.323324][ T5718] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  128.323351][ T5718] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  128.323379][ T5718] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  128.323416][ T5718] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  128.323433][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.403709][ T5718] gspca_main: nw80x-2.14.0 probing 055f:d001
[  128.469462][ T6305] binder: 6304:6305 ioctl c0306201 2000000001c0 returned -14
[  128.945185][ T6313] netlink: 'syz.0.181': attribute type 10 has an invalid length.
[  128.945313][ T6313] macvlan1: entered promiscuous mode
[  128.945550][ T6313] macvlan1: entered allmulticast mode
[  128.945567][ T6313] veth1_vlan: entered allmulticast mode
[  129.584622][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  129.615238][ T5718] usb 3-1: USB disconnect, device number 9
[  130.091445][ T6338] netlink: 112 bytes leftover after parsing attributes in process `syz.0.189'.
[  130.540809][ T1260] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  130.695250][ T1260] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  130.695280][ T1260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.695300][ T1260] usb 1-1: config 0 has no interface number 0
[  130.725811][ T1260] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  130.725842][ T1260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.725863][ T1260] usb 1-1: Product: syz
[  130.725879][ T1260] usb 1-1: Manufacturer: syz
[  130.725894][ T1260] usb 1-1: SerialNumber: syz
[  130.809349][ T1260] usb 1-1: config 0 descriptor??
[  130.840009][ T1260] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22
[  131.842765][ T5717] usb 2-1: Using ep0 maxpacket: 8
[  131.980614][ T5717] usb 2-1: device descriptor read/all, error -71
[  132.691147][ T5758] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  132.841368][ T5758] usb 4-1: Using ep0 maxpacket: 32
[  132.844147][ T5758] usb 4-1: config index 0 descriptor too short (expected 1042, got 18)
[  132.844173][ T5758] usb 4-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  132.844204][ T5758] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 249
[  132.844253][ T5758] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  132.844276][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.942923][ T5758] gspca_main: nw80x-2.14.0 probing 055f:d001
[  132.963677][ T1260] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  133.136367][ T1260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.136471][ T1260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  133.136498][ T1260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  133.136518][ T1260] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  133.136557][ T1260] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  133.136976][ T1260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.258781][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  133.282603][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  133.455491][ T1260] usb 3-1: config 0 descriptor??
[  134.387572][ T5758] usb 4-1: USB disconnect, device number 9
[  134.469176][ T1261] usb 1-1: USB disconnect, device number 8
[  134.595799][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'.
[  134.837334][ T6378] overlayfs: missing 'lowerdir'
[  135.202392][ T5717] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  136.081030][ T1261] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  136.306095][ T1261] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  136.306211][ T1261] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  136.306241][ T1261] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.306265][ T1261] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  136.306294][ T1261] usb 1-1: config 0 interface 0 has no altsetting 0
[  136.306386][ T1261] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  136.306411][ T1261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.468385][ T1261] usb 1-1: config 0 descriptor??
[  136.921897][ T1261] usbhid 1-1:0.0: can't add hid device: -71
[  136.922149][ T1261] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  136.971366][ T1261] usb 1-1: USB disconnect, device number 9
[  137.249391][ T1260] usbhid 3-1:0.0: can't add hid device: -71
[  137.249516][ T1260] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  137.288200][ T1260] usb 3-1: USB disconnect, device number 10
[  137.830628][ T6411] netlink: 'syz.1.206': attribute type 4 has an invalid length.
[  137.831131][ T6411] netlink: 156 bytes leftover after parsing attributes in process `syz.1.206'.
[  137.831169][ T6411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  138.060877][ T1261] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  138.143664][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'.
[  138.210912][ T1261] usb 3-1: Using ep0 maxpacket: 32
[  138.213845][ T1261] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  138.213873][ T1261] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  138.213895][ T1261] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  138.213948][ T1261] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  138.213973][ T1261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.353028][ T1261] gspca_main: nw80x-2.14.0 probing 055f:d001
[  138.442136][ T1260] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  138.630811][ T1260] usb 4-1: device descriptor read/64, error -71
[  138.881088][ T1260] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  138.952122][ T1261] usb 3-1: USB disconnect, device number 11
[  139.022423][ T1260] usb 4-1: device descriptor read/64, error -71
[  139.135078][ T1260] usb usb4-port1: attempt power cycle
[  139.484422][ T1260] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  139.501615][ T1260] usb 4-1: device descriptor read/8, error -71
[  139.741246][ T1260] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  139.761566][ T1260] usb 4-1: device descriptor read/8, error -71
[  139.911270][ T1260] usb usb4-port1: unable to enumerate USB device
[  140.013901][ T6436] loop8: detected capacity change from 0 to 7
[  140.046620][ T6436] Dev loop8: unable to read RDB block 7
[  140.046664][ T6436]  loop8: unable to read partition table
[  140.046865][ T6436] loop8: partition table beyond EOD, truncated
[  140.046898][ T6436] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  140.233198][ T1260] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  140.388796][ T1260] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  140.388831][ T1260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.493074][ T1260] usb 3-1: config 0 descriptor??
[  141.651108][ T6434] syz.2.217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  142.636731][ T6447] netlink: 'syz.2.217': attribute type 10 has an invalid length.
[  145.818643][ T5717] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  146.000836][ T5717] usb 1-1: Using ep0 maxpacket: 32
[  146.006277][ T5717] usb 1-1: config index 0 descriptor too short (expected 1042, got 18)
[  146.006306][ T5717] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  146.006328][ T5717] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249
[  146.006382][ T5717] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  146.006407][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.117896][ T5717] gspca_main: nw80x-2.14.0 probing 055f:d001
[  147.249851][ T1261] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  147.280445][ T1260] usb 3-1: Cannot set autoneg
[  147.289458][ T1260] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  147.776146][   T64] block nbd0: Connection timed out, retrying (0/3 alive)
[  147.799593][   T64] block nbd0: Dead connection, failed to find a fallback
[  147.799626][   T64] block nbd0: shutting down sockets
[  147.799834][   T64] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.799986][   T64] Buffer I/O error on dev nbd0, logical block 0, async page read
[  147.951082][ T1260] usb 3-1: USB disconnect, device number 12
[  147.970039][ T5763] usb 1-1: USB disconnect, device number 10
[  147.981070][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.981105][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  147.981644][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.981671][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  147.981827][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.981861][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.073066][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.073101][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.073306][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.073332][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.073633][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.073659][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.073818][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.073851][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.073946][ T5806] ldm_validate_partition_table(): Disk read failed.
[  148.074017][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.074041][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.074187][ T5806] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.074211][ T5806] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.301529][ T5806] Dev nbd0: unable to read RDB block 0
[  148.302411][ T5806]  nbd0: unable to read partition table
[  148.431118][ T5806] ldm_validate_partition_table(): Disk read failed.
[  148.436267][ T5806] Dev nbd0: unable to read RDB block 0
[  148.451934][ T5806]  nbd0: unable to read partition table
[  148.546765][   T38] audit: type=1800 audit(1780143021.277:2): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  148.709009][ T6473] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  151.081812][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'.
[  153.040915][ T5786] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  153.107854][ T6493] loop2: detected capacity change from 0 to 7
[  153.112210][ T6493] Dev loop2: unable to read RDB block 7
[  153.112254][ T6493]  loop2: unable to read partition table
[  153.112466][ T6493] loop2: partition table beyond EOD, truncated
[  153.112487][ T6493] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ªU¨�â·û) failed (rc=-5)
[  153.454080][ T1261] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  153.652089][ T1261] usb 3-1: Using ep0 maxpacket: 32
[  153.654827][ T1261] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  153.654854][ T1261] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  153.654878][ T1261] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  153.654941][ T1261] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  153.654965][ T1261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.805233][ T1261] gspca_main: nw80x-2.14.0 probing 055f:d001
[  154.886053][ T1261] gspca_nw80x: reg_w err -110
[  154.886151][ T1261] nw80x 3-1:2.0: probe with driver nw80x failed with error -110
[  155.192888][ T5786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  155.192923][ T5786] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  155.192950][ T5786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  155.197339][ T5786] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  155.197370][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.197392][ T5786] usb 4-1: Product: syz
[  155.197408][ T5786] usb 4-1: Manufacturer: syz
[  155.197424][ T5786] usb 4-1: SerialNumber: syz
[  155.285271][ T5786] usb 4-1: config 0 descriptor??
[  155.286259][ T6489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.286456][ T6489] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.290593][ T5786] usb 4-1: ucan: probing device on interface #0
[  156.979377][ T5763] usb 3-1: USB disconnect, device number 13
[  157.534009][ T6505] capability: warning: `syz.2.242' uses 32-bit capabilities (legacy support in use)
[  159.143277][ T5786] ucan 4-1:0.0 can0: registered device
[  159.147225][ T5786] ucan 4-1:0.0 can0: firmware string: unknown
[  159.249462][ T5786] usb 4-1: USB disconnect, device number 14
[  159.251007][   T32] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  159.821032][   T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.821087][   T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  159.821117][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  159.821145][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  159.821170][   T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  159.826301][   T32] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  159.826330][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  159.826351][   T32] usb 1-1: Product: syz
[  159.826365][   T32] usb 1-1: Manufacturer: syz
[  159.826379][   T32] usb 1-1: SerialNumber: syz
[  159.850836][ T5718] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  159.901319][   T32] usb 1-1: config 0 descriptor??
[  160.049948][ T5718] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  160.049977][ T5718] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  160.050053][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.050073][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  160.050094][ T5718] usb 2-1: config 1 has no interface number 0
[  160.050139][ T5718] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  160.050404][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.398058][ T5718] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  160.483785][ T5718] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  160.484625][ T5718] snd_usb_pod 2-1:1.1: invalid control EP
[  160.484643][ T5718] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  160.534022][   T32] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110
[  160.534385][   T32] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  160.657289][ T6512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.243'.
[  160.728361][ T5718] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  160.742956][ T5718] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  161.126570][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'.
[  162.356765][ T1260] usb 2-1: USB disconnect, device number 12
[  164.090998][ T1261] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  164.280800][ T1261] usb 2-1: Using ep0 maxpacket: 32
[  164.283656][ T1261] usb 2-1: config index 0 descriptor too short (expected 1042, got 18)
[  164.283682][ T1261] usb 2-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  164.283703][ T1261] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 249
[  164.283751][ T1261] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  164.283776][ T1261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.379280][ T1261] gspca_main: nw80x-2.14.0 probing 055f:d001
[  165.459465][ T1261] gspca_nw80x: reg_w err -110
[  165.459569][ T1261] nw80x 2-1:2.0: probe with driver nw80x failed with error -110
[  165.740846][ T5786] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  166.876561][ T1261] usb 2-1: USB disconnect, device number 13
[  168.673896][ T1261] usb 1-1: USB disconnect, device number 11
[  169.023430][ T6550] loop5: detected capacity change from 0 to 127
[  169.079054][ T6550]  loop5: unable to read partition table
[  169.079287][ T6550] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  170.460927][   T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  171.971274][   T32] usb 3-1: Using ep0 maxpacket: 32
[  172.046178][   T32] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  172.046209][   T32] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  172.046232][   T32] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  172.046287][   T32] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  172.046312][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.184158][   T32] gspca_main: nw80x-2.14.0 probing 055f:d001
[  172.595325][ T6573] loop8: detected capacity change from 0 to 7
[  173.791543][ T6573] Dev loop8: unable to read RDB block 7
[  173.791587][ T6573]  loop8: unable to read partition table
[  173.791804][ T6573] loop8: partition table beyond EOD, truncated
[  173.791842][ T6573] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  174.200789][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  174.238921][   T32] usb 3-1: USB disconnect, device number 14
[  174.380779][   T10] usb 4-1: device descriptor read/64, error -71
[  174.820778][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  176.439311][ T6578] netlink: 324 bytes leftover after parsing attributes in process `syz.2.267'.
[  177.664560][ T6586] Invalid ELF header magic: != ELF
[  178.715378][   T10] usb 4-1: device descriptor read/64, error -71
[  178.823487][   T10] usb usb4-port1: attempt power cycle
[  179.056179][ T6589] netlink: 128 bytes leftover after parsing attributes in process `syz.2.271'.
[  179.056738][ T6589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.070929][   T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  186.230763][   T32] usb 3-1: Using ep0 maxpacket: 32
[  186.233391][   T32] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  186.233418][   T32] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  186.233440][   T32] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  186.233492][   T32] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  186.233517][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.269465][   T32] gspca_main: nw80x-2.14.0 probing 055f:d001
[  187.458073][   T32] usb 3-1: USB disconnect, device number 15
[  189.517356][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.534769][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.537325][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.539696][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.592388][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.627914][ T6623] FAULT_INJECTION: forcing a failure.
[  189.627914][ T6623] name failslab, interval 1, probability 0, space 0, times 0
[  189.627949][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.2.280 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  189.627977][ T6623] Tainted: [L]=SOFTLOCKUP
[  189.627984][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  189.627995][ T6623] Call Trace:
[  189.628002][ T6623]  <TASK>
[  189.628009][ T6623]  dump_stack_lvl+0xe8/0x150
[  189.628037][ T6623]  should_fail_ex+0x46b/0x600
[  189.628070][ T6623]  should_failslab+0xa8/0x100
[  189.628097][ T6623]  __kmalloc_noprof+0xdf/0x7b0
[  189.628121][ T6623]  ? __kasan_kmalloc+0x93/0xb0
[  189.628141][ T6623]  ? nla_strdup+0x9d/0x140
[  189.628161][ T6623]  nla_strdup+0x9d/0x140
[  189.628179][ T6623]  nf_tables_newtable+0x491/0x1910
[  189.628201][ T6623]  ? nfnetlink_has_listeners+0x11/0x50
[  189.628239][ T6623]  nfnetlink_rcv+0x1247/0x27b0
[  189.628292][ T6623]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  189.628335][ T6623]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  189.628357][ T6623]  ? ref_tracker_free+0x673/0x820
[  189.628411][ T6623]  ? __netlink_deliver_tap+0x866/0x8b0
[  189.628459][ T6623]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.628488][ T6623]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.628524][ T6623]  netlink_unicast+0x780/0x920
[  189.628557][ T6623]  netlink_sendmsg+0x813/0xb40
[  189.628580][ T6623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.628598][ T6623]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  189.628624][ T6623]  ? aa_sock_msg_perm+0x122/0x200
[  189.628645][ T6623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.628663][ T6623]  sock_sendmsg_nosec+0x13a/0x180
[  189.628690][ T6623]  ____sys_sendmsg+0x55c/0x870
[  189.628726][ T6623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.628762][ T6623]  ? import_iovec+0x73/0xa0
[  189.628784][ T6623]  ___sys_sendmsg+0x2a5/0x360
[  189.628809][ T6623]  ? __lock_acquire+0x6b5/0x2d10
[  189.628833][ T6623]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.628888][ T6623]  ? __fget_files+0x2a/0x420
[  189.628909][ T6623]  ? __fget_files+0x3a6/0x420
[  189.628939][ T6623]  __x64_sys_sendmsg+0x1c3/0x2a0
[  189.628972][ T6623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.629006][ T6623]  ? __pfx_ksys_write+0x10/0x10
[  189.629038][ T6623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.629057][ T6623]  do_syscall_64+0x174/0x580
[  189.629088][ T6623]  ? clear_bhb_loop+0x40/0x90
[  189.629110][ T6623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.629129][ T6623] RIP: 0033:0x7fbd0f1ace59
[  189.629146][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.629162][ T6623] RSP: 002b:00007fbd0d3fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.629182][ T6623] RAX: ffffffffffffffda RBX: 00007fbd0f425fa0 RCX: 00007fbd0f1ace59
[  189.629196][ T6623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  189.629208][ T6623] RBP: 00007fbd0d3fe090 R08: 0000000000000000 R09: 0000000000000000
[  189.629220][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.629231][ T6623] R13: 00007fbd0f426038 R14: 00007fbd0f425fa0 R15: 00007ffc55f5d7a8
[  189.629260][ T6623]  </TASK>
[  191.710806][ T4927] Bluetooth: hci4: command tx timeout
[  191.947909][ T6628] binder: 6627:6628 ioctl c0306201 200000000080 returned -14
[  193.790785][ T4927] Bluetooth: hci4: command tx timeout
[  194.374502][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  194.374623][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  195.870795][ T4927] Bluetooth: hci4: command tx timeout
[  198.128169][   T60] Bluetooth: hci4: command tx timeout
[  198.291031][ T6638] binder: 6636:6638 ioctl c0306201 2000000003c0 returned -14
[  201.966798][ T6640] block nbd1: shutting down sockets
[  203.760795][ T1261] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  203.952111][ T1261] usb 3-1: Using ep0 maxpacket: 32
[  203.954738][ T1261] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  203.954766][ T1261] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  203.954788][ T1261] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  203.954840][ T1261] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  203.954865][ T1261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.039598][ T1261] gspca_main: nw80x-2.14.0 probing 055f:d001
[  204.140783][   T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  204.271398][   T10] usb 1-1: device descriptor read/64, error -71
[  204.561652][   T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  204.680834][ T1261] usb 3-1: USB disconnect, device number 16
[  204.720760][   T10] usb 1-1: device descriptor read/64, error -71
[  204.833763][   T10] usb usb1-port1: attempt power cycle
[  208.445936][ T6662] tipc: Started in network mode
[  208.445968][ T6662] tipc: Node identity ac1414aa, cluster identity 4711
[  208.493212][ T6662] tipc: Enabled bearer <udp:s>, priority 10
[  211.144647][   T32] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  211.332906][   T32] usb 3-1: Using ep0 maxpacket: 8
[  211.348719][   T32] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  211.348752][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.348774][   T32] usb 3-1: Product: syz
[  211.348790][   T32] usb 3-1: Manufacturer: syz
[  211.348806][   T32] usb 3-1: SerialNumber: syz
[  211.391676][ T5618] Bluetooth: hci1: command 0x0406 tx timeout
[  211.395224][ T5618] Bluetooth: hci0: command 0x0406 tx timeout
[  211.450857][   T32] usb 3-1: config 0 descriptor??
[  211.470788][ T5617] Bluetooth: hci2: command 0x0406 tx timeout
[  211.475513][   T32] gspca_main: se401-2.14.0 probing 047d:5003
[  213.091731][ T5786] tipc: Node number set to 2886997162
[  213.991658][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  214.183162][   T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  214.183222][   T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  214.183248][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.177029][   T10] gspca_main: stv0680-2.14.0 probing 041e:4007
[  215.384583][   T32] gspca_se401: read req failed req 0x06 error -19
[  215.458013][   T32] usb 3-1: USB disconnect, device number 17
[  215.540734][ T5758] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  216.921282][ T5758] usb 1-1: Using ep0 maxpacket: 32
[  216.961433][ T5758] usb 1-1: config index 0 descriptor too short (expected 1042, got 18)
[  216.961464][ T5758] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  216.961486][ T5758] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249
[  216.961623][ T5758] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  216.961647][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.750877][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110
[  217.750906][   T10] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  217.956142][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  217.956171][   T10] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  218.700749][   T32] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  218.898500][   T10] usb 2-1: USB disconnect, device number 14
[  219.309677][ T5758] usb 1-1: can't set config #2, error -71
[  219.329520][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'.
[  219.355182][ T5758] usb 1-1: USB disconnect, device number 15
[  221.046255][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'.
[  221.813678][ T5758] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  221.922320][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880345a4000: rx timeout, send abort
[  221.941393][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880345a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  223.212852][ T5758] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  223.212906][ T5758] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  223.212934][ T5758] usb 2-1: config 2 interface 0 has no altsetting 0
[  223.302670][ T5758] usb 2-1: New USB device found, idVendor=04d8, idProduct=8083, bcdDevice=da.47
[  223.302704][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.302726][ T5758] usb 2-1: Product: syz
[  223.302742][ T5758] usb 2-1: Manufacturer: syz
[  223.302757][ T5758] usb 2-1: SerialNumber: syz
[  223.860925][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.897172][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.918937][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.919876][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.109424][ T5691] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  227.287049][ T5691] usb 3-1: device not accepting address 19, error -71
[  227.958393][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.960311][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.977212][ T6618] bridge_slave_0: entered allmulticast mode
[  227.996410][ T6618] bridge_slave_0: entered promiscuous mode
[  228.058479][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.058812][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.059136][ T6618] bridge_slave_1: entered allmulticast mode
[  228.096256][ T6618] bridge_slave_1: entered promiscuous mode
[  228.115248][ T5758] cdc_acm 2-1:2.0: Zero length descriptor references
[  228.115289][ T5758] cdc_acm 2-1:2.0: probe with driver cdc_acm failed with error -22
[  229.684676][ T5758] usb 2-1: USB disconnect, device number 15
[  230.142410][ T6726] process 'syz.2.311' launched './file0' with NULL argv: empty string added
[  231.119403][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.127470][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.520832][ T5763] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  231.650818][ T5763] usb 2-1: device descriptor read/64, error -71
[  231.881118][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[  232.854073][ T5763] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  232.954182][ T6618] team0: Port device team_slave_0 added
[  232.972023][ T6618] team0: Port device team_slave_1 added
[  234.473494][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.473512][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.473542][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.483231][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.483247][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.483276][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.331011][ T6618] hsr_slave_0: entered promiscuous mode
[  235.333573][ T6618] hsr_slave_1: entered promiscuous mode
[  235.335554][ T6618] debugfs: 'hsr0' already exists in 'hsr'
[  235.335580][ T6618] Cannot create hsr debugfs directory
[  237.340782][ T5718] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  240.190100][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  240.191280][ T5718] usb 3-1: device descriptor read/all, error -71
[  241.470831][    T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  241.636414][    T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 2
[  241.636441][    T9] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  241.636459][    T9] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3
[  241.636478][    T9] usb 1-1: config 150 has no interface number 0
[  241.636508][    T9] usb 1-1: config 150 interface 204 has no altsetting 0
[  241.682790][    T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  241.682819][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.682839][    T9] usb 1-1: Product: syz
[  241.682853][    T9] usb 1-1: Manufacturer: syz
[  241.682867][    T9] usb 1-1: SerialNumber: syz
[  241.951174][ T5718] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  242.102865][ T5718] usb 3-1: device descriptor read/64, error -71
[  242.873579][    T9] usb 1-1: USB disconnect, device number 16
[  243.115983][ T5718] usb usb3-port1: attempt power cycle
[  246.175365][ T6791] sg_write: data in/out 491487/136 bytes for SCSI command 0xe0-- guessing data in;
[  246.175365][ T6791]    program syz.1.338 not setting count and/or reply_len properly
[  249.747397][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.787460][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.788685][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.790433][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.813041][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.335334][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  250.960924][ T5691] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  251.150940][ T5691] usb 3-1: Using ep0 maxpacket: 32
[  251.160024][ T5691] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  251.160052][ T5691] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  251.160074][ T5691] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  251.160122][ T5691] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  251.160145][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.337923][ T5691] gspca_main: nw80x-2.14.0 probing 055f:d001
[  252.457562][ T5620] Bluetooth: hci3: command tx timeout
[  252.865145][   T32] usb 3-1: USB disconnect, device number 24
[  253.638502][ T6822] 9p: Bad value for 'rfdno'
[  253.834924][ T6824] binder: 6823:6824 ioctl c0306201 2000000001c0 returned -14
[  254.159653][ T5620] Bluetooth: hci1: SCO packet too small
[  254.967662][ T5620] Bluetooth: hci3: command tx timeout
[  255.346337][ T6837] netlink: 'syz.0.350': attribute type 10 has an invalid length.
[  255.431007][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  255.431118][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  257.310819][ T5620] Bluetooth: hci3: command tx timeout
[  257.860668][    C1] sched: DL replenish lagged too much
[  258.039127][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  259.366793][    T9] usb 1-1: Using ep0 maxpacket: 32
[  259.369050][    T9] usb 1-1: config index 0 descriptor too short (expected 1042, got 18)
[  259.369077][    T9] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  259.369101][    T9] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249
[  259.369174][    T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  259.369196][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.390730][ T5620] Bluetooth: hci3: command tx timeout
[  259.458010][    T9] gspca_main: nw80x-2.14.0 probing 055f:d001
[  259.500049][ T6863] netlink: 112 bytes leftover after parsing attributes in process `syz.2.359'.
[  259.993399][    C1] Unknown status report in ack skb
[  262.120842][    T9] gspca_nw80x: reg_r err -110
[  262.120942][    T9] nw80x 1-1:2.0: probe with driver nw80x failed with error -110
[  264.291718][    T9] usb 1-1: USB disconnect, device number 18
[  264.890912][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  264.972470][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.974410][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.977705][ T6809] bridge_slave_0: entered allmulticast mode
[  265.040832][ T6809] bridge_slave_0: entered promiscuous mode
[  265.167120][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.167548][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.167903][ T6809] bridge_slave_1: entered allmulticast mode
[  265.218008][ T6809] bridge_slave_1: entered promiscuous mode
[  268.008714][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.070733][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.178188][ T6809] team0: Port device team_slave_0 added
[  269.184092][ T6809] team0: Port device team_slave_1 added
[  269.525470][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.525488][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.525514][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.817385][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.817402][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.817430][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.952785][ T6809] hsr_slave_0: entered promiscuous mode
[  269.956667][ T6809] hsr_slave_1: entered promiscuous mode
[  270.018410][ T6809] debugfs: 'hsr0' already exists in 'hsr'
[  270.018446][ T6809] Cannot create hsr debugfs directory
[  272.012572][    T9] usb 1-1: device descriptor read/64, error -71
[  273.040784][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  274.670929][   T32] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  274.850739][   T32] usb 3-1: Using ep0 maxpacket: 32
[  274.853431][   T32] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  274.853456][   T32] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  274.853477][   T32] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  274.853526][   T32] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  274.853549][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.747245][   T32] gspca_main: nw80x-2.14.0 probing 055f:d001
[  277.851986][   T32] gspca_nw80x: reg_w err -110
[  277.852080][   T32] nw80x 3-1:2.0: probe with driver nw80x failed with error -110
[  278.060947][   T37] usb 3-1: USB disconnect, device number 25
[  278.530872][   T37] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  279.290933][   T37] usb 3-1: Using ep0 maxpacket: 32
[  279.295646][   T37] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  279.295671][   T37] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  279.295692][   T37] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  279.295741][   T37] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  279.295764][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.373597][   T37] gspca_main: nw80x-2.14.0 probing 055f:d001
[  281.503566][   T37] gspca_nw80x: reg_r err -32
[  281.503667][   T37] nw80x 3-1:2.0: probe with driver nw80x failed with error -32
[  281.508977][   T37] usb 3-1: USB disconnect, device number 26
[  282.893082][ T6924] netlink: 212 bytes leftover after parsing attributes in process `syz.2.380'.
[  285.251336][   T37] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  285.665900][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.665935][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.665974][   T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  285.666017][   T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  285.666042][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.746074][   T37] usb 1-1: config 0 descriptor??
[  289.442975][   T37] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  289.797147][   T37] usb 1-1: USB disconnect, device number 21
[  289.979599][ T6958] fido_id[6958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  289.990741][ T5718] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  290.142074][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  290.144634][ T5718] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  290.144661][ T5718] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  290.144692][ T5718] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  290.144744][ T5718] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  290.144768][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.369749][ T5718] gspca_main: nw80x-2.14.0 probing 055f:d001
[  294.658586][ T5718] usb 3-1: USB disconnect, device number 27
[  297.129761][ T6982] loop8: detected capacity change from 0 to 7
[  297.450910][   T37] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  298.681165][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.699931][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.742465][ T6982] Dev loop8: unable to read RDB block 7
[  298.742511][ T6982]  loop8: unable to read partition table
[  298.742724][ T6982] loop8: partition table beyond EOD, truncated
[  298.742784][ T6982] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  299.819106][ T6618] syz-executor (6618) used greatest stack depth: 16696 bytes left
[  300.535205][ T7000] IPVS: length: 15 != 183903660728
[  301.331156][   T37] usb 1-1: device descriptor read/64, error -71
[  301.580993][   T37] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  301.820759][   T37] usb 1-1: Using ep0 maxpacket: 32
[  301.841147][   T37] usb 1-1: config index 0 descriptor too short (expected 1042, got 18)
[  301.841175][   T37] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  301.841196][   T37] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249
[  301.841244][   T37] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  301.841267][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.926679][   T37] gspca_main: nw80x-2.14.0 probing 055f:d001
[  302.571776][   T37] usb 1-1: USB disconnect, device number 23
[  308.741013][   T32] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  308.905304][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.905339][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.905363][   T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.905407][   T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.905432][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.998522][   T32] usb 1-1: config 0 descriptor??
[  311.390096][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.396714][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.943655][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.944306][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.278919][   T32] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  313.725962][   T38] audit: type=1800 audit(1780143186.357:3): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.420" name="/" dev="sockfs" ino=12245 res=0 errno=0
[  314.473348][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.923914][ T5758] usb 1-1: USB disconnect, device number 24
[  315.295539][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.320803][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.327922][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.353292][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.877770][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  316.877872][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  317.807065][ T5620] Bluetooth: hci4: command tx timeout
[  317.901362][ T7052] overlay: Unknown parameter '\'
[  318.280787][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  319.380754][   T10] usb 1-1: Using ep0 maxpacket: 32
[  319.383582][   T10] usb 1-1: config index 0 descriptor too short (expected 1042, got 18)
[  319.383611][   T10] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  319.383633][   T10] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249
[  319.383684][   T10] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  319.383709][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.085532][ T5620] Bluetooth: hci4: command tx timeout
[  320.461691][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  321.640781][   T10] gspca_nw80x: reg_w err -71
[  321.640896][   T10] nw80x 1-1:2.0: probe with driver nw80x failed with error -71
[  321.705392][   T10] usb 1-1: USB disconnect, device number 25
[  322.111612][ T5620] Bluetooth: hci4: command tx timeout
[  323.051475][ T7070] loop2: detected capacity change from 0 to 7
[  323.083193][ T7070] Dev loop2: unable to read RDB block 7
[  323.083240][ T7070]  loop2: unable to read partition table
[  323.083470][ T7070] loop2: partition table beyond EOD, truncated
[  323.083491][ T7070] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– «V¨�â·û) failed (rc=-5)
[  323.338734][ T5763] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  323.503147][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.503192][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.503215][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  323.503256][ T5763] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  323.503278][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.582023][ T5763] usb 3-1: config 0 descriptor??
[  324.317466][ T5620] Bluetooth: hci4: command tx timeout
[  325.689379][ T5763] usbhid 3-1:0.0: can't add hid device: -71
[  325.689512][ T5763] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  326.665624][ T5763] usb 3-1: USB disconnect, device number 28
[  328.340756][ T5763] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  330.510678][ T5763] usb 1-1: Using ep0 maxpacket: 32
[  331.486917][ T5763] usb 1-1: unable to read config index 0 descriptor/start: -71
[  331.486957][ T5763] usb 1-1: can't read configurations, error -71
[  331.521743][ T7101] netlink: 'syz.0.445': attribute type 28 has an invalid length.
[  331.521762][ T7101] netlink: 'syz.0.445': attribute type 29 has an invalid length.
[  331.521774][ T7101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.445'.
[  331.770786][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  331.933270][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.933304][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.933326][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.933369][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.933392][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.006471][    T9] usb 3-1: config 0 descriptor??
[  336.051999][    T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  337.011187][ T5691] usb 3-1: USB disconnect, device number 29
[  338.354740][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.355316][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.456965][ T7130] loop5: detected capacity change from 0 to 127
[  339.471951][ T7130]  loop5: unable to read partition table
[  339.472175][ T7130] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  340.661014][ T5691] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  341.950948][ T5758] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  342.373282][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.373321][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.373346][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  342.373404][ T5758] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  342.373428][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.492942][ T5758] usb 1-1: config 0 descriptor??
[  344.084601][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.085185][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.172686][ T5691] usb 3-1: device descriptor read/64, error -71
[  344.215316][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.796005][ T5691] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  344.831922][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.865707][ T5758] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  345.065329][ T5758] usb 1-1: USB disconnect, device number 28
[  345.902513][ T7162] netlink: 324 bytes leftover after parsing attributes in process `syz.0.466'.
[  346.746196][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  347.148612][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.151729][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.152074][ T7038] bridge_slave_0: entered allmulticast mode
[  347.199868][ T7038] bridge_slave_0: entered promiscuous mode
[  347.237193][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.237561][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.237881][ T7038] bridge_slave_1: entered allmulticast mode
[  347.275535][ T7038] bridge_slave_1: entered promiscuous mode
[  347.916078][ T5691] usb 3-1: device not accepting address 31, error -71
[  347.922630][ T5691] usb usb3-port1: attempt power cycle
[  348.645750][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.506842][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.785626][ T7038] team0: Port device team_slave_0 added
[  350.823800][ T7038] team0: Port device team_slave_1 added
[  351.120768][ T5691] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  351.282213][ T5691] usb 3-1: Using ep0 maxpacket: 32
[  351.284826][ T5691] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  351.284854][ T5691] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  351.284876][ T5691] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  351.284930][ T5691] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  351.284956][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.358059][ T5691] gspca_main: nw80x-2.14.0 probing 055f:d001
[  351.548793][ T7200] FAULT_INJECTION: forcing a failure.
[  351.548793][ T7200] name failslab, interval 1, probability 0, space 0, times 0
[  351.548831][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.0.480 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  351.548861][ T7200] Tainted: [L]=SOFTLOCKUP
[  351.548869][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  351.548897][ T7200] Call Trace:
[  351.548904][ T7200]  <TASK>
[  351.548913][ T7200]  dump_stack_lvl+0xe8/0x150
[  351.548941][ T7200]  should_fail_ex+0x46b/0x600
[  351.548976][ T7200]  should_failslab+0xa8/0x100
[  351.549005][ T7200]  __kmalloc_noprof+0xdf/0x7b0
[  351.549029][ T7200]  ? __kasan_kmalloc+0x93/0xb0
[  351.549052][ T7200]  ? nla_strdup+0x9d/0x140
[  351.549078][ T7200]  nla_strdup+0x9d/0x140
[  351.549100][ T7200]  nf_tables_newflowtable+0xa55/0x2590
[  351.549145][ T7200]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  351.549174][ T7200]  ? nfnl_pernet+0x23/0x240
[  351.549217][ T7200]  ? __nla_parse+0x40/0x60
[  351.549242][ T7200]  nfnetlink_rcv+0x1247/0x27b0
[  351.549304][ T7200]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  351.549348][ T7200]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  351.549370][ T7200]  ? ref_tracker_free+0x673/0x820
[  351.549426][ T7200]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.549456][ T7200]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  351.549487][ T7200]  ? rcu_preempt_deferred_qs_irqrestore+0x856/0xc60
[  351.549531][ T7200]  netlink_unicast+0x780/0x920
[  351.549572][ T7200]  netlink_sendmsg+0x813/0xb40
[  351.549600][ T7200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.549622][ T7200]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  351.549653][ T7200]  ? aa_sock_msg_perm+0x122/0x200
[  351.549676][ T7200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.549705][ T7200]  sock_sendmsg_nosec+0x13a/0x180
[  351.549732][ T7200]  ____sys_sendmsg+0x55c/0x870
[  351.549770][ T7200]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.549812][ T7200]  ? import_iovec+0x73/0xa0
[  351.549838][ T7200]  ___sys_sendmsg+0x2a5/0x360
[  351.549869][ T7200]  ? __lock_acquire+0x6b5/0x2d10
[  351.549898][ T7200]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.549963][ T7200]  ? __fget_files+0x2a/0x420
[  351.549987][ T7200]  ? __fget_files+0x3a6/0x420
[  351.550040][ T7200]  __x64_sys_sendmsg+0x1c3/0x2a0
[  351.550078][ T7200]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.550124][ T7200]  ? __pfx_ksys_write+0x10/0x10
[  351.550165][ T7200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.550189][ T7200]  do_syscall_64+0x174/0x580
[  351.550221][ T7200]  ? trace_irq_disable+0x3b/0x140
[  351.550245][ T7200]  ? clear_bhb_loop+0x40/0x90
[  351.550271][ T7200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.550292][ T7200] RIP: 0033:0x7f0f38b1ce59
[  351.550311][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.550329][ T7200] RSP: 002b:00007f0f36d76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.550352][ T7200] RAX: ffffffffffffffda RBX: 00007f0f38d95fa0 RCX: 00007f0f38b1ce59
[  351.550367][ T7200] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  351.550380][ T7200] RBP: 00007f0f36d76090 R08: 0000000000000000 R09: 0000000000000000
[  351.550393][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.550406][ T7200] R13: 00007f0f38d96038 R14: 00007f0f38d95fa0 R15: 00007ffd62990188
[  351.550439][ T7200]  </TASK>
[  352.006984][ T5758] usb 3-1: USB disconnect, device number 33
[  352.748803][ T6371] bridge_slave_1: left allmulticast mode
[  352.748979][ T6371] bridge_slave_1: left promiscuous mode
[  352.789643][ T1261] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  352.811233][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.009441][ T1261] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  353.009470][ T1261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  353.009489][ T1261] usb 1-1: config 0 has no interface number 0
[  353.050790][ T1261] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  353.050822][ T1261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.050843][ T1261] usb 1-1: Product: syz
[  353.050877][ T1261] usb 1-1: Manufacturer: syz
[  353.050892][ T1261] usb 1-1: SerialNumber: syz
[  353.143102][ T1261] usb 1-1: config 0 descriptor??
[  354.152379][ T1261] ims_pcu 1-1:0.41: Missing CDC union descriptor
[  354.152441][ T1261] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22
[  357.220995][   T32] usb 1-1: USB disconnect, device number 29
[  359.196224][ T5600] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  359.383135][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.383170][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.383191][ T5600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  359.383230][ T5600] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  359.383252][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.388254][ T5600] usb 3-1: config 0 descriptor??
[  360.932925][ T5600] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  360.933427][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.963759][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.345659][ T6371] bridge_slave_0: left allmulticast mode
[  361.345695][ T6371] bridge_slave_0: left promiscuous mode
[  361.346022][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.482730][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.492727][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.149109][   T38] audit: type=1800 audit(1780143234.997:4): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.490" name="/" dev="sockfs" ino=13532 res=0 errno=0
[  363.226868][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[  363.230791][ T5600] usb 3-1: reset high-speed USB device number 34 using dummy_hcd
[  364.023398][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  365.830739][ T1261] usb 3-1: USB disconnect, device number 34
[  366.592057][ T5758] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  366.753304][ T5758] usb 1-1: Using ep0 maxpacket: 16
[  366.757130][ T5758] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.757188][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  366.757218][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  366.757242][ T5758] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  366.757267][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  366.859166][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  366.859199][ T5758] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  366.859221][ T5758] usb 1-1: Manufacturer: syz
[  367.009739][ T5758] usb 1-1: config 0 descriptor??
[  368.524978][ T5758] rc_core: IR keymap rc-hauppauge not found
[  368.524996][ T5758] Registered IR keymap rc-empty
[  368.557041][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  368.575781][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  368.656319][ T5758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  368.700097][ T5758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12
[  368.720730][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.721322][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.810861][ T5786] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  368.971707][ T5786] usb 3-1: Using ep0 maxpacket: 32
[  368.980532][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short
[  368.993441][ T5786] usb 3-1: config 255 has an invalid interface number: 8 but max is 3
[  368.993468][ T5786] usb 3-1: config 255 has an invalid interface number: 207 but max is 3
[  368.993488][ T5786] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  368.993507][ T5786] usb 3-1: config 255 has 2 interfaces, different from the descriptor's value: 4
[  368.993528][ T5786] usb 3-1: config 255 has no interface number 0
[  368.993544][ T5786] usb 3-1: config 255 has no interface number 1
[  368.993614][ T5786] usb 3-1: config 255 interface 207 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  368.993641][ T5786] usb 3-1: config 255 interface 8 has no altsetting 0
[  368.993659][ T5786] usb 3-1: config 255 interface 207 has no altsetting 0
[  369.092749][ T5786] usb 3-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=31.cc
[  369.092781][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.092802][ T5786] usb 3-1: Product: syz
[  369.092817][ T5786] usb 3-1: Manufacturer: syz
[  369.092832][ T5786] usb 3-1: SerialNumber: syz
[  369.765517][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.592188][ T5786] usb 3-1: USB disconnect, device number 35
[  370.810707][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.877861][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.892501][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.912302][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.940406][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.956542][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.972219][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  370.990899][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  371.010724][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  371.052400][ T5758] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  371.052425][ T5758] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  371.208523][ T5758] usb 1-1: USB disconnect, device number 30
[  371.231384][ T5763] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  371.400927][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.400962][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.400985][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  371.401027][ T5763] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  371.401050][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.523166][ T5763] usb 3-1: config 0 descriptor??
[  373.852665][ T5763] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  375.060510][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.080365][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.056301][ T5691] usb 3-1: USB disconnect, device number 36
[  378.844300][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.876595][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  379.679095][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.830729][ T5691] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  382.083737][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short
[  382.093756][ T5691] usb 3-1: config 3 has an invalid interface number: 198 but max is 1
[  382.093783][ T5691] usb 3-1: config 3 has an invalid interface number: 166 but max is 1
[  382.093804][ T5691] usb 3-1: config 3 has no interface number 0
[  382.093820][ T5691] usb 3-1: config 3 has no interface number 1
[  382.093863][ T5691] usb 3-1: config 3 interface 198 has no altsetting 0
[  382.093882][ T5691] usb 3-1: config 3 interface 166 has no altsetting 0
[  382.098216][ T5691] usb 3-1: New USB device found, idVendor=06a3, idProduct=bad2, bcdDevice=46.af
[  382.098244][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.098264][ T5691] usb 3-1: Product: syz
[  382.098279][ T5691] usb 3-1: Manufacturer: syz
[  382.098293][ T5691] usb 3-1: SerialNumber: syz
[  382.685567][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.804527][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.807065][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.809411][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.837721][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.584281][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.628139][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.975075][ T5620] Bluetooth: hci3: command tx timeout
[  386.543725][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.046522][ T5620] Bluetooth: hci3: command tx timeout
[  387.461214][ T5691] hub 3-1:3.198: Invalid hub with more than one config or interface
[  387.461256][ T5691] hub 3-1:3.198: probe with driver hub failed with error -22
[  390.365932][ T5620] Bluetooth: hci3: command tx timeout
[  390.474605][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.475228][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.511865][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.557202][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.726787][ T5620] Bluetooth: hci3: command tx timeout
[  392.982376][   T38] audit: type=1800 audit(1780143265.797:5): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.547" name="/" dev="sockfs" ino=14766 res=0 errno=0
[  395.986559][ T5691] hub 3-1:3.166: Invalid hub with more than one config or interface
[  395.986601][ T5691] hub 3-1:3.166: probe with driver hub failed with error -22
[  396.959577][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  396.989891][ T5691] usb 3-1: USB disconnect, device number 37
[  397.040855][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.111169][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.114647][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.115518][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.340772][ T5691] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  398.504721][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.504766][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.504790][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  398.504835][ T5691] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  398.504860][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.538086][ T5691] usb 3-1: config 0 descriptor??
[  400.802710][ T4927] Bluetooth: hci5: command tx timeout
[  401.862562][ T5691] usbhid 3-1:0.0: can't add hid device: -71
[  401.862699][ T5691] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  402.835537][ T6371] bond0 (unregistering): Released all slaves
[  402.883180][ T5691] usb 3-1: USB disconnect, device number 38
[  402.912964][ T4927] Bluetooth: hci5: command tx timeout
[  405.064224][ T1261] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  405.848752][ T4927] Bluetooth: hci5: command tx timeout
[  406.520765][ T5691] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  406.733811][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.733847][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.733872][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  406.734036][ T5691] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  406.734063][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.801863][ T5691] usb 3-1: config 0 descriptor??
[  408.650647][ T4927] Bluetooth: hci5: command tx timeout
[  408.989562][ T5691] usbhid 3-1:0.0: can't add hid device: -71
[  408.989688][ T5691] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  409.060854][ T5691] usb 3-1: USB disconnect, device number 39
[  413.650766][ T5718] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  413.866883][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.866919][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.866944][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  413.866991][ T5718] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  413.867016][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.937805][ T5718] usb 3-1: config 0 descriptor??
[  415.061082][ T5758] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  415.283347][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.284227][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.375314][ T5718] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  415.443903][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.466209][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.093137][ T5758] usb 2-1: device descriptor read/all, error -71
[  418.545529][   T38] audit: type=1800 audit(1780143291.407:6): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.580" name="/" dev="sockfs" ino=13914 res=0 errno=0
[  418.896116][ T5758] usb 3-1: USB disconnect, device number 40
[  425.278659][ T7519] netlink: ct family unspecified
[  425.278703][ T7519] openvswitch: netlink: Actions may not be safe on all matching packets
[  431.548578][ T6371] hsr_slave_0: left promiscuous mode
[  432.008590][ T6371] hsr_slave_1: left promiscuous mode
[  432.121834][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.180833][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.178067][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  437.217776][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  437.228034][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  437.238994][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  437.239869][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  439.320850][ T5620] Bluetooth: hci0: command tx timeout
[  439.716865][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  439.716982][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  439.967627][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  440.007652][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  440.010220][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  440.054495][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  440.055218][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  441.391506][ T5620] Bluetooth: hci0: command tx timeout
[  442.207028][ T5620] Bluetooth: hci4: command tx timeout
[  445.534481][ T5620] Bluetooth: hci0: command tx timeout
[  445.534516][ T5620] Bluetooth: hci4: command tx timeout
[  445.620570][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  446.340742][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  447.560852][ T4927] Bluetooth: hci4: command tx timeout
[  447.560888][ T4927] Bluetooth: hci0: command tx timeout
[  449.630903][ T5620] Bluetooth: hci4: command tx timeout
[  451.542360][ T5718] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  452.663229][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.663263][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.663286][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  452.663328][ T5718] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.663413][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.725015][ T5718] usb 3-1: config 0 descriptor??
[  455.049531][ T5718] usbhid 3-1:0.0: can't add hid device: -71
[  455.049658][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  455.075126][ T5718] usb 3-1: USB disconnect, device number 41
[  457.680743][ T5718] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  457.903768][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.903806][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.903830][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.903874][ T5718] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.903897][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.990321][ T5718] usb 3-1: config 0 descriptor??
[  459.372016][ T5718] usbhid 3-1:0.0: can't add hid device: -71
[  459.372134][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  460.032897][ T5718] usb 3-1: USB disconnect, device number 42
[  460.187380][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  460.377477][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  460.391840][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  460.409971][ T4927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  460.424396][ T4927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  460.840768][ T5718] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  461.342222][ T5718] usb 3-1: Using ep0 maxpacket: 8
[  461.345185][ T5718] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  461.345213][ T5718] usb 3-1: config 0 has no interface number 0
[  461.345255][ T5718] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  461.345279][ T5718] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  461.345305][ T5718] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  461.345332][ T5718] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  461.345374][ T5718] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  461.345397][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.718335][ T5620] Bluetooth: hci2: command tx timeout
[  463.711666][ T5718] usb 3-1: config 0 descriptor??
[  464.044472][ T5718] usb 3-1: can't set config #0, error -71
[  464.097505][ T5718] usb 3-1: USB disconnect, device number 43
[  465.090697][ T5620] Bluetooth: hci2: command tx timeout
[  465.907786][ T5718] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  467.154109][ T5620] Bluetooth: hci2: command tx timeout
[  467.671356][ T5718] usb 3-1: unable to read config index 0 descriptor/start: -71
[  467.671403][ T5718] usb 3-1: can't read configurations, error -71
[  469.230765][ T5620] Bluetooth: hci2: command tx timeout
[  469.821478][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'.
[  469.860719][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'.
[  471.043700][ T7608] netlink: 324 bytes leftover after parsing attributes in process `syz.2.610'.
[  472.400742][ T7115] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  473.619488][ T7115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.619523][ T7115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.619545][ T7115] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  473.619586][ T7115] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  473.619611][ T7115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.699288][ T7115] usb 3-1: config 0 descriptor??
[  474.258898][ T7115] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  474.395558][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.395946][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.455858][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.457686][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.496264][ T6371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.540256][   T38] audit: type=1800 audit(1780143347.397:7): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.611" name="/" dev="sockfs" ino=14157 res=0 errno=0
[  474.698308][   T32] usb 3-1: USB disconnect, device number 46
[  474.804651][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.804979][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.805372][ T7540] bridge_slave_0: entered allmulticast mode
[  474.851838][ T7540] bridge_slave_0: entered promiscuous mode
[  474.965569][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.966020][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.966365][ T7540] bridge_slave_1: entered allmulticast mode
[  474.997410][ T7540] bridge_slave_1: entered promiscuous mode
[  475.171302][ T6371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.281144][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.304930][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.305240][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.305459][ T7531] bridge_slave_0: entered allmulticast mode
[  475.307857][ T7531] bridge_slave_0: entered promiscuous mode
[  475.326448][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.350703][   T32] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  475.357161][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.357746][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.358371][ T7531] bridge_slave_1: entered allmulticast mode
[  475.381983][ T7531] bridge_slave_1: entered promiscuous mode
[  475.520784][   T32] usb 3-1: device descriptor read/64, error -71
[  475.555965][ T6371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.701426][ T7540] team0: Port device team_slave_0 added
[  475.755693][ T7531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.771157][   T32] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  475.775528][ T7540] team0: Port device team_slave_1 added
[  475.910740][   T32] usb 3-1: device descriptor read/64, error -71
[  475.939058][ T6371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.995795][ T7531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.021009][   T32] usb usb3-port1: attempt power cycle
[  476.280349][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.280366][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.280391][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.337980][ T7531] team0: Port device team_slave_0 added
[  476.355441][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.355456][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.355480][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.359843][ T7531] team0: Port device team_slave_1 added
[  476.410904][   T32] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  476.431809][   T32] usb 3-1: device descriptor read/8, error -71
[  476.524877][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.524895][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.524925][ T7531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.592916][ T7531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.592933][ T7531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.592956][ T7531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.680772][   T32] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  476.701451][   T32] usb 3-1: device descriptor read/8, error -71
[  476.717639][ T7540] hsr_slave_0: entered promiscuous mode
[  476.719419][ T7540] hsr_slave_1: entered promiscuous mode
[  476.731562][ T7540] debugfs: 'hsr0' already exists in 'hsr'
[  476.731641][ T7540] Cannot create hsr debugfs directory
[  476.811107][   T32] usb usb3-port1: unable to enumerate USB device
[  476.858642][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.868151][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.873002][ T7577] bridge_slave_0: entered allmulticast mode
[  476.886242][ T7577] bridge_slave_0: entered promiscuous mode
[  476.918522][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.918828][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.919119][ T7577] bridge_slave_1: entered allmulticast mode
[  476.926148][ T7577] bridge_slave_1: entered promiscuous mode
[  477.067226][ T7531] hsr_slave_0: entered promiscuous mode
[  477.077083][ T7531] hsr_slave_1: entered promiscuous mode
[  477.078483][ T7531] debugfs: 'hsr0' already exists in 'hsr'
[  477.078504][ T7531] Cannot create hsr debugfs directory
[  477.234830][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.299925][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.484885][ T7577] team0: Port device team_slave_0 added
[  477.522122][ T7577] team0: Port device team_slave_1 added
[  477.776257][ T6371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.907716][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.907734][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.907764][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.978562][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.978575][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.978596][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.459624][ T6371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.004909][ T6371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.113107][ T5763] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  479.265641][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.265667][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.265684][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  479.265715][ T5763] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  479.265731][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.329617][ T5763] usb 3-1: config 0 descriptor??
[  479.383943][ T7577] hsr_slave_0: entered promiscuous mode
[  479.395194][ T7577] hsr_slave_1: entered promiscuous mode
[  479.434063][ T7577] debugfs: 'hsr0' already exists in 'hsr'
[  479.434147][ T7577] Cannot create hsr debugfs directory
[  479.462902][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[  479.702061][ T6371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.787213][ T5763] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  479.952638][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.953133][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.044445][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.045110][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.126262][ T7540] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  480.149522][   T38] audit: type=1800 audit(1780143353.007:8): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.618" name="/" dev="sockfs" ino=15655 res=0 errno=0
[  480.275935][ T7540] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  480.288256][ T5758] usb 3-1: USB disconnect, device number 51
[  480.383986][ T7540] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  480.551301][ T7540] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  480.607089][ T7540] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  480.666074][ T7540] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  480.760793][ T5758] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  480.859900][ T7540] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  480.894123][ T7540] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  480.950283][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.950319][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.950342][ T5758] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  480.950388][ T5758] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  480.950412][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.016040][ T5758] usb 3-1: config 0 descriptor??
[  481.376902][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[  481.493666][ T5758] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  481.663232][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.669988][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.795109][   T38] audit: type=1800 audit(1780143354.647:9): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.619" name="/" dev="sockfs" ino=16632 res=0 errno=0
[  481.902112][ T5758] usb 3-1: USB disconnect, device number 52
[  481.978758][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  482.032530][ T6371] bridge_slave_1: left allmulticast mode
[  482.032566][ T6371] bridge_slave_1: left promiscuous mode
[  482.032842][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.222175][ T6371] bridge_slave_0: left allmulticast mode
[  482.222200][ T6371] bridge_slave_0: left promiscuous mode
[  482.222446][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.441096][ T6371] bridge_slave_1: left allmulticast mode
[  482.441123][ T6371] bridge_slave_1: left promiscuous mode
[  482.441308][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.541963][ T6371] bridge_slave_0: left allmulticast mode
[  482.541992][ T6371] bridge_slave_0: left promiscuous mode
[  482.542231][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.740907][ T6371] bridge_slave_1: left allmulticast mode
[  482.740935][ T6371] bridge_slave_1: left promiscuous mode
[  482.741125][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.841808][ T6371] bridge_slave_0: left allmulticast mode
[  482.841834][ T6371] bridge_slave_0: left promiscuous mode
[  482.842018][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.040855][ T6371] bridge_slave_1: left allmulticast mode
[  483.040883][ T6371] bridge_slave_1: left promiscuous mode
[  483.041769][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.142460][ T6371] bridge_slave_0: left allmulticast mode
[  483.142488][ T6371] bridge_slave_0: left promiscuous mode
[  483.142666][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.082870][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.143506][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.165328][ T6371] bond0 (unregistering): Released all slaves
[  484.772714][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.855050][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.875273][ T6371] bond0 (unregistering): Released all slaves
[  485.101515][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.221674][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.282533][ T6371] bond0 (unregistering): Released all slaves
[  485.541429][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.621424][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.682904][ T6371] bond0 (unregistering): Released all slaves
[  485.705129][ T7531] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  485.789537][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  485.860760][ T7531] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  485.904163][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[  485.998033][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  486.103348][ T7531] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  486.166541][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  486.188831][ T7531] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  486.266107][ T7531] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  486.479473][ T6371] tipc: Disabling bearer <udp:s>
[  486.490237][ T6371] tipc: Left network mode
[  486.661396][   T37] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  486.860038][   T37] usb 3-1: config 0 has no interfaces?
[  486.885652][   T37] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  486.885684][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.885705][   T37] usb 3-1: Product: syz
[  486.885719][   T37] usb 3-1: Manufacturer: syz
[  486.885734][   T37] usb 3-1: SerialNumber: syz
[  486.954401][   T37] usb 3-1: config 0 descriptor??
[  487.051682][ T7577] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  487.158077][ T7577] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.215700][ T7577] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  487.280206][ T7577] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.298801][ T7577] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  487.351342][ T7577] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  487.399584][ T7577] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  487.419244][ T7115] usb 3-1: USB disconnect, device number 53
[  487.497590][ T7577] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.038311][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[  488.041519][ T7738] netlink: 128 bytes leftover after parsing attributes in process `syz.2.626'.
[  488.042092][ T7738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.131344][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.392901][ T7540] 8021q: adding VLAN 0 to HW filter on device team0
[  488.442708][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.443055][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.570898][   T37] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  488.795272][   T37] usb 3-1: unable to get BOS descriptor or descriptor too short
[  488.800290][   T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.800315][   T37] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  488.800381][   T37] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  488.855744][   T37] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  488.855775][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.855795][   T37] usb 3-1: Product: syz
[  488.855814][   T37] usb 3-1: Manufacturer: syz
[  488.855825][   T37] usb 3-1: SerialNumber: syz
[  489.259548][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4
[  489.488191][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.488498][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.578408][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.600334][   T37] usb 3-1: USB disconnect, device number 54
[  489.766519][ T7762] udevd[7762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  490.029093][   T37] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  490.168612][ T7531] 8021q: adding VLAN 0 to HW filter on device team0
[  490.200749][   T37] usb 3-1: Using ep0 maxpacket: 32
[  490.217895][   T37] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  490.217922][   T37] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32
[  490.217943][   T37] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249
[  490.217993][   T37] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  490.218017][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.286558][   T37] gspca_main: nw80x-2.14.0 probing 055f:d001
[  490.800262][   T37] gspca_nw80x: reg_w err -110
[  490.800445][   T37] nw80x 3-1:2.0: probe with driver nw80x failed with error -110
[  491.053001][ T5758] usb 3-1: USB disconnect, device number 55
[  491.132784][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  491.231939][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5
[  491.256762][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.281166][ T6355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  491.346854][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0
[  491.423783][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.423977][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.675794][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  491.711350][ T6371] hsr_slave_0: left promiscuous mode
[  491.730887][ T6371] hsr_slave_1: left promiscuous mode
[  491.732023][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.738908][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.779787][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.779808][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.970939][ T6371] hsr_slave_0: left promiscuous mode
[  492.010987][ T6371] hsr_slave_1: left promiscuous mode
[  492.013723][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.013744][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.053870][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.053901][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.171005][ T5763] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  492.191092][ T6371] hsr_slave_0: left promiscuous mode
[  492.210768][ T6371] hsr_slave_1: left promiscuous mode
[  492.211870][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.251953][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.321103][ T5763] usb 3-1: Using ep0 maxpacket: 16
[  492.323959][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.323993][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.324016][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  492.324051][ T5763] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  492.324067][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.329290][ T5763] usb 3-1: config 0 descriptor??
[  492.436860][ T6371] veth1_macvtap: left promiscuous mode
[  492.437078][ T6371] veth0_macvtap: left promiscuous mode
[  492.437433][ T6371] veth1_vlan: left promiscuous mode
[  492.437720][ T6371] veth0_vlan: left promiscuous mode
[  492.571440][ T6371] veth1_macvtap: left promiscuous mode
[  492.571529][ T6371] veth0_macvtap: left promiscuous mode
[  492.571739][ T6371] veth1_vlan: left allmulticast mode
[  492.572043][ T6371] veth1_vlan: left promiscuous mode
[  492.572236][ T6371] veth0_vlan: left promiscuous mode
[  492.775100][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775145][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775555][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775586][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775614][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775643][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775670][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775701][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775739][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.775766][ T5763] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  492.979900][ T5763] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  492.979948][ T5763] microsoft 0003:045E:07DA.000B: no inputs found
[  492.979963][ T5763] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  493.171794][   T32] usb 3-1: USB disconnect, device number 56
[  493.922255][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  493.981337][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  494.611876][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  494.671511][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  494.901392][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  494.954112][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  495.484075][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  495.534511][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  495.857067][ T7577] 8021q: adding VLAN 0 to HW filter on device team0
[  495.986996][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.987153][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.089843][ T7808] Bluetooth: MGMT ver 1.23
[  496.093930][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.094071][ T6355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.429431][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.919809][ T4927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  498.000086][ T4927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  498.018909][ T4927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  498.020056][ T4927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  498.058251][ T4927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  498.181364][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6
[  498.377680][ T7854] netlink: 324 bytes leftover after parsing attributes in process `syz.2.642'.
[  499.220189][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  499.269033][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  499.287547][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  499.289116][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  499.290007][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  500.121901][ T5620] Bluetooth: hci3: command tx timeout
[  500.189605][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.660842][ T5758] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  500.748227][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7
[  500.790709][ T5758] usb 3-1: device descriptor read/64, error -71
[  501.036337][ T5758] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  501.177078][ T5758] usb 3-1: device descriptor read/64, error -71
[  501.178925][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  501.178997][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  501.285282][ T5758] usb usb3-port1: attempt power cycle
[  501.390821][ T5620] Bluetooth: hci0: command tx timeout
[  501.622642][ T5758] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  501.641189][ T5758] usb 3-1: device descriptor read/8, error -71
[  501.880648][ T5758] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  501.904500][ T5758] usb 3-1: device descriptor read/8, error -71
[  502.010987][ T5758] usb usb3-port1: unable to enumerate USB device
[  502.103141][ T7577] veth0_vlan: entered promiscuous mode
[  502.193765][ T5620] Bluetooth: hci3: command tx timeout
[  502.260138][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8
[  502.424857][ T7577] veth1_vlan: entered promiscuous mode
[  502.464830][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.465238][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.465551][ T7845] bridge_slave_0: entered allmulticast mode
[  502.493551][ T7845] bridge_slave_0: entered promiscuous mode
[  502.529362][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.538186][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.538481][ T7845] bridge_slave_1: entered allmulticast mode
[  502.563516][ T7845] bridge_slave_1: entered promiscuous mode
[  502.712457][ T7845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.748453][ T7845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.935891][ T7845] team0: Port device team_slave_0 added
[  502.939145][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.939551][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.939853][ T7870] bridge_slave_0: entered allmulticast mode
[  502.949939][ T7870] bridge_slave_0: entered promiscuous mode
[  502.984565][ T7845] team0: Port device team_slave_1 added
[  502.985962][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.986380][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.986688][ T7870] bridge_slave_1: entered allmulticast mode
[  503.022821][ T7870] bridge_slave_1: entered promiscuous mode
[  503.337305][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.337324][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.337348][ T7845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.400942][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.424704][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.424721][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.424755][ T7845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.471187][ T5620] Bluetooth: hci0: command tx timeout
[  503.575395][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.710065][ T7577] veth0_macvtap: entered promiscuous mode
[  503.785813][ T7870] team0: Port device team_slave_0 added
[  503.876122][ T7870] team0: Port device team_slave_1 added
[  503.881349][ T7577] veth1_macvtap: entered promiscuous mode
[  504.118603][ T7845] hsr_slave_0: entered promiscuous mode
[  504.126909][ T7845] hsr_slave_1: entered promiscuous mode
[  504.128588][ T7845] debugfs: 'hsr0' already exists in 'hsr'
[  504.128607][ T7845] Cannot create hsr debugfs directory
[  504.207097][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.207115][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.207143][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.263652][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.263669][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.263698][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.271855][ T5620] Bluetooth: hci3: command tx timeout
[  505.199047][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.239881][ T7870] hsr_slave_0: entered promiscuous mode
[  505.247648][ T7870] hsr_slave_1: entered promiscuous mode
[  505.248949][ T7870] debugfs: 'hsr0' already exists in 'hsr'
[  505.248974][ T7870] Cannot create hsr debugfs directory
[  505.550996][ T5620] Bluetooth: hci0: command tx timeout
[  505.597359][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.082443][ T6369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.124471][ T6369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.171259][ T6369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.178173][ T6369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.350980][ T5620] Bluetooth: hci3: command tx timeout
[  507.630855][ T5620] Bluetooth: hci0: command tx timeout
[  508.147023][ T6373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.147045][ T6373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.442130][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.442152][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.671901][   T32] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  508.800870][ T6371] bridge_slave_1: left allmulticast mode
[  508.800906][ T6371] bridge_slave_1: left promiscuous mode
[  508.809864][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.831159][   T32] usb 3-1: Using ep0 maxpacket: 8
[  508.840546][   T32] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  508.840571][   T32] usb 3-1: config 179 has no interface number 0
[  508.840610][   T32] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  508.840636][   T32] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  508.840663][   T32] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  508.840689][   T32] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  508.840715][   T32] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  508.840757][   T32] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  508.840780][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.947483][ T8001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  509.084756][ T6371] bridge_slave_0: left allmulticast mode
[  509.084787][ T6371] bridge_slave_0: left promiscuous mode
[  509.085010][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.433154][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  509.433217][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  509.433530][ T5717] usb 3-1: USB disconnect, device number 61
[  509.477173][ T6371] bridge_slave_1: left allmulticast mode
[  509.477204][ T6371] bridge_slave_1: left promiscuous mode
[  509.477413][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.524465][   T32] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14
[  509.701799][ T6371] bridge_slave_0: left allmulticast mode
[  509.701825][ T6371] bridge_slave_0: left promiscuous mode
[  509.702004][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.651457][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.731587][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  510.755098][ T6371] bond0 (unregistering): Released all slaves
[  511.232396][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.311392][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.333749][ T6371] bond0 (unregistering): Released all slaves
[  511.390454][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9
[  512.309082][ T8044] netlink: 272 bytes leftover after parsing attributes in process `syz.2.666'.
[  512.980683][ T6371] hsr_slave_0: left promiscuous mode
[  513.020848][ T6371] hsr_slave_1: left promiscuous mode
[  513.023273][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.061596][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.430762][ T6371] hsr_slave_0: left promiscuous mode
[  513.450732][ T6371] hsr_slave_1: left promiscuous mode
[  513.451566][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  513.491425][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.216782][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  514.271773][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  514.772557][ T6371] team0 (unregistering): Port device team_slave_1 removed
[  514.821411][ T6371] team0 (unregistering): Port device team_slave_0 removed
[  515.036868][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10
[  516.525726][ T8098] netlink: 272 bytes leftover after parsing attributes in process `syz.5.674'.
[  516.786639][ T7845] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  516.895843][ T7845] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  516.903832][ T7845] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  517.027446][ T7845] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  517.047252][ T7845] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  517.200362][ T7845] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  517.255598][ T7845] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  517.315300][ T7845] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  517.719043][ T7870] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  517.761938][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  517.764715][ T7870] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  517.851552][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  517.859467][ T7870] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  517.935219][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  517.938261][ T7870] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  517.987295][ T7870] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  518.150324][ T7845] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.213209][ T7845] 8021q: adding VLAN 0 to HW filter on device team0
[  518.244477][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.244630][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.349877][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.350043][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.461353][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.553471][ T7870] 8021q: adding VLAN 0 to HW filter on device team0
[  518.591288][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.592148][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.658560][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.667982][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.463220][ T7845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.934471][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.174991][ T7845] veth0_vlan: entered promiscuous mode
[  520.233164][ T7845] veth1_vlan: entered promiscuous mode
[  520.434214][ T7845] veth0_macvtap: entered promiscuous mode
[  520.469703][ T7845] veth1_macvtap: entered promiscuous mode
[  520.611332][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.669387][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.716922][ T1443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.719231][ T1443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.719457][ T1443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.720251][ T1443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.720400][ T7870] veth0_vlan: entered promiscuous mode
[  520.851793][ T7870] veth1_vlan: entered promiscuous mode
[  521.744964][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.744985][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.795288][ T7870] veth0_macvtap: entered promiscuous mode
[  521.838348][ T7870] veth1_macvtap: entered promiscuous mode
[  521.959375][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.959396][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.036400][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.159253][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.218461][ T6373] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.220229][ T6373] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.241771][ T6373] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.245930][ T6373] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.252137][ T6369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.252160][ T6369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.567754][ T1443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.567776][ T1443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.621622][ T5691] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  524.783215][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.783240][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.783257][ T5691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  524.783288][ T5691] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  524.783305][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.036432][ T8276] netlink: 272 bytes leftover after parsing attributes in process `syz.4.682'.
[  525.332387][ T5691] usb 7-1: config 0 descriptor??
[  525.347762][ T8282] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  525.493649][ T8289] random: crng reseeded on system resumption
[  526.013945][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.016038][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.037424][ T5691] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  526.114174][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.114680][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.212607][ T7115] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  526.375916][ T7115] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.375974][ T7115] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.381116][ T7115] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  526.381148][ T7115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.381171][ T7115] usb 3-1: Product: syz
[  526.381188][ T7115] usb 3-1: Manufacturer: syz
[  526.381205][ T7115] usb 3-1: SerialNumber: syz
[  526.840241][ T7115] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  526.869493][   T38] audit: type=1800 audit(1780143399.727:10): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.599" name="/" dev="sockfs" ino=19873 res=0 errno=0
[  526.984921][ T5718] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  527.005753][ T7115] usb 3-1: USB disconnect, device number 62
[  527.151185][ T5718] usb 6-1: Using ep0 maxpacket: 8
[  527.170744][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  527.170779][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  527.170801][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  527.170824][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200
[  527.170862][ T5718] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  527.170885][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.179745][ T5718] usb 6-1: config 0 descriptor??
[  527.181255][ T8306] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  527.655551][   T37] usb 6-1: USB disconnect, device number 2
[  527.693432][ T5620] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  527.953993][ T5758] IPVS: starting estimator thread 0...
[  528.113402][ T8319] IPVS: using max 8 ests per chain, 19200 per kthread
[  528.181027][ T5691] usb 7-1: USB disconnect, device number 2
[  528.873925][ T8337] netlink: 32 bytes leftover after parsing attributes in process `syz.6.700'.
[  529.289545][ T8346] Set syz1 is full, maxelem 2 reached
[  530.162272][ T8349] ==================================================================
[  530.162344][ T8349] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380
[  530.162397][ T8349] Read of size 8 at addr ffff8880382335e8 by task syz.6.702/8349
[  530.162410][ T8349] 
[  530.162429][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.6.702 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  530.162454][ T8349] Tainted: [L]=SOFTLOCKUP
[  530.162459][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  530.162471][ T8349] Call Trace:
[  530.162480][ T8349]  <TASK>
[  530.162521][ T8349]  dump_stack_lvl+0xe8/0x150
[  530.162573][ T8349]  print_address_description+0x55/0x1e0
[  530.162600][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.162635][ T8349]  print_report+0x58/0x70
[  530.162652][ T8349]  kasan_report+0x117/0x150
[  530.162672][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.162697][ T8349]  clear_tfile_check_list+0x114/0x380
[  530.162719][ T8349]  ? clear_tfile_check_list+0x22/0x380
[  530.162741][ T8349]  do_epoll_ctl_file+0x8fd/0xed0
[  530.162761][ T8349]  ? do_epoll_ctl_file+0xac3/0xed0
[  530.162782][ T8349]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  530.162803][ T8349]  ? __fget_files+0x3a6/0x420
[  530.162822][ T8349]  ? __fget_files+0x2a/0x420
[  530.162842][ T8349]  __se_sys_epoll_ctl+0x14e/0x210
[  530.162862][ T8349]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  530.162886][ T8349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.162901][ T8349]  do_syscall_64+0x174/0x580
[  530.162923][ T8349]  ? trace_irq_disable+0x3b/0x140
[  530.162939][ T8349]  ? clear_bhb_loop+0x40/0x90
[  530.162956][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.162970][ T8349] RIP: 0033:0x7fc60991ce59
[  530.163003][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.163035][ T8349] RSP: 002b:00007fc607711028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  530.163065][ T8349] RAX: ffffffffffffffda RBX: 00007fc609b96270 RCX: 00007fc60991ce59
[  530.163077][ T8349] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  530.163088][ T8349] RBP: 00007fc6099b2d6f R08: 0000000000000000 R09: 0000000000000000
[  530.163098][ T8349] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000
[  530.163107][ T8349] R13: 00007fc609b96308 R14: 00007fc609b96270 R15: 00007ffe06012178
[  530.163125][ T8349]  </TASK>
[  530.163130][ T8349] 
[  530.163133][ T8349] Allocated by task 8347:
[  530.163141][ T8349]  kasan_save_track+0x3e/0x80
[  530.163156][ T8349]  __kasan_slab_alloc+0x6c/0x80
[  530.163171][ T8349]  kmem_cache_alloc_noprof+0x33b/0x680
[  530.163187][ T8349]  ep_insert+0x512/0x1820
[  530.163214][ T8349]  do_epoll_ctl_file+0x8bb/0xed0
[  530.163230][ T8349]  __se_sys_epoll_ctl+0x14e/0x210
[  530.163271][ T8349]  do_syscall_64+0x174/0x580
[  530.163299][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.163311][ T8349] 
[  530.163314][ T8349] Freed by task 8340:
[  530.163320][ T8349]  kasan_save_track+0x3e/0x80
[  530.163333][ T8349]  kasan_save_free_info+0x46/0x50
[  530.163353][ T8349]  __kasan_slab_free+0x5c/0x80
[  530.163367][ T8349]  kmem_cache_free+0x187/0x6c0
[  530.163382][ T8349]  eventpoll_release_file+0xc2/0x240
[  530.163398][ T8349]  __fput+0x83c/0xa70
[  530.163411][ T8349]  task_work_run+0x1d9/0x270
[  530.163426][ T8349]  exit_to_user_mode_loop+0x193/0x680
[  530.163440][ T8349]  do_syscall_64+0x353/0x580
[  530.163459][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.163471][ T8349] 
[  530.163474][ T8349] The buggy address belongs to the object at ffff8880382335e0
[  530.163474][ T8349]  which belongs to the cache ep_head of size 16
[  530.163492][ T8349] The buggy address is located 8 bytes inside of
[  530.163492][ T8349]  freed 16-byte region [ffff8880382335e0, ffff8880382335f0)
[  530.163543][ T8349] 
[  530.163547][ T8349] The buggy address belongs to the physical page:
[  530.163575][ T8349] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038233560 pfn:0x38233
[  530.163593][ T8349] memcg:ffff88801169d801
[  530.163599][ T8349] flags: 0x80000000000200(workingset|node=0|zone=1)
[  530.163615][ T8349] page_type: f5(slab)
[  530.163629][ T8349] raw: 0080000000000200 ffff888140af1640 ffff888020ed2088 ffffea0000ff0f90
[  530.163643][ T8349] raw: ffff888038233560 0000000800800019 00000000f5000000 ffff88801169d801
[  530.163651][ T8349] page dumped because: kasan: bad access detected
[  530.163658][ T8349] page_owner tracks the page as allocated
[  530.163663][ T8349] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4980, tgid 4980 (udevd), ts 36056167142, free_ts 32377699127
[  530.163689][ T8349]  post_alloc_hook+0x1f9/0x250
[  530.163705][ T8349]  get_page_from_freelist+0x265c/0x26e0
[  530.163724][ T8349]  __alloc_frozen_pages_noprof+0x18d/0x380
[  530.163742][ T8349]  allocate_slab+0x74/0x5e0
[  530.163762][ T8349]  refill_objects+0x33c/0x3d0
[  530.163782][ T8349]  __pcs_replace_empty_main+0x373/0x720
[  530.163803][ T8349]  kmem_cache_alloc_noprof+0x433/0x680
[  530.163818][ T8349]  ep_insert+0x512/0x1820
[  530.163835][ T8349]  do_epoll_ctl_file+0x8bb/0xed0
[  530.163852][ T8349]  __se_sys_epoll_ctl+0x14e/0x210
[  530.163870][ T8349]  do_syscall_64+0x174/0x580
[  530.163890][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.163904][ T8349] page last free pid 4985 tgid 4985 stack trace:
[  530.163911][ T8349]  __free_frozen_pages+0x10af/0x1190
[  530.163927][ T8349]  __slab_free+0x252/0x2a0
[  530.163943][ T8349]  qlist_free_all+0x99/0x100
[  530.163956][ T8349]  kasan_quarantine_reduce+0x148/0x160
[  530.163970][ T8349]  __kasan_slab_alloc+0x22/0x80
[  530.163985][ T8349]  kmem_cache_alloc_noprof+0x33b/0x680
[  530.164000][ T8349]  do_getname+0x2e/0x250
[  530.164013][ T8349]  do_sys_openat2+0xcc/0x200
[  530.164027][ T8349]  __x64_sys_openat+0x138/0x170
[  530.164042][ T8349]  do_syscall_64+0x174/0x580
[  530.164062][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.164075][ T8349] 
[  530.164078][ T8349] Memory state around the buggy address:
[  530.164088][ T8349]  ffff888038233480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  530.164098][ T8349]  ffff888038233500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  530.164108][ T8349] >ffff888038233580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  530.164115][ T8349]                                                           ^
[  530.164124][ T8349]  ffff888038233600: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc
[  530.164133][ T8349]  ffff888038233680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  530.164141][ T8349] ==================================================================
[  530.166581][ T8349] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  530.166613][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.6.702 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  530.166646][ T8349] Tainted: [L]=SOFTLOCKUP
[  530.166655][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  530.166670][ T8349] Call Trace:
[  530.166679][ T8349]  <TASK>
[  530.166690][ T8349]  vpanic+0x56c/0xa60
[  530.166738][ T8349]  ? __pfx_vpanic+0x10/0x10
[  530.166768][ T8349]  ? __pfx___schedule+0x10/0x10
[  530.166803][ T8349]  panic+0xc5/0xd0
[  530.166831][ T8349]  ? __pfx_panic+0x10/0x10
[  530.166860][ T8349]  ? preempt_schedule_thunk+0x16/0x40
[  530.166897][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.166929][ T8349]  check_panic_on_warn+0x89/0xb0
[  530.166955][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.166985][ T8349]  end_report+0x73/0x170
[  530.167009][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.167038][ T8349]  kasan_report+0x128/0x150
[  530.167064][ T8349]  ? clear_tfile_check_list+0x114/0x380
[  530.167099][ T8349]  clear_tfile_check_list+0x114/0x380
[  530.167130][ T8349]  ? clear_tfile_check_list+0x22/0x380
[  530.167162][ T8349]  do_epoll_ctl_file+0x8fd/0xed0
[  530.167192][ T8349]  ? do_epoll_ctl_file+0xac3/0xed0
[  530.167222][ T8349]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  530.167251][ T8349]  ? __fget_files+0x3a6/0x420
[  530.167275][ T8349]  ? __fget_files+0x2a/0x420
[  530.167304][ T8349]  __se_sys_epoll_ctl+0x14e/0x210
[  530.167334][ T8349]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  530.167368][ T8349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.167391][ T8349]  do_syscall_64+0x174/0x580
[  530.167423][ T8349]  ? trace_irq_disable+0x3b/0x140
[  530.167446][ T8349]  ? clear_bhb_loop+0x40/0x90
[  530.167472][ T8349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.167494][ T8349] RIP: 0033:0x7fc60991ce59
[  530.167512][ T8349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.167531][ T8349] RSP: 002b:00007fc607711028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  530.167554][ T8349] RAX: ffffffffffffffda RBX: 00007fc609b96270 RCX: 00007fc60991ce59
[  530.167570][ T8349] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  530.167591][ T8349] RBP: 00007fc6099b2d6f R08: 0000000000000000 R09: 0000000000000000
[  530.167605][ T8349] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000
[  530.167619][ T8349] R13: 00007fc609b96308 R14: 00007fc609b96270 R15: 00007ffe06012178
[  530.167642][ T8349]  </TASK>
[  530.168262][ T8349] Kernel Offset: disabled