last executing test programs:

10m39.928647565s ago: executing program 2 (id=299):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0)

10m39.833047709s ago: executing program 2 (id=300):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x3}, 'syz1\x00', 0x33})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)

10m39.602676654s ago: executing program 2 (id=303):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m39.243609724s ago: executing program 2 (id=306):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

10m38.259681563s ago: executing program 2 (id=316):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
capget(0x0, 0x0)

10m37.699691071s ago: executing program 2 (id=322):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

10m37.092359598s ago: executing program 32 (id=322):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m4.061910604s ago: executing program 0 (id=2718):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00')
pread64(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x3)
preadv(r4, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000280)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
timerfd_create(0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x1000, r9})

58.771730206s ago: executing program 0 (id=2724):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setattr(0x0, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
set_mempolicy(0x3, 0x0, 0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x3, 0x24e}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x200004, 0x2, 0x0, 0x0, 0x11, 0x1, {0x2, 0x0, 0x86, '\x00', 0x0, 0x9}})
io_uring_enter(r2, 0x2000, 0xfffffffd, 0xb, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000)
recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r7, 0x1)
getpgid(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804)

52.059666989s ago: executing program 0 (id=2738):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0x1d, 0x1, 0x212, &(0x7f0000000480), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx={@void, @value, @void, @void, r7}}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6tnl0\x00', <r8=>0x0, 0x29, 0x3, 0x7, 0x6, 0x3a, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x20, 0x10001}})
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r11, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@ifindex=r8, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, @void, @value=r11, @void, @void, r7}, 0x20)
keyctl$revoke(0x3, r6)
syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000003240)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x7, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x1, 0x2b, 0x8a90, 0xd1, 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x400, 0x6, 0x6, 0x2, 0x5, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0x2, 0xfb, {0x7, 0x25, 0x1, 0x8, 0xd, 0x95}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x4, 0x1, {0x7, 0x25, 0x1, 0x8, 0xa, 0x1000}}}}}}}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0})

48.966260543s ago: executing program 0 (id=2746):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1)
syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x60e0c2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x92)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
statx(0xffffffffffffffff, 0x0, 0x400, 0x7ff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x30)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x6, 0x8, 0x5, 0x4}, 0x10)
r4 = socket(0xa, 0x1, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x39, {0x20009, 0xd, 0x2040000, 0x7, 0xfffffffd, 0xfffffffe}})
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b", 0xe, 0xfffffffffffffffd)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

47.499907285s ago: executing program 0 (id=2751):
syz_usb_connect(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4078)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000600)=0x17f)
sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xa0}}, 0x0)
socket(0x10, 0x803, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = openat$dsp1(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000002c0))
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRESHEX=r8, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="ed10e28bf874b7d62b89e3e432eaa5bc119a9717e4bf554dd63c6c82c8c89ebd613c34564dc81dc5724ac8ac312896a1b6be9e62a7f5a1e59221ff3ab6511e5d510c9bcf0a202de8a52f21455a57e3689ffeefcbec42638c9839c55df042e1900fc40a9c16f90935615516acbbfc0562a654144c69e0d452901a9151b2bcab639b9d7e78c5fbfe02fb670743677e5779c1f048d823d833cf521a34d63ceb1eae3e4442349729da8b5035c753905052ad051a19511fc5f14dabf43edf0f9bcc"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
write$9p(r10, &(0x7f00000003c0)="bfb4f522a4a454350c947c18bf43c70af4f38f8e41c61b88b66043dc7dd29afcdf9dbce0d7b7c3eac9c9c1b5c7c2f00c9370e4380d684fa441816da981c446a2a6c05d4a6a92835f83ee0a573e6bc9942fa8c98b74e1ff98129d517d9c247a0c5a401901eb4d498ea66369d34116dfcc94d2bf87f027c0a32241197f0fc0888d4484cc721b066c45fdabd614b17e166f1b528864e3420ae1ebbd1b4cd229452b3800d18dc0c4e71cee2d296bd94d0f299091c9ee46709352395326a49a3681fe3ea4a66826", 0xc5)
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
sendto$inet6(r6, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0xfffff220}, 0x1c)
r11 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r11, 0x541b, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000300)=0x1, 0x50)

44.784652828s ago: executing program 0 (id=2757):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x22, r6})
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x3)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r7, &(0x7f0000000040)="c292dfb4929a", 0x6, 0x7, 0x0, 0x2}])
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000040)={0x3, 0x2d11})
ptrace(0x10, r2)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$unix(0x1, 0x5, 0x0)
shutdown(r5, 0x1)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
lseek(r8, 0x10000000005, 0x0)
r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
close(r9)
ptrace$pokeuser(0x6, r2, 0x100, 0x41d9fda7)
setpriority(0x1, r2, 0x7)
sendfile(r1, r0, 0x0, 0x200000)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5})

43.819737168s ago: executing program 33 (id=2757):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x22, r6})
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x3)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r7, &(0x7f0000000040)="c292dfb4929a", 0x6, 0x7, 0x0, 0x2}])
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000040)={0x3, 0x2d11})
ptrace(0x10, r2)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$unix(0x1, 0x5, 0x0)
shutdown(r5, 0x1)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x0, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
lseek(r8, 0x10000000005, 0x0)
r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
close(r9)
ptrace$pokeuser(0x6, r2, 0x100, 0x41d9fda7)
setpriority(0x1, r2, 0x7)
sendfile(r1, r0, 0x0, 0x200000)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x5})

22.885716217s ago: executing program 4 (id=2803):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
r6 = openat$cgroup_pressure(r5, &(0x7f0000000580)='io.pressure\x00', 0x2, 0x0)
read(r6, &(0x7f0000000140)=""/247, 0xf7)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x34, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x40, 0x7, 0x22, "239e9a77e436f288ba0275f9c295621fd42dfca15187b435fd8614ef46f1cf58e492"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$uac3(r9, 0x0, 0x0)
bind$packet(r8, &(0x7f0000000440)={0x11, 0x300, r7, 0x0}, 0x14)
write(r8, &(0x7f0000000480)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e)
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
r10 = io_uring_setup(0x5412, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)

18.436229064s ago: executing program 4 (id=2814):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a44000000090a01040000000000000000000000090900010073797a3000006219bbe4bdca85977a30000000000c00098008000140000000050c00104000000000000000041c0000000b0a01040000000000000000020000d9afda0b074311ee04140000001100010000000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
socket(0x0, 0x2, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
openat(0xffffffffffffffff, 0x0, 0x0, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x40, 0xf6, 0xf, 0x6}, {0x0, 0xd, 0x1}, {0x6, 0x3, 0x3}, {0x8, 0x8, 0x3, 0xe6}, {0x6, 0x6, 0x5, 0x5}, {0x6, 0x3, 0xad, 0x8}, {0x5, 0x4, 0x7, 0x9}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newchain={0x1348, 0x64, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0xfff1}, {0xffe0, 0x8}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x130c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_ACT={0x278, 0x4, [@m_ctinfo={0x88, 0x9, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x14, 0x6, "8646cb1c37a84609bd040e89eaeb0119"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xe7, 0x6, "6ce78b758b8c2e48627429d8aeeb98418dc9761141fb823f9148f7a2677702e882af525e29b413601b9b396d3076d8fcddf1734161f38efeed6f47d8e26059283ff649b426bb31030ffce2b9b592dd60ebbabf9826ef221b609578011cec78b3a764e5f0f140b8964969836bff84af52f24f96dc7cd09d0191929e427add0b5ee60e33969a7643965567b9161f6a150c744e030afe9acee7263a59f04efc85caac14402d9d4583756a5c0da59521e2292fa1c4208eaee348835afbbece25e328d9d991a29acbbe50be0d6b66a7fb5ec6df97371fe4abc535820bd254969e404535ba52"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0xd8, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/fuse\x00'}, @TCA_DEF_DATA={0x10, 0x3, '/dev/nullb0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xca7e, 0x800, 0x6, 0xfffffffa, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '+\x00'}, @TCA_DEF_DATA={0x17, 0x3, '/dev/snd/controlC#\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}]}, {0x49, 0x6, "2cf5112fadb304bfbc8327e7f2d17df647a639da360064e3895b2f3b6e951e795d263fa121b9680f844bfee74685b1748afea5ba90970c56657fa2365a6c57407a40c4806a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_POLICE={0x54, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x440800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x6, 0x0, 0x6, {0x8, 0x2, 0x5, 0x0, 0x0, 0x7449}, {0x3, 0x1, 0x7fff, 0x420, 0x8, 0x7fffffff}, 0x8b, 0x0, 0x80000001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_FW_POLICE={0x102c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x86dc, 0x6, 0x1, 0x40, 0x9, 0xe, 0x3, 0x6, 0x43e3, 0x8, 0xfffffff8, 0x3, 0x0, 0xa59, 0x744, 0x1b, 0x10001, 0x3, 0x10001, 0x3, 0x9d, 0x6, 0x3, 0x3, 0xffffffff, 0x4, 0x0, 0x5, 0xb, 0x90d, 0x7, 0xffff8001, 0x0, 0x3, 0xfffffff9, 0x2e5, 0xfffff800, 0x8, 0x1000, 0xffffff81, 0x600000, 0xebb7, 0x2, 0x62, 0xef, 0x2, 0xc27, 0x0, 0x1, 0xbfea, 0x8, 0x9, 0x6, 0x9, 0xaca, 0x8, 0xabe3, 0x6, 0xf, 0x1, 0x1, 0x2, 0x3, 0x3, 0x3, 0x0, 0x7, 0x2, 0x4e000, 0x47c842ac, 0x6, 0x7, 0x6, 0x9, 0x4, 0x0, 0x2, 0x7af, 0xc, 0x1, 0x5, 0x6, 0x9, 0xf, 0x320, 0x3, 0x38000000, 0x2000000, 0x100, 0x3, 0x100, 0x5f18dfac, 0x7fff, 0x1, 0x4, 0x80000001, 0xc, 0x80000000, 0x0, 0xff, 0xe, 0x4, 0x200, 0x1, 0xb81, 0x0, 0x1, 0x4, 0x5, 0xfff, 0x0, 0x5, 0xac, 0x8d2, 0x1, 0x5, 0x9, 0xd, 0x50d, 0x3, 0x7, 0x4fc, 0xf, 0xc, 0x3, 0x5276, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x8001, 0x80, 0x7, 0x10001, 0x7, 0x5, 0x2, 0xc5, 0x100, 0x8, 0x200, 0x5, 0x2, 0x8, 0x6, 0xf, 0x7f, 0x7fff, 0x0, 0x200, 0x200, 0xffffff37, 0x7, 0x5435, 0x6, 0xffff, 0x4, 0x7b8a, 0x200, 0x9, 0x0, 0x5, 0xffffffff, 0x2, 0x10001, 0x5, 0x7fff, 0x0, 0x7, 0x3, 0x80, 0x5, 0x800, 0x7, 0x6, 0x22a9400, 0x400, 0x4, 0x5, 0x1, 0x400, 0xffffffff, 0x9e1d, 0x800, 0xfffff800, 0x7, 0x3, 0x7, 0x2, 0x7, 0x0, 0x7fff, 0x7fff, 0x8, 0x3, 0x14, 0x8, 0x4, 0x7fffffff, 0x8, 0x800, 0x9, 0x4, 0x1, 0x9, 0x7, 0x1000000, 0xff, 0xffff, 0x2, 0x101, 0x7, 0xed, 0x2, 0xd, 0x40, 0xd22, 0x4, 0x9, 0x5a, 0x5, 0x6, 0x9, 0x100, 0x6, 0x6, 0x4, 0x4, 0x2, 0x7, 0xcda9, 0x1, 0x8, 0x9, 0x487c, 0x1a5, 0x2, 0x3, 0x401, 0x7fff, 0x4, 0x10001, 0x40, 0x857, 0xffff8000, 0x3, 0x9, 0x4e4, 0x8001, 0x8, 0x86c4, 0xfffffffb, 0x6, 0xfffffff7, 0xffffbd21]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x9e9, 0xfffffff7, 0x62b0, 0x8000, 0x6, 0xfffffffe, 0x7, 0x9, 0x2, 0x7, 0x8, 0x7d4, 0x7ff, 0xf, 0x8, 0xe46c, 0x6, 0xb, 0x1, 0x5, 0x1, 0x0, 0x0, 0xb, 0x7, 0x8, 0x6, 0x1, 0x1f, 0x3, 0xb1e87b8e, 0xfffffffd, 0x0, 0x6, 0x7, 0x7000, 0x1, 0x4, 0x4, 0x6, 0x6, 0x6, 0x8, 0x100, 0x101, 0x761, 0x80, 0xc, 0x8, 0xffff0000, 0x117a4b5, 0x6, 0x9, 0x10000, 0x10001, 0xff, 0x2, 0xba, 0x3, 0x1, 0x80000000, 0x9, 0xfffffff9, 0x10000, 0x7fff, 0x80, 0x4fb9, 0x80000000, 0x3, 0x180, 0x5, 0x6, 0x3, 0x6, 0x9, 0x2ba, 0x3, 0x400, 0xb, 0x8, 0x3, 0x7, 0x3, 0xeb6, 0xfa67, 0x0, 0x3, 0x80000001, 0xff, 0x3, 0x9, 0xecfc, 0x5, 0x20080, 0x80000001, 0x5ea, 0xf9b, 0x0, 0x7f, 0x6, 0x0, 0xf51, 0x65, 0x7, 0x9, 0x8, 0x2, 0x0, 0x3, 0x40, 0x8610, 0x4, 0x4, 0x6, 0x8f, 0x9, 0x4, 0x7fffffff, 0xc637, 0x1, 0x0, 0x2, 0x3c0df6a2, 0x90f4, 0xfffffffe, 0x10, 0x6, 0x101, 0x723b1e13, 0x3, 0x1, 0x0, 0x7, 0x0, 0x8, 0x9, 0x0, 0xce8, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0xe, 0x7, 0x80000001, 0xc8b, 0x0, 0x6, 0x800, 0x6, 0x1ff, 0x80000001, 0x6, 0x3e, 0x5, 0x5e, 0xdf, 0x80000000, 0x4, 0x9, 0xffffffff, 0x0, 0x3, 0xc6, 0x6, 0xac27, 0x7fff, 0x8000, 0x10000, 0x0, 0x9, 0x663, 0x4, 0x0, 0x7, 0x0, 0x800, 0x4, 0x6, 0x89f, 0x3, 0x60, 0x4, 0x3, 0x763a, 0x401, 0xe9, 0x507, 0x5, 0x4, 0x200, 0x5, 0xffff3c0a, 0x9, 0xffffd442, 0x80000001, 0x4f8, 0x2, 0x8, 0x7ff, 0x5, 0x401, 0x0, 0x2, 0xfffffffd, 0x3, 0x6, 0x7, 0xe5, 0x8b9f, 0x30f9c33c, 0x2, 0x6, 0x0, 0x400, 0x2, 0x2, 0x3b1a0b35, 0x9a5, 0x3, 0x3, 0x2b, 0x3, 0x0, 0x4, 0xce41, 0x8, 0x100, 0x2, 0x8, 0x9efd, 0xd, 0x4, 0x6, 0xb, 0x3, 0x7, 0xc, 0x9, 0x7, 0x10000, 0xb, 0x4, 0xfffffff7, 0x80, 0x3, 0x800, 0xacb9, 0x2, 0x7, 0x2, 0xf69, 0x739]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffff1, 0x80, 0x8000, 0x2, 0x431de11, 0x8, 0x5, 0x7, 0x7fffffff, 0x8, 0x0, 0x4, 0x3, 0x1, 0x7, 0xfffffff5, 0xc683, 0x7, 0xfffffffa, 0xff, 0x3, 0x7, 0xa8e, 0x66ff, 0x10000, 0x80000000, 0x6, 0x100, 0x0, 0x1, 0xe9, 0xe, 0x1, 0xa, 0x7, 0x0, 0x5, 0x9, 0x4, 0x8, 0x3, 0x280, 0x6, 0x7, 0x10001, 0x200, 0x80000001, 0x3, 0x3, 0x3, 0xfffff1fb, 0x42f, 0x6, 0x3, 0x8, 0x9, 0x101, 0x5, 0x9, 0xfffff73b, 0x1, 0xe9b, 0x80000001, 0x401, 0x5, 0x80, 0xfffff9a4, 0x8, 0xa, 0xff, 0xffffff80, 0x200, 0x2, 0xd65f, 0x0, 0x6, 0x0, 0x7, 0xc, 0x1, 0xd287, 0x400, 0xc, 0x3, 0x9, 0x8, 0xffd, 0x6a85, 0x9, 0xfffffffc, 0x9, 0x6, 0x7, 0x8000, 0xffffffff, 0xffffff46, 0xe, 0xff, 0x1f, 0x5, 0x4, 0xc8, 0x7, 0x8977, 0x4187, 0x9, 0x1, 0x6, 0x10000, 0x101, 0x3, 0x7, 0x80000001, 0x0, 0x83fc, 0x0, 0x7fff, 0x80, 0x8001, 0x7, 0x1, 0x7fff, 0x0, 0x4, 0xd, 0x2, 0x3, 0x80000000, 0x3, 0x1, 0xc83, 0x7, 0x5, 0x2, 0x7, 0x7, 0x4, 0xefc, 0x8, 0x4, 0x5, 0x3a7f8b17, 0x9, 0xd7a0, 0x53a, 0x800, 0x6, 0x8, 0x7, 0x8, 0x4, 0x9, 0x2, 0xa, 0xd2, 0x3, 0x9, 0x2, 0x0, 0x400, 0x8, 0x6, 0x1, 0x400, 0xffff, 0x8, 0xa, 0x6, 0x40, 0x1, 0x3, 0xfffffffd, 0xfff, 0x5, 0x7, 0xfffff4ab, 0x7, 0x5, 0x101, 0x8, 0x6, 0x400, 0x2, 0x7169, 0x5, 0x4, 0xfff, 0x1c567c4e, 0x8, 0x3, 0x86d6, 0x7, 0x2c7f, 0x649e, 0x0, 0x0, 0x3, 0x4, 0x60d7f0b5, 0x5d, 0xe482, 0x7fff, 0x2, 0x0, 0x5, 0x8bf, 0x80000001, 0x3, 0x1, 0x4, 0xf156, 0xfff, 0x5, 0x10, 0x53f, 0x8, 0xe9, 0x0, 0x259e, 0x0, 0x1, 0x2, 0x100, 0x800, 0x80000001, 0x8, 0x9, 0x5, 0x1, 0x10000, 0xfff, 0x1, 0x1000, 0x5, 0x7, 0x10, 0xc, 0x4, 0xc8, 0x9, 0x4, 0xffffffff, 0xe56d, 0x9, 0x4, 0x10, 0xa0000000, 0x6, 0x3, 0x800, 0x64ae, 0xe, 0x2, 0x81, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0xfd2, 0xfffff001, 0x10000, 0x6, 0x4, 0x5, 0x9, 0x5, 0x2, 0x6, 0x1000, 0x1, 0x2, 0xfffffffb, 0x9, 0x7, 0x1c, 0x0, 0x3, 0xffffffff, 0x0, 0x8001, 0x5, 0x1, 0x8, 0x3ddb, 0x3, 0x8, 0xff, 0xfa, 0x10001, 0x9, 0xa, 0xd7, 0xfffffffd, 0x2000, 0x5, 0x81, 0xc6, 0x800, 0x8, 0x100, 0x9, 0x2, 0x4, 0x0, 0x800, 0x4, 0xec9, 0xde77, 0x6, 0x5, 0x3, 0x5, 0x9, 0xc1, 0xbe, 0xc, 0x4, 0x7, 0xff, 0x6, 0x3f3, 0x1, 0x0, 0xd7, 0x5f7, 0x0, 0xe87, 0x5, 0xaff, 0x6, 0x3, 0x5, 0x3, 0x8, 0x9, 0x1, 0x5, 0x0, 0x7f, 0x5, 0x4, 0x1, 0x48000000, 0x5, 0x10, 0x4, 0x2, 0xbb0, 0x2, 0x3, 0x1, 0x1, 0x209, 0x5bdc0000, 0x3ff, 0x0, 0x10000, 0x7, 0x10000, 0xd65, 0x6, 0x5, 0x3, 0x8, 0x3d, 0x3106, 0x101, 0x6c, 0x1, 0x101, 0x3, 0x3ce, 0x5, 0x5, 0x0, 0x2, 0x800, 0x4, 0x8, 0x1, 0x5, 0xbc3, 0xcead, 0xc6d, 0x7, 0xba, 0xe54, 0x24c9, 0x1, 0xfbd, 0x6, 0x7, 0x80000000, 0x8001, 0x9, 0x80000, 0x9, 0x480000, 0xc1, 0xa0c, 0x0, 0x7, 0x7, 0x1, 0xff, 0x4, 0x3, 0x40, 0x8, 0x9, 0x9, 0x7fffffff, 0x7fffffff, 0x4, 0x800, 0x20, 0x7, 0x0, 0x846, 0xc, 0x9, 0x40, 0xb2, 0x2, 0x0, 0x4, 0x3, 0x4, 0x18, 0x1, 0x8001, 0x9, 0x0, 0x1000, 0x7, 0x0, 0xe4, 0x4, 0x3, 0x9, 0xff, 0x6, 0x2, 0x4, 0x2, 0x2, 0x0, 0x800, 0x1, 0x3, 0x5, 0x0, 0x3, 0x8, 0x4, 0x8, 0x0, 0x0, 0xfffffff9, 0x3, 0x0, 0x6, 0x2, 0x7, 0x3, 0x3ff, 0x1, 0xffff, 0x0, 0x3, 0x5, 0x2cf, 0xa3, 0x7fffffff, 0x60, 0x9, 0x401, 0x10001, 0x7, 0x129, 0x6, 0x5, 0x0, 0x6, 0x3, 0x8, 0x7fff, 0x90000000, 0x2, 0x101, 0x9, 0x3, 0x1, 0xba1, 0x4, 0x0, 0x7fffffff, 0x4, 0xec, 0x10000, 0x2, 0x8, 0x1, 0x4, 0xff, 0x680a, 0x100, 0x1ff, 0x8, 0xe70, 0x8, 0x8, 0x9]}]}, @TCA_FW_MASK={0x8, 0x5, 0xfbc}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x1348}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

14.655899627s ago: executing program 4 (id=2822):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x43]}, 0xfffffffffffffe8e)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200})
ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000280))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001900210027bd70000000000e8020100200eb380cd4000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4})
r8 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x22041, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000b00)=0x88f)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x800000, 0x9, {0x0, 0x2710}, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, <r9=>0xffffffffffffffff})
getpid()
r10 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003e00010000000800000000000100000004000000100001800c00108004000b800400e30c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4000094)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94)

10.985970687s ago: executing program 4 (id=2831):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1)
syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x60e0c2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x92)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
statx(0xffffffffffffffff, 0x0, 0x400, 0x7ff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x30)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req={0x6, 0x8, 0x5, 0x4}, 0x10)
r4 = socket(0xa, 0x1, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b", 0xe, 0xfffffffffffffffd)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

6.07790738s ago: executing program 6 (id=2841):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r1 = dup(0xffffffffffffffff)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r5, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"})
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x5139c2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000040}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xfffffffc})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0xc1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r7 = userfaultfd(0x80001)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200010a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x6, 0x15c, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x5, 0x2000040, 0x10000000, 0x2, 0x80000000, 0x2, 0x800, 0x3, 0x3, 0x4, 0x400006, 0x6, 0xff, 0x8, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1fb, 0xfffffff8, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x3, 0xbe, 0xfff, 0xa, 0x7, 0x81, 0x81, 0x6, 0x2, 0x80000001, 0x69e, 0xb, 0x7000003, 0x1, 0x8, 0xd, 0x7, 0x0, 0x1, 0x3, 0x6, 0xffff, 0x6, 0x8, 0x7fb, 0x4, 0xc9, 0xfd, 0x6, 0x3, 0xfff, 0x58a0, 0x1, 0x7, 0x895, 0x20008, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x13, 0x3, 0x800003, 0xfffffffa, 0x3, 0x3, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0x1, 0x4, 0x1ff, 0x7, 0xfffffffe, 0x7, 0x6, 0x3]})
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0xfffffff8, 0x1f}, 0xfffffffc})

5.535225713s ago: executing program 4 (id=2842):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1d, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfff7, 0x68, 0x6, 0x3, 0x4, 0x0, @private=0xa010102, @loopback}}}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x92}}], 0x20)
listen(r2, 0x7)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000180)={'team_slave_0\x00', 0x5})
socket$netlink(0x10, 0x3, 0xc)
syz_clone3(&(0x7f0000001f40)={0x230000800, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340), {0x23}, &(0x7f0000000380)=""/152, 0x98, &(0x7f0000000ec0)=""/4096, &(0x7f0000001ec0)}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c)
syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501e640"], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020000000000000007bdc566a138986ebba08c09f585dd7a757a2de4a15bd09894aa4b57a3d420adf42af86219ca6741b4974199dd0ebb2bff9b06867da13c0e1fcff58243c87da064dabe1dbceb9c991621c613c29caf5952f66aaae546a24758b717"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r8 = dup(r0)
r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r9, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000e80)={0x0, 0x30}, 0x0, 0x0})
write$UHID_INPUT(r8, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff5}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x77664ae6e6584829)
r10 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x84, 0x1f, &(0x7f0000000100), 0x129)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.48843803s ago: executing program 5 (id=2843):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0xa}, [@alu={0x4, 0x0, 0x9, 0x0, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

5.358955552s ago: executing program 5 (id=2844):
statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ed, 0x0)

5.28908332s ago: executing program 3 (id=2845):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x15)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
read$qrtrtun(r5, &(0x7f0000000100)=""/139, 0x8b)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='net/kcm\x00', &(0x7f0000000400)='GPL\x00', 0x0)
write$dsp(r5, &(0x7f0000000700)="5cba91a4200ad733eea4724043f29440775593b88f1cf34fd683cbfdb9b4b783e1445ef062b60f0000000000000000000000557b8cae0792a8b3d38b992c76e0ae9d719caab22346d261ecb4ce8141ea84172e1d4fcdb9225d3f6e59a3c683bca31faaea2d48c5aab637ed5d6a4b2227e30bf4094bc1bf6c611246a392fcbf7373d4335a760e3b5565cd913ec1172ab4", 0x90)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
write(r2, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e167", 0x75)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe4)
r8 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

5.112902378s ago: executing program 5 (id=2846):
socket$inet6(0xa, 0x1, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pwritev(r2, &(0x7f0000000800)=[{&(0x7f0000000680)="aec4754e91f6", 0x6}, {0x0}], 0x2, 0x1000, 0x9)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1)
write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000ba00000000000000feefffff"], 0xc8)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e62, @multicast1}, 0xffffffffffffffdb)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
listen(r6, 0x5)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
shutdown(r7, 0x1)
close(r6)
r8 = socket$inet(0x2, 0x1, 0x0)
utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8, 0x6})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000080)={'erspan0\x00'})

4.334165745s ago: executing program 5 (id=2847):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc5}, 0x80)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x20)
socket$netlink(0x10, 0x3, 0x0)
shutdown(r4, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="90cd7525d485c666b79d03c458898a33d8bcb129868a14cf4cf7ac094ecc7df1833482b1cdb399b21e8ddcea7e52b8b40ce6a2d6240f58d12eebe22bb0b74e1d8a072b430dbc3ae5ecc6a83aa6003080893cc119153e830897f3d55cdfe29f0361dd9228312151b5e7ca813c66ff5826353d452f06e26b6f41ada323bcaba792c74c8a199559a028332bb7de9a337bae5e441e91280f276b39e3b6003d05ee286d750cd5de5aee3cef4c0bdd1ecb11", 0xaf, r5)
ioctl(r7, 0x8b27, &(0x7f0000000040))
keyctl$KEYCTL_MOVE(0x1e, r6, r5, r6, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r8, r8, 0x0, 0x200000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80000, 0x100)

4.140438277s ago: executing program 3 (id=2848):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002b9000/0x3000)=nil, 0x3000, &(0x7f0000000040)=']]@\\+:)-#\x00')

3.832520096s ago: executing program 3 (id=2849):
syz_usb_connect$midi(0x1, 0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000083512100040000102030109021800010118100409040001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

3.154423768s ago: executing program 6 (id=2850):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xa, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x7, 0x2, 0xa, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.982471541s ago: executing program 6 (id=2851):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x2000000000003, 0x2)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000640)={0x50, 0x0, r4, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r5}])
syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d)
syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r9, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x45}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c850}, 0x8000)
dup3(r5, r3, 0x80000)

2.867327966s ago: executing program 4 (id=2852):
syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6d7d3583e5811e4008da56117918ec584e8aa00a8459f05a579dd6516753a8097ccb0b400"/203], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r3}, 0x38)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3600)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0})
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000})
mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x6)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

2.772739896s ago: executing program 1 (id=2853):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000c50000006900000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00, 0x20}, 0x94)

2.627342982s ago: executing program 1 (id=2854):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x4041080)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)

2.470892385s ago: executing program 6 (id=2855):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0xd, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xc2}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r3)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400))
r5 = getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd70007ddbdf2500000000", @ANYRES32=r0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a00000000000c0023003709"], 0x48}, 0x1, 0x0, 0x0, 0x10000010}, 0x20040844)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x22, 0x6, "c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x6, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x504}}, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x4})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)

2.38521329s ago: executing program 1 (id=2856):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x2, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94)

2.262752736s ago: executing program 1 (id=2857):
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406307312040000102030109026e00030101c010080b000201013007090400000001013000"], 0x0)

2.249202962s ago: executing program 3 (id=2858):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3da}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1009, &(0x7f0000004180)=""/4105, 0x40f00}, 0x94)

2.095947517s ago: executing program 5 (id=2859):
syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})

2.007731403s ago: executing program 3 (id=2860):
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)

1.785329223s ago: executing program 3 (id=2861):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000004740)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000b80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r2=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {0x0, <r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x3, "00f166f2ef2abf"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000e0c80)={<r7=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000e0e80)={<r8=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000e1e80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r7, r8}], 0x8, "b66b0e9f1dd0e6"})
r9 = syz_open_dev$dri(&(0x7f0000000180), 0xa, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x1, 0x403, 0x8})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x1, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0x2, 0x4, 0x8, 0x7, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c0003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000006c040000000000006d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffc303000041000000b7000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd5ef5681b36a30c6471a4bc4d82e4fee5bef7af9aa0d7f300c095199fe3ff31e9883a2a98e64e39732c9cc00eec363e4a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe3326a404000000000000006d31cb467600ade7ee63e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62f84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49e7e383dc5049036b98fb685123b2731514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59601894183a0f95b72df859d5cf25a02a9f6ebb047b96d338666590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c0200a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d14017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744dccc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19fa367256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08c63b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a9245f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31cb6b9ce97f03ca91a01ba2c60ca99e8ebc15ece1ff1675767999d146aef7799738b292fd64bbca48568304b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c655a22d490300800a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d99000518a130f9d01c4b45294fbba468df3e1b393cb4e62e7545010000000000000094bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58588cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d9953243e2bb42b197cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1021829f1a57d3f18f4edaeb5d37918e6fddc785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db6019037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2b8100000000000000f5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f3366bca2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6e0e0d383ffce01881a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c71411c928d8b894d9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f24b72edcff33a40c1b791830ac2478734c8dc0c40ad4072c08dbcfbbb8dc071897d76a410dab1dc7d2aa509b9ef21ac2b2389c2aac7048addbac53cedba2c20fbe18acd5b546102e3e3af296681b0db7ce9b878024bcd504480de0a65df48ae310633c9f7accfa2a5527af3df8cdbc2817cae9b6ff827ea5f850a23fc0f46650d99eaad66119015ef840893fc3348d4fbce1b6b6906bcddff1e825d923b64fd383b1e776a566f2b702f2f4a464ecf3408ed97ffe8b1c813713f1712c48be3ebe6ad7c24c7467c7474c589a08f883a5e7bda74fc0c741eb2bc408a4a9b0b66bec9bee32d7f620942258a7f5cafa2e3bd7b2197c3c77df319e494ef46dfc4eae680d219536f0aa8b1ba291eb2abb0adf8154e00000000000000000000000000000000000046cb14b77f134ec5857b2e683fe6d5cccbf99508e8c8404863528c24da235923f18de34b48e89125a20a216836f6bcd1efc1dd74ac924d8ecfa6fe5f40d4ee50"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x20000080)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x3, 0x0, 0x200f, 0x0, 0x2, 0x4, 0x7, 0x1})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40400d4)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x10}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840)
r13 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x509000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r14 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r15 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$inet(r15, 0x0, &(0x7f0000000b00))
ioctl$BLKSECDISCARD(r13, 0x127d, &(0x7f00000000c0)=0x401)
ioctl$IOC_PR_RESERVE(r13, 0x401070c9, &(0x7f0000000200)={0x6, 0x6, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

626.26298ms ago: executing program 1 (id=2862):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x1c}, 0x20)

547.836818ms ago: executing program 5 (id=2863):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = dup3(r1, r0, 0x80000)
ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)=0x40)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0xffffffffffffff61)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0x80010000, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x9, 0x3, 0x9, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000000, 0x24, 0xd, 0x1, 0x0, 0x40, 0xe661, 0xffffffa8, 0x7, 0x2, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x14, 0x1, 0x7, 0x201, 0x3e, 0x2, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0x1, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1b4858bd, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x1000, 0x0, 0x4, 0xb, 0x4001, 0x9, 0x8, 0xb, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0xb, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93693, 0x6, 0x103], [0x3, 0xa, 0x6, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3ea, 0xb, 0x203, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0xffff7fff, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x7, 0x5, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x2, 0x101, 0x10000, 0x40004, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x2, 0xfffffff8, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x13, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0x3, 0x7, 0x400001, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
r6 = eventfd(0x5f0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000300)={0x0, 0x3000, 0x8})
ioctl$KVM_IOEVENTFD(r5, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r6})
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80000001}, 0x1c)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x800, 0x5)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x6, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xfffffe5e}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40)

380.517848ms ago: executing program 1 (id=2864):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f90009050300000000000009050968c4"], 0x0)

200.596307ms ago: executing program 6 (id=2865):
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @val=@iter={&(0x7f0000000140)=@cgroup={0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x18)

0s ago: executing program 6 (id=2866):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6)

kernel console output (not intermixed with test programs):

t: type=1326 audit(1790204520.733:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  637.901894][   T31] audit: type=1326 audit(1790204520.733:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  637.902693][   T31] audit: type=1326 audit(1790204520.733:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71375ab code=0x7ffc0000
[  637.903253][   T31] audit: type=1326 audit(1790204520.733:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  637.904070][   T31] audit: type=1326 audit(1790204520.733:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  637.904363][   T31] audit: type=1326 audit(1790204520.733:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  637.906115][   T31] audit: type=1326 audit(1790204520.743:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.5.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000
[  638.098035][T12774] imon:send_packet: packet tx failed (-71)
[  638.114722][T12774] imon 1-1:155.0: panel buttons/knobs setup failed
[  638.114746][T12774] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  638.114759][T12774]  (id 0x00)
[  638.117000][ T5668] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  638.155605][ T5668] ftdi_sio 4-1:0.0: device disconnected
[  638.314822][T12774] rc_core: IR keymap rc-imon-pad not found
[  638.314845][T12774] Registered IR keymap rc-empty
[  638.314931][T12774] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  638.314948][T12774] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  638.315421][T12774] imon:send_packet: packet tx failed (-71)
[  638.335817][ T5782] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  638.335976][T12774] imon 1-1:155.0: remote input dev register failed
[  638.336253][T12774] imon 1-1:155.0: imon_init_intf0: rc device setup failed
[  638.407589][T12774] imon 1-1:155.0: unable to initialize intf0, err 0
[  638.407614][T12774] imon:imon_probe: failed to initialize context!
[  638.407627][T12774] imon 1-1:155.0: unable to register, err -19
[  638.411458][T12774] usb 1-1: USB disconnect, device number 47
[  638.514750][ T5782] usb 6-1: Using ep0 maxpacket: 32
[  638.517798][ T5782] usb 6-1: unable to get BOS descriptor or descriptor too short
[  638.517855][ T5782] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  638.518882][ T5782] usb 6-1: config 0 has no interfaces?
[  638.547203][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.547222][ T5782] usb 6-1: Product: syz
[  638.547231][ T5782] usb 6-1: Manufacturer: syz
[  638.547239][ T5782] usb 6-1: SerialNumber: syz
[  638.581233][ T5782] usb 6-1: config 0 descriptor??
[  638.711796][T14758] kAFS: unable to lookup cell ''
[  638.754378][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'.
[  638.842751][T14751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.843248][T14751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.888736][ T5704] usb 6-1: USB disconnect, device number 48
[  639.167930][T12748] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  639.315052][T12748] usb 2-1: Using ep0 maxpacket: 16
[  639.316535][T12748] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  639.319520][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 167, changing to 11
[  639.319552][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 41299, setting to 1024
[  639.327568][T12748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.327594][T12748] usb 2-1: Product: syz
[  639.327607][T12748] usb 2-1: Manufacturer: syz
[  639.327619][T12748] usb 2-1: SerialNumber: syz
[  639.342724][T12748] usb 2-1: config 0 descriptor??
[  639.344984][ T5704] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  639.360197][T12748] hub 2-1:0.0: bad descriptor, ignoring hub
[  639.360225][T12748] hub 2-1:0.0: probe with driver hub failed with error -5
[  639.371394][T12748] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  639.497724][ T5704] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 0.00
[  639.500031][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.500083][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  639.500099][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.500111][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  639.500143][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.509991][ T5704] usb 6-1: config 0 descriptor??
[  639.594006][ T5704] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -12
[  639.899606][ T5704] usbhid 6-1:0.0: can't add hid device: -71
[  639.899718][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  639.939223][ T5704] usb 6-1: USB disconnect, device number 49
[  640.077409][T14758] input: syz1 as /devices/virtual/input/input56
[  640.218562][T12748] usb 2-1: USB disconnect, device number 48
[  640.266121][ T7838] net_ratelimit: 29 callbacks suppressed
[  640.266156][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  640.414914][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  640.525024][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  640.636285][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  640.966703][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  641.284653][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  641.764841][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  641.864742][T14785] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  641.876827][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  642.064764][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  642.175037][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  642.285046][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  642.559267][T14804] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2612'.
[  642.585303][T14804] bridge0: port 2(ip6gretap0) entered disabled state
[  642.705300][ T5704] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  642.857804][ T5704] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  642.862937][ T5704] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  642.862957][ T5704] usb 5-1: config 0 has no interface number 0
[  642.901398][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.901419][ T5704] usb 5-1: Product: syz
[  642.901427][ T5704] usb 5-1: Manufacturer: syz
[  642.901435][ T5704] usb 5-1: SerialNumber: syz
[  642.921745][ T5704] usb 5-1: config 0 descriptor??
[  642.966482][ T5704] usb 5-1: selecting invalid altsetting 1
[  643.047435][ T5704] dvb_ttusb_budget: ttusb_init_controller: error
[  643.047456][ T5704] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  643.295693][ T5704] DVB: Unable to find symbol stv0299_attach()
[  643.414291][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2613'.
[  643.500023][ T5704] DVB: Unable to find symbol tda8083_attach()
[  643.500038][ T5704] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  644.110074][T14819] netlink: 'syz.1.2615': attribute type 21 has an invalid length.
[  644.183164][T14815] bridge2: port 1(veth3) entered blocking state
[  644.188665][T14820] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  644.188690][T14820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  644.188767][T14820] vhci_hcd vhci_hcd.0: Device attached
[  644.216256][T14815] bridge2: port 1(veth3) entered disabled state
[  644.216449][T14815] veth3: entered allmulticast mode
[  644.259205][T14815] veth3: entered promiscuous mode
[  644.288056][   T31] kauditd_printk_skb: 147 callbacks suppressed
[  644.288072][   T31] audit: type=1326 audit(1790204527.123:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.288101][   T31] audit: type=1326 audit(1790204527.123:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.291265][   T31] audit: type=1326 audit(1790204527.123:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.291316][   T31] audit: type=1326 audit(1790204527.123:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.291340][   T31] audit: type=1326 audit(1790204527.123:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.293870][   T31] audit: type=1326 audit(1790204527.123:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.346984][   T31] audit: type=1326 audit(1790204527.183:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.347034][   T31] audit: type=1326 audit(1790204527.183:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.393270][   T31] audit: type=1326 audit(1790204527.223:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.393325][   T31] audit: type=1326 audit(1790204527.223:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14818 comm="syz.1.2615" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000
[  644.434761][T12769] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  644.595227][T14814] bridge2: port 2(veth5) entered blocking state
[  644.595399][T14814] bridge2: port 2(veth5) entered disabled state
[  644.595585][T14814] veth5: entered allmulticast mode
[  644.616718][T14814] veth5: entered promiscuous mode
[  644.880270][T14822] vhci_hcd: connection reset by peer
[  644.892337][   T43] vhci_hcd vhci_hcd.3: stop threads
[  644.892361][   T43] vhci_hcd vhci_hcd.3: release socket
[  644.892442][   T43] vhci_hcd vhci_hcd.3: disconnect device
[  645.293204][ T5668] usb 5-1: USB disconnect, device number 36
[  645.317690][ T1149] net_ratelimit: 15 callbacks suppressed
[  645.317706][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  645.425897][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  645.535653][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  645.582825][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'.
[  645.648429][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  645.682872][T14832] lo: Caught tx_queue_len zero misconfig
[  645.757032][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  645.795030][ T5704] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  645.946157][ T5704] usb 2-1: Using ep0 maxpacket: 16
[  645.947040][ T5704] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  645.952809][ T5704] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  645.952834][ T5704] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  645.952852][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  645.960682][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.960706][ T5704] usb 2-1: Product: syz
[  645.960719][ T5704] usb 2-1: Manufacturer: syz
[  645.960732][ T5704] usb 2-1: SerialNumber: syz
[  646.074530][T14838] program syz.4.2616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  646.184741][ T5668] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  646.357638][ T5668] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  646.359069][ T5668] usb 4-1: config 128 interface 0 has no altsetting 0
[  646.359111][ T5668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.420984][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.439499][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.544958][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  646.588480][ T5704] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  646.656247][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  646.770001][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  646.877777][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  646.887304][ T5704] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  646.905318][ T5704] usb 2-1: USB disconnect, device number 49
[  646.987540][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  647.046921][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.015023][ T5704] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  649.019508][ T5668] usb 4-1: string descriptor 0 read error: -71
[  649.077896][ T5668] usb 4-1: selecting invalid altsetting 3
[  649.077952][ T5668] comedi comedi5: could not set alternate setting 3 in high speed
[  649.077979][ T5668] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  649.141497][ T5668] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22
[  649.145174][ T5668] usb 4-1: USB disconnect, device number 47
[  649.166612][ T5704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  649.167984][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.168014][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.168036][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  649.168121][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.187834][ T5704] usb 1-1: config 0 descriptor??
[  649.557767][T12769] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  649.858015][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'.
[  649.870542][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.872754][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.158625][ T5704] usbhid 1-1:0.0: can't add hid device: -71
[  650.158698][ T5704] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  650.194370][ T5704] usb 1-1: USB disconnect, device number 48
[  650.414803][ T7838] net_ratelimit: 26 callbacks suppressed
[  650.414828][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  650.531892][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  650.639844][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  650.665155][T14883] input: syz0 as /devices/virtual/input/input57
[  650.748610][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  650.865542][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  650.976624][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  651.348445][T14901] syzkaller0: entered promiscuous mode
[  651.348471][T14901] syzkaller0: entered allmulticast mode
[  651.374962][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  651.486176][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  651.494911][T12769] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  651.594753][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  651.644801][T12769] usb 6-1: Using ep0 maxpacket: 32
[  651.650678][T12769] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  651.673408][T12769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.673438][T12769] usb 6-1: Product: syz
[  651.673452][T12769] usb 6-1: Manufacturer: syz
[  651.673465][T12769] usb 6-1: SerialNumber: syz
[  651.700397][T12769] usb 6-1: config 0 descriptor??
[  651.704869][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  651.718446][T12769] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  651.718526][T12769] dvb-usb: bulk message failed: -22 (4/0)
[  651.718536][T12769] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  651.718673][T12769] dvb-usb: bulk message failed: -22 (5/0)
[  651.718681][T12769] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  651.724771][ T5668] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  651.819532][T12769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  651.821163][T12769] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  651.822759][T12769] usb 6-1: media controller created
[  651.876937][ T5668] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  651.884266][T12769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  651.895443][ T5668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.895469][ T5668] usb 2-1: config 0 has no interfaces?
[  651.895500][ T5668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.930526][ T5668] usb 2-1: config 0 descriptor??
[  651.999943][T12769] usb 6-1: selecting invalid altsetting 3
[  651.999966][T12769] ttusb2: set interface to alts=3 failed
[  652.081925][T12769] DVB: Unable to find symbol tda10086_attach()
[  652.083401][T12769] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  652.084314][T12769] dvb-usb: bulk message failed: -22 (4/0)
[  652.084334][T12769] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  652.084514][T12769] dvb-usb: bulk message failed: -22 (5/0)
[  652.084529][T12769] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  652.138799][T12769] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  652.908740][T14914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2631'.
[  654.501398][T14926] block device autoloading is deprecated and will be removed.
[  654.628284][T14928] IPVS: length: 248 != 24
[  654.808786][ T5704] usb 6-1: USB disconnect, device number 50
[  654.919767][ T5704] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  655.077316][T14934] netlink: 'syz.5.2640': attribute type 10 has an invalid length.
[  655.091448][T14934] ipvlan0: entered allmulticast mode
[  655.091469][T14934] veth0_vlan: entered allmulticast mode
[  655.152155][T14934] team0: Device ipvlan0 failed to register rx_handler
[  655.360355][ T5668] usb 2-1: string descriptor 0 read error: -71
[  655.366579][ T5668] usb 2-1: USB disconnect, device number 50
[  655.441095][T14934] bond3: (slave bond_slave_1): Device is not bonding slave
[  655.441113][T14934] bond3: option active_slave: invalid value (bond_slave_1)
[  655.463221][T14939] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  655.469077][T14934] bond3 (unregistering): Released all slaves
[  655.587049][   T59] net_ratelimit: 23 callbacks suppressed
[  655.587067][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  655.696562][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  655.804888][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  655.925856][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  655.985103][ T5704] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  656.041180][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  656.146137][ T5704] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  656.146288][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  656.154310][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  656.193342][ T5704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  656.193363][ T5704] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  656.193394][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.237257][T14945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  656.255342][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  656.376313][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  656.486586][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  656.609077][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  657.667499][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667637][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667701][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667761][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667822][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667879][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667938][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.667998][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.668057][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.668119][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.668177][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.668238][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.668297][ T5616] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  657.910851][ T5623] Bluetooth: hci5: Reading Intel version command failed (-71)
[  657.913962][ T5782] usb 5-1: USB disconnect, device number 37
[  658.781211][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'.
[  658.910888][T14988] lo: left promiscuous mode
[  658.946378][T14988] tunl0: left promiscuous mode
[  658.947185][T14988] gre0: left promiscuous mode
[  658.947475][T14988] gretap0: left promiscuous mode
[  658.970757][T14988] erspan0: left promiscuous mode
[  658.971228][T14988] ip_vti0: left promiscuous mode
[  658.971653][T14988] ip6_vti0: left promiscuous mode
[  659.044381][T14988] sit0: left promiscuous mode
[  659.045022][T14988] ip6tnl0: left promiscuous mode
[  659.045500][T14988] ip6gre0: left promiscuous mode
[  659.045894][T14988] syz_tun: left promiscuous mode
[  659.077311][T14988] bridge0: left promiscuous mode
[  659.077716][T14988] vcan0: left promiscuous mode
[  659.078038][T14988] bond0: left promiscuous mode
[  659.078522][T14988] dummy0: left promiscuous mode
[  659.101776][T14988] nlmon0: left promiscuous mode
[  659.102347][T14988] batadv0: left promiscuous mode
[  659.102957][T14988] vxcan0: left promiscuous mode
[  659.108290][T14988] vxcan1: left promiscuous mode
[  659.108781][T14988] veth0: left promiscuous mode
[  659.129654][T14988] veth1: left promiscuous mode
[  659.135384][T14988] wg0: left promiscuous mode
[  659.135813][T14988] wg1: left promiscuous mode
[  659.136251][T14988] wg2: left promiscuous mode
[  659.149787][T14988] veth0_to_bridge: left promiscuous mode
[  659.178037][T14988] veth1_to_bridge: left promiscuous mode
[  659.183887][T14988] bond_slave_0: left promiscuous mode
[  659.184114][T14988] veth1_to_bond: left promiscuous mode
[  659.184402][T14988] bond_slave_1: left promiscuous mode
[  659.187089][T14988] veth0_to_team: left promiscuous mode
[  659.187586][T14988] team_slave_0: left promiscuous mode
[  659.188012][T14988] veth1_to_team: left promiscuous mode
[  659.190948][T14988] team_slave_1: left promiscuous mode
[  659.191292][T14988] veth0_to_batadv: left promiscuous mode
[  659.191600][T14988] batadv_slave_0: left promiscuous mode
[  659.192838][T14988] veth1_to_batadv: left promiscuous mode
[  659.193184][T14988] batadv_slave_1: left promiscuous mode
[  659.198420][T14988] xfrm0: left promiscuous mode
[  659.198705][T14988] veth0_to_hsr: left promiscuous mode
[  659.199227][T14988] veth1_to_hsr: left promiscuous mode
[  659.217631][T14988] hsr0: left promiscuous mode
[  659.218255][T14988] veth1_virt_wifi: left promiscuous mode
[  659.218700][T14988] veth0_virt_wifi: left promiscuous mode
[  659.229864][T14988] virt_wifi0: left promiscuous mode
[  659.264494][T14981] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2647'.
[  660.625603][   T43] net_ratelimit: 26 callbacks suppressed
[  660.625623][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  660.735746][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  660.845333][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  660.955041][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  661.064992][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  661.175455][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  661.285005][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  661.395070][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  661.507323][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  661.584961][T15007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  661.615229][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  661.925323][   T30] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  662.077357][   T30] usb 4-1: Using ep0 maxpacket: 8
[  662.107759][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  662.107970][   T30] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40
[  662.117560][   T30] usb 4-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config
[  662.117599][   T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  662.134292][   T30] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  662.134316][   T30] usb 4-1: Manufacturer: syz
[  662.414666][T15024] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  662.624223][   T30] usb 4-1: 0:1 : does not exist
[  662.798683][   T30] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  662.825893][   T30] usb 4-1: USB disconnect, device number 48
[  662.883233][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  665.741445][T15048] netlink: 4152 bytes leftover after parsing attributes in process `syz.3.2663'.
[  666.243230][T15051] veth9: entered allmulticast mode
[  666.492789][T15053] bridge6: port 2(veth0_to_bond) entered disabled state
[  666.509173][T15053] veth0_to_bond: left allmulticast mode
[  666.509203][T15053] veth0_to_bond: left promiscuous mode
[  666.509457][T15053] bridge6: port 2(veth0_to_bond) entered disabled state
[  666.604957][   T13] net_ratelimit: 32 callbacks suppressed
[  666.604983][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  666.608392][T15048] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.2663'.
[  666.735564][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  666.846733][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  666.956201][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  666.976182][T12774] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  667.068476][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  667.133555][T12774] usb 1-1: not running at top speed; connect to a high speed hub
[  667.133596][T12774] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[  667.162646][T12774] usb 1-1: config 11 has an invalid interface number: 95 but max is 0
[  667.162742][T12774] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  667.162762][T12774] usb 1-1: config 11 has no interface number 0
[  667.162803][T12774] usb 1-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86
[  667.162829][T12774] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x86 has invalid maxpacket 65535, setting to 64
[  667.162855][T12774] usb 1-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  667.162880][T12774] usb 1-1: config 11 interface 95 has no altsetting 0
[  667.176827][T12774] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  667.176854][T12774] usb 1-1: Manufacturer: syz
[  667.183678][T15066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  667.186227][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  667.299280][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  667.407775][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  667.526449][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  667.549011][ T5782] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  667.607132][ T5782] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  667.649007][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  667.759939][ T5704] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  667.920876][ T5704] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  667.959022][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  667.959083][ T5704] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  668.032619][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.032692][ T5704] usb 5-1: Product: syz
[  668.032754][ T5704] usb 5-1: Manufacturer: syz
[  668.035540][ T5704] usb 5-1: SerialNumber: syz
[  668.081028][T15086] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  668.097970][T15083] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2667'.
[  668.213953][T15087] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2670'.
[  668.464343][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2668'.
[  668.514658][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  668.544635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  669.124654][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  669.150158][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2665'.
[  669.392004][T12774] usb 1-1: USB disconnect, device number 49
[  669.734624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!!
[  670.794633][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  671.003275][ T5704] usb 5-1: USB disconnect, device number 38
[  671.463771][T15097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  671.565676][T12774] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  671.616861][   T61] net_ratelimit: 24 callbacks suppressed
[  671.616887][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  671.726453][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  671.727652][T12774] usb 1-1: Using ep0 maxpacket: 8
[  671.728722][T12774] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  671.732958][T12774] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  671.733015][T12774] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  671.733037][T12774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  671.733059][T12774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  671.733082][T12774] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  671.733124][T12774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.799818][ T5782] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  671.837854][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  671.955740][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  671.975655][ T5782] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  671.979274][ T5782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  671.979327][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.979352][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.979404][ T5782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  671.979445][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.058745][ T5782] usb 4-1: config 0 descriptor??
[  672.082007][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  672.135010][T12774] usb 1-1: GET_CAPABILITIES returned 0
[  672.136114][T12774] usbtmc 1-1:16.0: can't read capabilities
[  672.185790][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  672.298483][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  672.406634][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  672.516812][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  672.580648][ T5782] plantronics 0003:047F:FFFF.0023: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  672.626857][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  673.193337][T15119] fuse: Unknown parameter 'user_id00000000000000000000'
[  673.510257][T15115] bridge7: entered promiscuous mode
[  673.510282][T15115] bridge7: entered allmulticast mode
[  673.539155][T15115] team0: Port device bridge7 added
[  673.541093][T15117] bridge0: port 1(team0) entered blocking state
[  673.542117][T15117] bridge0: port 1(team0) entered disabled state
[  673.542477][T15117] team0: entered allmulticast mode
[  673.542495][T15117] macvlan2: entered allmulticast mode
[  673.542508][T15117] bond3: entered allmulticast mode
[  673.655354][T15117] team0: entered promiscuous mode
[  673.655379][T15117] macvlan2: entered promiscuous mode
[  673.655393][T15117] bond3: entered promiscuous mode
[  673.871359][T15115] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer.
[  673.942244][T12769] usb 1-1: USB disconnect, device number 50
[  674.884838][ T5668] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  674.928898][T12774] usb 4-1: USB disconnect, device number 49
[  675.036641][ T5668] usb 1-1: Using ep0 maxpacket: 32
[  675.037397][ T5668] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  675.039468][ T5668] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  675.039493][ T5668] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.039512][ T5668] usb 1-1: config 0 has no interface number 0
[  675.039554][ T5668] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  675.039576][ T5668] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  675.039601][ T5668] usb 1-1: config 0 interface 184 has no altsetting 0
[  675.086263][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.086313][ T5668] usb 1-1: Product: syz
[  675.086329][ T5668] usb 1-1: Manufacturer: syz
[  675.086343][ T5668] usb 1-1: SerialNumber: syz
[  675.182816][ T5668] usb 1-1: config 0 descriptor??
[  675.194195][ T5668] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  675.194452][ T5668] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22
[  675.375267][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2683'.
[  675.677991][T12769] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  675.845259][T12769] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  675.849367][T15139] bridge3: port 1(veth7) entered blocking state
[  675.849885][T12769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  675.849917][T12769] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  675.849945][T12769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  675.849972][T12769] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  675.850011][T12769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.852021][T15139] bridge3: port 1(veth7) entered disabled state
[  675.852209][T15139] veth7: entered allmulticast mode
[  675.928233][T12769] usb 4-1: config 0 descriptor??
[  675.929478][T15139] veth7: entered promiscuous mode
[  676.298836][T15135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.299334][T15135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.327638][T15135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.328140][T15135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.336100][T12769] hdpvr 4-1:0.0: unexpected answer of status request, len -32
[  676.336142][T12769] hdpvr 4-1:0.0: device init failed
[  676.336338][T12769] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  676.674703][T15139] bridge3: port 2(veth9) entered blocking state
[  676.679372][T15139] bridge3: port 2(veth9) entered disabled state
[  676.680541][T15139] veth9: entered allmulticast mode
[  676.716353][T15139] veth9: entered promiscuous mode
[  676.746189][   T43] net_ratelimit: 25 callbacks suppressed
[  676.746216][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  676.788863][T15145] input: syz0 as /devices/virtual/input/input60
[  676.861581][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  676.965359][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  677.090973][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  677.199422][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  677.315360][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  677.356082][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2685'.
[  678.085914][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  678.184628][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  678.207464][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  678.292176][ T5704] usb 1-1: USB disconnect, device number 51
[  678.328054][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  678.355682][T12748] usb 4-1: USB disconnect, device number 50
[  678.452347][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  678.924622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  679.084328][T15166] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2689'.
[  680.241813][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'.
[  681.085639][T12748] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  681.236675][T12748] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  681.239958][T12748] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.240020][T12748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.240051][T12748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.240077][T12748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  681.240139][T12748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.283405][T12748] usb 6-1: config 0 descriptor??
[  681.564649][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  681.766100][   T61] net_ratelimit: 37 callbacks suppressed
[  681.766127][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  681.875905][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  681.890856][T12748] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  681.988416][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  682.095756][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  682.209252][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  682.315714][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  682.425749][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  682.536875][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  682.622265][T15185] fuse: Unknown parameter 'user_id00000000000000000000'
[  682.645203][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  682.762721][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  683.039316][T15191] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  683.461411][   T31] kauditd_printk_skb: 27 callbacks suppressed
[  683.461464][   T31] audit: type=1326 audit(1790204566.293:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.1.2695" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0
[  683.516233][ T5668] usb 6-1: reset high-speed USB device number 51 using dummy_hcd
[  683.916138][ T5782] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  683.974855][ T5704] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  684.074787][ T5782] usb 2-1: Using ep0 maxpacket: 8
[  684.075785][ T5782] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  684.077405][ T5782] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  684.077436][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  684.077489][ T5782] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  684.077513][ T5782] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  684.077563][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.173163][ T5704] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  684.223950][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.224004][ T5704] usb 1-1: config 0 has no interfaces?
[  684.224052][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.320103][ T5704] usb 1-1: config 0 descriptor??
[  684.381938][ T5782] usb 2-1: GET_CAPABILITIES returned 0
[  684.382020][ T5782] usbtmc 2-1:16.0: can't read capabilities
[  684.714897][ T5782] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  684.743263][T15196] ip6tnl0: Caught tx_queue_len zero misconfig
[  684.811051][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.860532][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.875813][ T5782] usb 5-1: not running at top speed; connect to a high speed hub
[  684.875854][ T5782] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  684.881051][ T5782] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  684.881124][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.962534][ T5782] uvcvideo 5-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  684.962725][ T5782] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[  685.429518][T12774] usb 6-1: USB disconnect, device number 51
[  685.547824][T12748] usb 5-1: USB disconnect, device number 39
[  686.158044][T12774] usb 2-1: USB disconnect, device number 51
[  686.367632][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  686.367697][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  686.984761][   T13] net_ratelimit: 33 callbacks suppressed
[  686.984786][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  687.097526][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  687.112650][ T5704] usb 1-1: string descriptor 0 read error: -71
[  687.130181][ T5704] usb 1-1: USB disconnect, device number 52
[  687.348977][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  687.455888][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  687.565477][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  687.675772][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  687.784913][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  687.895119][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  688.016521][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  688.125010][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  689.334733][T12774] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  689.536251][T12774] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  689.572445][T12774] usb 4-1: config 128 interface 0 has no altsetting 0
[  689.572494][T12774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.019666][T15251] netlink: 'syz.1.2705': attribute type 11 has an invalid length.
[  691.695064][ T5782] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  691.851975][ T5782] usb 1-1: Using ep0 maxpacket: 32
[  691.865144][ T5782] usb 1-1: unable to get BOS descriptor or descriptor too short
[  691.865230][ T5782] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[  691.870809][ T5782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.870937][ T5782] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  691.927054][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.927112][ T5782] usb 1-1: Product: syz
[  691.927128][ T5782] usb 1-1: Manufacturer: syz
[  691.927141][ T5782] usb 1-1: SerialNumber: syz
[  692.097996][ T1149] net_ratelimit: 31 callbacks suppressed
[  692.098056][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  692.206765][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  692.316749][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  692.425286][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  692.544271][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  692.651770][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  692.757804][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  692.870546][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  692.977897][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  693.086176][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  693.439795][T12774] usb 4-1: string descriptor 0 read error: -71
[  693.457505][ T5668] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  693.548200][T12774] usb 4-1: selecting invalid altsetting 3
[  693.548229][T12774] comedi comedi5: could not set alternate setting 3 in high speed
[  693.548245][T12774] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  693.598082][T12774] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22
[  693.620059][T12774] usb 4-1: USB disconnect, device number 51
[  693.635445][ T5668] usb 6-1: Using ep0 maxpacket: 8
[  693.636224][ T5668] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  693.676802][ T5668] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.676832][ T5668] usb 6-1: Product: syz
[  693.676877][ T5668] usb 6-1: Manufacturer: syz
[  693.676891][ T5668] usb 6-1: SerialNumber: syz
[  693.710240][ T5668] usb 6-1: config 0 descriptor??
[  693.776058][ T5668] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  694.685539][ T5668] gspca_sonixj: reg_r err -110
[  694.685695][ T5668] sonixj 6-1:0.0: probe with driver sonixj failed with error -110
[  694.717014][ T5782] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  694.753434][ T5782] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  694.973919][ T5704] usb 6-1: USB disconnect, device number 52
[  695.252184][T15281] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  695.512022][ T5782] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  695.539043][ T5782] usb 1-1: USB disconnect, device number 53
[  695.735634][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  696.154807][ T5782] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  696.306178][ T5782] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  696.326023][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  696.326060][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  696.326084][ T5782] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  696.326127][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.387502][ T5782] usb 6-1: config 0 descriptor??
[  696.401289][ T5782] hub 6-1:0.0: USB hub found
[  696.968301][ T5782] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  697.036469][ T5782] usb 6-1: USB disconnect, device number 53
[  697.185297][   T61] net_ratelimit: 33 callbacks suppressed
[  697.185361][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  697.296951][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  697.404923][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  697.514882][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  697.634783][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  697.753553][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  697.856520][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  697.965874][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  698.000373][T12748] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  698.075784][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  698.147620][T12748] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  698.156865][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  698.156922][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  698.156962][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  698.157022][T12748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  698.191067][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  698.225580][T12748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.225615][T12748] usb 2-1: Product: syz
[  698.225638][T12748] usb 2-1: Manufacturer: syz
[  698.225647][T12748] usb 2-1: SerialNumber: syz
[  698.265168][T12748] usb 2-1: config 0 descriptor??
[  698.545690][T12748] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  700.047354][T15318] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2870834618 (5741669236 ns) > initial count (396924862 ns). Using initial count to start timer.
[  700.354546][ T5704] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  700.403671][   T30] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  700.508175][ T5704] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  700.513057][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  700.513099][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  700.513129][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  700.531482][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.531545][ T5704] usb 1-1: Product: syz
[  700.531579][ T5704] usb 1-1: Manufacturer: syz
[  700.531612][ T5704] usb 1-1: SerialNumber: syz
[  700.591250][ T5704] usb 1-1: config 0 descriptor??
[  700.594304][T15320] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  700.615802][   T30] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  700.626224][   T30] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[  700.626285][   T30] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  700.626322][   T30] usb 5-1: config 4 has no interface number 0
[  700.626419][   T30] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  700.746847][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.746883][   T30] usb 5-1: Product: syz
[  700.746907][   T30] usb 5-1: Manufacturer: syz
[  700.746916][   T30] usb 5-1: SerialNumber: syz
[  701.125092][ T5704] rc_core: IR keymap rc-streamzap not found
[  701.125324][ T5704] Registered IR keymap rc-empty
[  701.127359][ T5704] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  701.134354][ T5704] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input65
[  701.305403][   T30] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  701.371002][   T30] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  701.461903][   T30] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  701.462067][   T30] usb 5-1: media controller created
[  701.520206][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  702.004073][   T30] DVB: Unable to find symbol dib7000p_attach()
[  702.004101][   T30] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  702.249987][T12259] usb 2-1: USB disconnect, device number 52
[  702.448588][   T30] rc_core: IR keymap rc-dib0700-rc5 not found
[  702.448651][   T30] Registered IR keymap rc-empty
[  702.453598][   T30] dvb-usb: could not initialize remote control.
[  702.453625][   T30] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  702.757420][T15312] bridge4: entered promiscuous mode
[  702.757449][T15312] bridge4: entered allmulticast mode
[  702.874073][T15328] dummy0: Caught tx_queue_len zero misconfig
[  702.940307][ T5782] usb 5-1: USB disconnect, device number 40
[  702.977308][ T7838] net_ratelimit: 11 callbacks suppressed
[  702.977331][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  703.009413][ T5782] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  703.085691][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  703.195908][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  703.316551][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  703.426475][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  703.536932][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  703.647703][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  703.856364][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  703.968228][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  704.076339][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  704.933183][T12774] usb 1-1: USB disconnect, device number 54
[  705.532953][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'.
[  705.684778][T12774] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  705.835453][T12774] usb 6-1: Using ep0 maxpacket: 32
[  705.855560][T12774] usb 6-1: unable to get BOS descriptor or descriptor too short
[  705.855618][T12774] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  705.858300][T12774] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  705.858323][T12774] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  705.911149][T12774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.911180][T12774] usb 6-1: Product: syz
[  705.911194][T12774] usb 6-1: Manufacturer: syz
[  705.911209][T12774] usb 6-1: SerialNumber: syz
[  706.029069][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  706.242196][T15352] tipc: Resetting bearer <eth:syzkaller0>
[  706.242243][T15352] batman_adv: batadv0: Interface deactivated: syzkaller0
[  706.249535][T15352] syzkaller0: entered allmulticast mode
[  706.318990][T15352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.319500][T15352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.402431][T12774] usb 6-1: USB disconnect, device number 54
[  706.700277][T15364] program syz.3.2727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  706.744163][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2727'.
[  708.037277][   T59] net_ratelimit: 24 callbacks suppressed
[  708.037304][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  708.147230][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  708.202418][T15385] random: crng reseeded on system resumption
[  708.275128][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  708.275737][   T30] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  708.387667][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  708.427537][   T30] usb 2-1: Using ep0 maxpacket: 8
[  708.435166][   T30] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  708.438400][   T30] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  708.438426][   T30] usb 2-1: config 0 has no interface number 0
[  708.438468][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.450765][   T30] usb 2-1: config 0 descriptor??
[  708.497352][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  708.557407][   T30] viperboard 2-1:0.143: version 0.00 found at bus 002 address 053
[  708.608207][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  708.657701][   T30] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  708.657724][   T30] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  708.719290][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  708.825457][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  708.997413][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  709.105077][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  709.872945][T15395] netlink: 'syz.5.2732': attribute type 10 has an invalid length.
[  709.922675][   T30] usb 2-1: USB disconnect, device number 53
[  709.970239][T15401] netlink: 'syz.5.2732': attribute type 10 has an invalid length.
[  710.000592][T15402] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000009	'
[  710.060833][T15395] ksmbd: Unknown IPC event: 3, ignore.
[  710.212295][T15401] netdevsim netdevsim5 netdevsim1: left promiscuous mode
[  710.222212][T15401] netdevsim netdevsim5 netdevsim1: left allmulticast mode
[  710.237752][T15401] team0: Port device netdevsim1 removed
[  710.255475][T15401] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  710.402642][T15401] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  710.815394][T12748] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  710.966644][T12748] usb 5-1: Using ep0 maxpacket: 32
[  711.003800][T12748] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  711.005579][T12748] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  711.005605][T12748] usb 5-1: config 0 has no interface number 0
[  711.005647][T12748] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  711.005670][T12748] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  711.021082][T12748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.021110][T12748] usb 5-1: Product: syz
[  711.021124][T12748] usb 5-1: Manufacturer: syz
[  711.021137][T12748] usb 5-1: SerialNumber: syz
[  711.029717][T12748] usb 5-1: config 0 descriptor??
[  711.315159][T12748] radio-si470x 5-1:0.35: this is not a si470x device.
[  711.546355][T12748] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  711.561465][T12748] usb 5-1: USB disconnect, device number 41
[  711.744777][T12259] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[  711.897219][T12259] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  711.899620][T12259] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  711.899672][T12259] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  711.899698][T12259] usb 6-1: config 0 interface 0 has no altsetting 0
[  711.899732][T12259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.963032][T12259] usb 6-1: config 0 descriptor??
[  712.409497][T12259] uclogic 0003:28BD:0074.0025: interface is invalid, ignoring
[  712.541726][T15424] fuse: Bad value for 'fd'
[  713.128175][   T59] net_ratelimit: 27 callbacks suppressed
[  713.128200][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  713.235572][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  713.236206][T15439] openvswitch: netlink: nsh attr 109 is out of range max 3
[  713.346764][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  713.456628][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  713.566543][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  713.685620][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  713.794842][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  713.905093][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  714.017112][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  714.591176][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'.
[  714.656416][T12259] usb 6-1: USB disconnect, device number 55
[  714.955886][T15465] netlink: 'syz.5.2745': attribute type 21 has an invalid length.
[  714.955915][T15465] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2745'.
[  714.956016][T15465] netlink: 'syz.5.2745': attribute type 5 has an invalid length.
[  714.956032][T15465] netlink: 'syz.5.2745': attribute type 6 has an invalid length.
[  714.956045][T15465] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2745'.
[  715.211485][   T30] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[  715.392743][   T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  715.405843][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.405863][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  715.405891][   T30] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.440047][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.440075][   T30] usb 6-1: Product: syz
[  715.440088][   T30] usb 6-1: Manufacturer: syz
[  715.440102][   T30] usb 6-1: SerialNumber: syz
[  715.455708][   T30] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  715.455756][   T30] cdc_ncm 6-1:1.0: bind() failure
[  715.595682][T15479] vivid-002: =================  START STATUS  =================
[  715.595698][T15479] vivid-002: Radio HW Seek Mode: Bounded
[  715.595734][T15479] vivid-002: Radio Programmable HW Seek: false
[  715.595747][T15479] vivid-002: RDS Rx I/O Mode: Block I/O
[  715.595759][T15479] vivid-002: Generate RBDS Instead of RDS: false
[  715.595772][T15479] vivid-002: RDS Reception: true
[  715.595784][T15479] vivid-002: RDS Program Type: 0 inactive
[  715.595800][T15479] vivid-002: RDS PS Name:  inactive
[  715.595814][T15479] vivid-002: RDS Radio Text:  inactive
[  715.595829][T15479] vivid-002: RDS Traffic Announcement: false inactive
[  715.595875][T15479] vivid-002: RDS Traffic Program: false inactive
[  715.595889][T15479] vivid-002: RDS Music: false inactive
[  715.595904][T15479] vivid-002: ==================  END STATUS  ==================
[  715.728401][   T30] usb 6-1: USB disconnect, device number 56
[  717.032215][T15493] CUSE: unknown device info "n¸Þ|’zQC*¯"
[  717.032232][T15493] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\�d�
+"
[  717.032240][T15493] CUSE: unknown device info "Ýÿÿÿ"
[  717.032246][T15493] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu	GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV"
[  717.032253][T15493] CUSE: DEVNAME unspecified
[  717.945042][T15499] loop8: detected capacity change from 0 to 7
[  717.954058][T15499] Dev loop8: unable to read RDB block 7
[  717.954088][T15499]  loop8: unable to read partition table
[  717.954215][T15499] loop8: partition table beyond EOD, truncated
[  717.957228][T15499] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  718.067490][T15500] fuse: Unknown parameter 'rìB‘'
[  718.135107][ T1149] net_ratelimit: 35 callbacks suppressed
[  718.135133][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  718.246450][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  718.356258][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  718.468218][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  718.575152][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  718.687574][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  718.795796][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  718.818787][T15510] openvswitch: netlink: Message has 8 unknown bytes.
[  718.818813][T15510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  718.905140][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  719.075020][T12748] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  719.228478][T12748] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  719.231809][T12748] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  719.231829][T12748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  719.231840][T12748] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  719.231881][T12748] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.237709][T12748] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  719.237729][T12748] usb 2-1: Product: syz
[  719.237738][T12748] usb 2-1: Manufacturer: syz
[  719.262388][T12748] cdc_wdm 2-1:1.0: skipping garbage
[  719.262408][T12748] cdc_wdm 2-1:1.0: skipping garbage
[  719.319878][T12748] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  719.319936][T12748] cdc_wdm 2-1:1.0: Unknown control protocol
[  719.495422][T12748] usb 2-1: USB disconnect, device number 54
[  719.646294][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  720.231131][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  720.247772][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  720.250596][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  720.253175][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  720.262134][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  720.317753][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  720.326670][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  720.328666][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  720.329997][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  720.330602][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  720.358902][T15520] netlink: 'syz.3.2761': attribute type 16 has an invalid length.
[  720.358926][T15520] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.2761'.
[  720.453427][T15520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  720.526107][ T1748] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  720.678028][ T1748] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  720.679171][ T1748] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  720.679226][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  720.679253][ T1748] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  720.679275][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  720.679298][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  720.683377][ T1748] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  720.683432][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  720.683458][ T1748] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  720.683483][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  720.683508][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  720.685615][ T1748] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  720.685661][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  720.685686][ T1748] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  720.685707][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  720.685730][ T1748] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  720.691837][ T1748] usb 2-1: string descriptor 0 read error: -22
[  720.691972][ T1748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.694778][T12748] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  720.726967][ T1748] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  720.745147][   T30] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  720.848095][T12748] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  720.849173][T12748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.849199][T12748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.849219][T12748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  720.849256][T12748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.854024][T12748] usb 4-1: config 0 descriptor??
[  720.903633][   T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  720.906953][   T30] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  720.907006][   T30] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  720.907053][   T30] usb 5-1: config 0 interface 0 has no altsetting 0
[  720.919365][   T30] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  720.919393][   T30] usb 5-1: Product: syz
[  720.919433][   T30] usb 5-1: Manufacturer: syz
[  720.919447][   T30] usb 5-1: SerialNumber: syz
[  720.929167][   T30] usb 5-1: config 0 descriptor??
[  720.943467][   T30] hub 5-1:0.0: bad descriptor, ignoring hub
[  720.943517][   T30] hub 5-1:0.0: probe with driver hub failed with error -5
[  720.976953][   T30] usb 5-1: selecting invalid altsetting 0
[  721.070206][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  721.081385][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  721.100780][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  721.101542][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  721.101749][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'.
[  721.207191][T15523] netlink: 'syz.4.2760': attribute type 4 has an invalid length.
[  721.257161][   T30] usb 2-1: USB disconnect, device number 55
[  721.309608][T12748] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  721.337784][T15533] netlink: 'syz.4.2760': attribute type 4 has an invalid length.
[  721.511337][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'.
[  721.513750][T15520] netlink: 'syz.3.2761': attribute type 13 has an invalid length.
[  721.535819][ T5782] usb 4-1: USB disconnect, device number 52
[  721.680721][   T30] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  721.710621][   T30] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  721.874724][T15522] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.875020][T15522] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.875168][T15522] bridge_slave_0: entered allmulticast mode
[  721.877918][T15522] bridge_slave_0: entered promiscuous mode
[  721.881781][T15522] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.881949][T15522] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.882375][T15522] bridge_slave_1: entered allmulticast mode
[  721.884148][T15522] bridge_slave_1: entered promiscuous mode
[  721.937661][T15537] fido_id[15537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  721.947248][T15522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  721.953902][T15522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  722.099012][T15522] team0: Port device team_slave_0 added
[  722.119090][T15522] team0: Port device team_slave_1 added
[  722.275625][T15522] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.275645][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.275669][T15522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.278072][T15522] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.278088][T15522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.278112][T15522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  722.344821][   T30] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  722.365251][ T5616] Bluetooth: hci0: command tx timeout
[  722.479227][T15522] hsr_slave_0: entered promiscuous mode
[  722.479907][T15522] hsr_slave_1: entered promiscuous mode
[  722.483355][T15522] debugfs: 'hsr0' already exists in 'hsr'
[  722.483378][T15522] Cannot create hsr debugfs directory
[  722.496992][   T30] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  722.499923][   T30] usb 2-1: config 0 has no interfaces?
[  722.501916][   T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.501938][   T30] usb 2-1: Product: syz
[  722.501952][   T30] usb 2-1: Manufacturer: syz
[  722.501965][   T30] usb 2-1: SerialNumber: syz
[  722.555633][   T30] usb 2-1: config 0 descriptor??
[  722.667316][T12748] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  722.827878][T12748] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  722.830585][T12748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  722.830645][T12748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.836548][T12748] usb 4-1: config 0 descriptor??
[  722.855000][T12748] pwc: Askey VC010 type 2 USB webcam detected.
[  723.038716][T12769] usb 2-1: USB disconnect, device number 56
[  723.204766][ T1149] net_ratelimit: 20 callbacks suppressed
[  723.204789][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  723.298951][T12748] pwc: recv_control_msg error -32 req 02 val 2b00
[  723.299970][T12748] pwc: recv_control_msg error -32 req 02 val 2700
[  723.300687][T12748] pwc: recv_control_msg error -32 req 02 val 2c00
[  723.301523][T12748] pwc: recv_control_msg error -32 req 04 val 1000
[  723.302311][T12748] pwc: recv_control_msg error -32 req 04 val 1300
[  723.303020][T12748] pwc: recv_control_msg error -32 req 04 val 1400
[  723.303501][T12748] pwc: recv_control_msg error -32 req 02 val 2000
[  723.304099][T12748] pwc: recv_control_msg error -32 req 02 val 2100
[  723.305767][T12748] pwc: recv_control_msg error -32 req 04 val 1500
[  723.312203][T12748] pwc: recv_control_msg error -32 req 02 val 2500
[  723.312818][T12748] pwc: recv_control_msg error -32 req 02 val 2400
[  723.313712][T12748] pwc: recv_control_msg error -32 req 02 val 2600
[  723.314777][T12748] pwc: recv_control_msg error -32 req 02 val 2900
[  723.317040][ T1748] usb 5-1: USB disconnect, device number 42
[  723.320582][T12748] pwc: recv_control_msg error -32 req 02 val 2800
[  723.355865][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  723.487198][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  723.503453][T15522] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  723.536565][T15522] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  723.540170][T15522] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  723.586538][T15522] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  723.587820][T15522] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  723.622108][T15522] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  723.622846][T15522] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  723.669792][T15522] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  723.814878][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  724.048926][T12748] pwc: recv_control_msg error -71 req 04 val 1200
[  724.050248][T12748] pwc: Registered as video103.
[  724.071748][T12748] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76
[  724.101441][T12748] usb 4-1: USB disconnect, device number 53
[  724.212135][T15522] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.214971][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  724.306553][T15522] 8021q: adding VLAN 0 to HW filter on device team0
[  724.349628][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.349705][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.367344][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  724.384696][T12259] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  724.421245][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.421311][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.444889][ T5616] Bluetooth: hci0: command tx timeout
[  724.477606][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  724.548294][T12259] usb 2-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00
[  724.552054][T12259] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  724.552105][T12259] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  724.552132][T12259] usb 2-1: config 0 interface 0 has no altsetting 0
[  724.552169][T12259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.596859][T15568] tipc: Started in network mode
[  724.596892][T15568] tipc: Node identity 7f000001, cluster identity 4711
[  724.597065][T15568] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  724.629303][T12259] usb 2-1: config 0 descriptor??
[  724.747571][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  724.772334][T15522] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.021812][T15568] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  725.034545][T15568] tipc: Enabled bearer <udp:syz0>, priority 10
[  725.109394][T15522] veth0_vlan: entered promiscuous mode
[  725.126291][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  725.189341][T15522] veth1_vlan: entered promiscuous mode
[  725.238308][   T59] bond1: (slave gretap1): failed to get link speed/duplex
[  725.377841][T15522] veth0_macvtap: entered promiscuous mode
[  725.401463][T15522] veth1_macvtap: entered promiscuous mode
[  725.498238][T15522] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.528765][T15522] batman_adv: batadv0: Interface activated: batadv_slave_1
[  725.590201][ T7838] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.590622][ T7838] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.590882][ T7838] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.626919][T15574] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  725.676077][ T7838] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.764783][T12774] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  725.894803][   T30] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  725.917779][T12774] usb 6-1: Using ep0 maxpacket: 8
[  725.938152][T12774] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  725.978052][T12774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  725.978108][T12774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.014280][T12774] usb 6-1: config 0 descriptor??
[  726.062006][   T30] usb 5-1: unable to get BOS descriptor or descriptor too short
[  726.062064][   T30] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  726.063411][   T30] usb 5-1: config 12 has an invalid interface number: 99 but max is 0
[  726.063436][   T30] usb 5-1: config 12 has no interface number 0
[  726.063479][   T30] usb 5-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64
[  726.063548][   T30] usb 5-1: config 12 interface 99 has no altsetting 0
[  726.130886][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.130914][   T30] usb 5-1: Product: syz
[  726.130929][   T30] usb 5-1: Manufacturer: syz
[  726.130940][   T30] usb 5-1: SerialNumber: syz
[  726.163419][ T5782] tipc: Node number set to 2130706433
[  726.250109][T12774] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  726.311066][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  726.311092][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  726.525090][ T5616] Bluetooth: hci0: command tx timeout
[  726.603724][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'.
[  726.638507][  T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  726.638526][  T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  727.287411][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  727.477255][T15594] overlayfs: missing 'lowerdir'
[  727.483042][T15592] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  727.551156][T15592] bond1 (unregistering): Released all slaves
[  727.836908][T15595] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  727.931818][T15595] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.932624][T15595] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.243009][   T13] net_ratelimit: 13 callbacks suppressed
[  728.243030][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  728.345689][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  728.457920][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  728.567307][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  728.605322][ T5616] Bluetooth: hci0: command tx timeout
[  728.676817][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  728.787737][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  728.896258][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  728.918963][T12769] usb 6-1: USB disconnect, device number 57
[  729.001483][T15601] program syz.6.2774 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  729.007230][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  729.116415][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  729.168905][   T30] usb 5-1: no audio or video endpoints found
[  729.213788][   T30] usb 5-1: USB disconnect, device number 43
[  729.225877][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  729.246489][ T1149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  729.313226][T12259] usbhid 2-1:0.0: can't add hid device: -71
[  729.313342][T12259] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  729.402030][T12259] usb 2-1: USB disconnect, device number 57
[  730.382844][   T31] audit: type=1326 audit(1790204613.213:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15613 comm="syz.3.2778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f890ec code=0x0
[  730.451378][T15615] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  730.465095][ T1748] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  730.620095][ T1748] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  730.622390][ T1748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.622420][ T1748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.622444][ T1748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.627784][ T1748] usb 5-1: config 0 descriptor??
[  731.624787][ T1748] usbhid 5-1:0.0: can't add hid device: -71
[  731.624858][ T1748] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  731.627846][ T1748] usb 5-1: USB disconnect, device number 44
[  732.147295][T15632] ALSA: mixer_oss: invalid OSS volume ''
[  732.147342][T15632] ALSA: mixer_oss: invalid OSS volume 'RECLE
'
[  733.314817][ T1149] net_ratelimit: 33 callbacks suppressed
[  733.314839][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  733.426264][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  733.536715][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  733.635024][ T1748] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  733.669390][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  733.778124][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  733.795504][ T1748] usb 4-1: Using ep0 maxpacket: 32
[  733.798228][ T1748] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  733.800622][ T1748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.834908][T12769] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  733.837280][ T1748] usb 4-1: config 0 descriptor??
[  733.868554][ T1748] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  733.885868][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  733.990762][T12769] usb 2-1: unable to get BOS descriptor or descriptor too short
[  733.991272][T12769] usb 2-1: not running at top speed; connect to a high speed hub
[  733.991298][T12769] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  733.996400][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  733.998851][T12769] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  733.998876][T12769] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  733.998894][T12769] usb 2-1: config 14 has no interface number 0
[  733.998909][T12769] usb 2-1: config 14 has no interface number 1
[  733.998995][T12769] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  733.999015][T12769] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  733.999038][T12769] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  733.999060][T12769] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[  733.999085][T12769] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[  733.999133][T12769] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  733.999152][T12769] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  733.999176][T12769] usb 2-1: config 14 interface 57 has no altsetting 0
[  733.999191][T12769] usb 2-1: config 14 interface 228 has no altsetting 0
[  734.004096][T12769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.004119][T12769] usb 2-1: Product: syz
[  734.004133][T12769] usb 2-1: Manufacturer: syz
[  734.004146][T12769] usb 2-1: SerialNumber: syz
[  734.115052][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  734.235022][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  734.347313][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  734.499337][T15648] syzkaller1: tun_chr_ioctl cmd 2147767507
[  734.503033][T12769] legousbtower 2-1:14.57: interrupt endpoints not found
[  734.894688][ T5782] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  734.902701][T12769] legousbtower 2-1:14.228: get version request failed: -121
[  734.902844][T12769] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121
[  735.016234][ T1149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  735.045795][ T5782] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  735.046945][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.049977][ T5782] usb 5-1: config 0 descriptor??
[  735.260859][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.261544][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.314210][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'.
[  735.314239][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'.
[  735.374368][ T1748] gspca_vc032x: reg_w err -71
[  735.374456][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374469][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374478][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374487][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374496][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374506][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374516][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374525][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374534][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374543][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.374556][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432167][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432184][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432192][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432203][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432213][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432223][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432231][ T1748] gspca_vc032x: I2c Bus Busy Wait 00
[  735.432240][ T1748] gspca_vc032x: Unknown sensor...
[  735.432333][ T1748] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  735.498042][ T1748] usb 4-1: USB disconnect, device number 54
[  735.721730][ T5782] usb 5-1: Cannot set MAC address
[  735.721882][ T5782] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  735.729830][ T5782] usb 5-1: USB disconnect, device number 45
[  735.833363][T15657] netlink: 'syz.5.2790': attribute type 1 has an invalid length.
[  735.864280][T15657] bond3: entered promiscuous mode
[  735.870032][T15657] 8021q: adding VLAN 0 to HW filter on device bond3
[  736.805247][   T30] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  736.963658][   T30] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  736.980446][   T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  736.980477][   T30] usb 5-1: config 0 has no interface number 0
[  736.980523][   T30] usb 5-1: config 0 interface 41 has no altsetting 0
[  737.020194][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.020225][   T30] usb 5-1: Product: syz
[  737.020240][   T30] usb 5-1: Manufacturer: syz
[  737.020255][   T30] usb 5-1: SerialNumber: syz
[  737.043747][   T30] usb 5-1: config 0 descriptor??
[  737.272270][T12769] usb 2-1: USB disconnect, device number 58
[  738.134797][T12749] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  738.286893][T12749] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  738.300264][T12749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.382578][   T43] net_ratelimit: 34 callbacks suppressed
[  738.382602][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  738.487742][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  738.599781][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  738.621030][T12749] usb 2-1: selecting invalid altsetting 3
[  738.621060][T12749] comedi comedi5: could not set alternate setting 3 in high speed
[  738.621074][T12749] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  738.660687][T12749] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22
[  738.705742][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  738.706541][   T30] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  738.825464][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  738.954596][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  739.069794][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  739.182243][   T30] usb 5-1: USB disconnect, device number 46
[  739.189180][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  739.295764][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  739.417040][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  740.126934][ T7838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  740.164401][T15701] fuse: Unknown parameter '0x0000000000000007'
[  740.181937][T15701] fuse: Unknown parameter 'use00000000000000000000'
[  740.450604][T15706] ªªªªªª: renamed from vlan0 (while UP)
[  740.521056][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2801'.
[  740.620169][   T30] usb 2-1: USB disconnect, device number 59
[  740.775909][T15708] batadv_slave_0: Caught tx_queue_len zero misconfig
[  741.038246][T15710] hub 1-0:1.0: USB hub found
[  741.048956][T15710] hub 1-0:1.0: 1 port detected
[  741.654916][T12259] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  741.814025][T12259] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  741.831112][T12259] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  741.831134][T12259] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  741.831149][T12259] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  741.893786][T12259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.894814][T12259] usb 5-1: Product: syz
[  741.894833][T12259] usb 5-1: Manufacturer: syz
[  741.894848][T12259] usb 5-1: SerialNumber: syz
[  741.938297][T12259] usb 5-1: config 0 descriptor??
[  741.938962][T15713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  741.940487][T15713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  741.967758][T12259] usb 5-1: ucan: probing device on interface #0
[  741.975661][T12749] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  742.136182][T12749] usb 2-1: Using ep0 maxpacket: 32
[  742.138458][T12749] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  742.139738][T12749] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  742.142205][T12749] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  742.142231][T12749] usb 2-1: Product: syz
[  742.142245][T12749] usb 2-1: Manufacturer: syz
[  742.142260][T12749] usb 2-1: SerialNumber: syz
[  742.166653][T12749] usb 2-1: config 0 descriptor??
[  742.167427][T15725] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  742.884879][T12259] ucan 5-1:0.0 can0: registered device
[  743.715787][   T61] net_ratelimit: 25 callbacks suppressed
[  743.715810][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  743.769119][T15742] input: syz0 as /devices/virtual/input/input79
[  743.824837][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  743.887397][   T30] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  743.922126][T12259] ucan 5-1:0.0 can0: firmware string: unknown
[  743.935146][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  743.944282][T12259] usb 5-1: USB disconnect, device number 47
[  744.034753][   T30] usb 6-1: Using ep0 maxpacket: 8
[  744.037350][   T30] usb 6-1: unable to get BOS descriptor or descriptor too short
[  744.037402][   T30] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  744.038499][   T30] usb 6-1: config 2 has an invalid interface number: 76 but max is 0
[  744.038523][   T30] usb 6-1: config 2 has no interface number 0
[  744.038553][   T30] usb 6-1: config 2 interface 76 has no altsetting 0
[  744.040777][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.040801][   T30] usb 6-1: Product: syz
[  744.040815][   T30] usb 6-1: Manufacturer: syz
[  744.040829][   T30] usb 6-1: SerialNumber: syz
[  744.047631][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  744.155601][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  744.265271][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  744.312986][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.322260][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.375962][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  744.560661][T12259] usb 2-1: USB disconnect, device number 60
[  744.984711][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  744.985011][T12748] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  745.094764][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  745.127448][   T30] go7007 6-1:2.76: Sensoray 2250 found
[  745.127632][   T30] go7007 6-1:2.76: probe with driver go7007 failed with error -12
[  745.141932][   T30] usb 6-1: USB disconnect, device number 58
[  745.159271][T12748] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  745.161388][T12748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  745.173835][T12748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.173863][T12748] usb 4-1: Product: syz
[  745.173876][T12748] usb 4-1: Manufacturer: syz
[  745.173890][T12748] usb 4-1: SerialNumber: syz
[  745.182830][T12748] usb 4-1: config 0 descriptor??
[  745.228294][T12748] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  745.246446][  T240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  745.261017][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  745.374155][T15753] kAFS: unable to lookup cell 'ÿ'
[  745.382592][T15753] kAFS: unable to lookup cell '(,c¾Ì'
[  745.393401][T15745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.395804][T15745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.472024][T15753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2813'.
[  745.679097][T15758] program syz.6.2812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  745.746365][T12749] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  745.895638][T12749] usb 5-1: Using ep0 maxpacket: 16
[  745.900709][T12749] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  745.911723][T12749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.911754][T12749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  745.911803][T12749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  745.911842][T12749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.942629][T12749] usb 5-1: config 0 descriptor??
[  746.010197][T15761] syzkaller0: Caught tx_queue_len zero misconfig
[  746.399090][T15764] ipvlan0: Caught tx_queue_len zero misconfig
[  746.441541][T12748] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  746.441625][T12748] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  746.452244][T12748] usb 4-1: USB disconnect, device number 55
[  746.809660][   T31] audit: type=1326 audit(1790204629.643:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15755 comm="syz.4.2814" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708f0ec code=0x0
[  747.615014][T12259] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  747.785572][T12259] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  747.786903][T12259] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  747.786971][T12259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.823991][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  747.824055][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  748.071877][T12259] dvb_ttusb_budget: ttusb_init_controller: error
[  748.071895][T12259] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  748.382776][T15784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.401521][T15784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.435178][ T5782] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  748.523108][T12259] DVB: Unable to find symbol stv0299_attach()
[  748.573929][T12259] DVB: Unable to find symbol tda8083_attach()
[  748.573950][T12259] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  748.597656][ T5782] usb 6-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00
[  748.621106][ T5782] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  748.621135][ T5782] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  748.621189][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.670317][ T5782] usb 6-1: 0:1 : does not exist
[  748.725750][   T43] net_ratelimit: 29 callbacks suppressed
[  748.725803][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  748.842212][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  748.949213][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  749.058467][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  749.105355][T12749] usbhid 5-1:0.0: can't add hid device: -71
[  749.105428][T12749] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  749.131127][T12749] usb 5-1: USB disconnect, device number 48
[  749.172875][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  749.274797][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  749.384889][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  749.495135][   T13] bond1: (slave gretap1): failed to get link speed/duplex
[  749.604951][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  749.681439][T15790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2822'.
[  749.714700][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  749.872819][T15792] syz.3.2823 (15792): drop_caches: 2
[  750.386585][   T31] audit: type=1326 audit(1790204633.223:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.389511][   T31] audit: type=1326 audit(1790204633.223:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.389932][   T31] audit: type=1326 audit(1790204633.223:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.479779][   T31] audit: type=1326 audit(1790204633.313:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.483721][   T31] audit: type=1326 audit(1790204633.313:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.483779][   T31] audit: type=1326 audit(1790204633.313:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.483828][   T31] audit: type=1326 audit(1790204633.313:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.483873][   T31] audit: type=1326 audit(1790204633.313:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.483915][   T31] audit: type=1326 audit(1790204633.313:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  750.564985][T12748] usb 2-1: USB disconnect, device number 61
[  750.913225][T15809] syz.1.2827 (15809): drop_caches: 2
[  750.924757][T12749] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  750.982541][ T1748] usb 6-1: USB disconnect, device number 59
[  751.006762][ T7838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  751.092716][T12749] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  751.105175][T12749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  751.105196][T12749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.123124][T12749] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  751.123152][T12749] usb 4-1: Manufacturer: syz
[  751.133674][T12749] usb 4-1: config 0 descriptor??
[  751.301174][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  751.513772][T15807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  751.533797][T15807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  751.926171][ T7838] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.926861][ T7838] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.926886][ T7838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  751.926925][ T7838] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  752.007141][   T31] kauditd_printk_skb: 83 callbacks suppressed
[  752.007163][   T31] audit: type=1326 audit(1790204634.843:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.008078][   T31] audit: type=1326 audit(1790204634.843:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.008286][   T31] audit: type=1326 audit(1790204634.843:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.008548][   T31] audit: type=1326 audit(1790204634.843:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.009154][   T31] audit: type=1326 audit(1790204634.843:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.009408][   T31] audit: type=1326 audit(1790204634.843:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.009594][   T31] audit: type=1326 audit(1790204634.843:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.010372][   T31] audit: type=1326 audit(1790204634.843:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.010615][   T31] audit: type=1326 audit(1790204634.843:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.010754][   T31] audit: type=1326 audit(1790204634.843:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15801 comm="syz.3.2825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f890ec code=0x7ffc0000
[  752.292653][T15818] program syz.1.2829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  752.305979][T15802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.306337][T15802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.951579][T12749] uclogic 0003:256C:006D.0028: v1 frame probing failed: -71
[  752.951693][T12749] uclogic 0003:256C:006D.0028: failed probing parameters: -71
[  752.951808][T12749] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71
[  752.954649][T12749] usb 4-1: USB disconnect, device number 56
[  753.865816][ T7838] net_ratelimit: 30 callbacks suppressed
[  753.865842][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  753.975880][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.006336][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'.
[  754.034845][ T5782] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  754.085148][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.191751][ T5782] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  754.195773][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.219501][ T5782] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  754.219533][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  754.219548][ T5782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  754.219560][ T5782] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  754.220765][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  754.220784][ T5782] usb 6-1: SerialNumber: syz
[  754.314741][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.426287][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.535208][ T7838] bond1: (slave gretap1): failed to get link speed/duplex
[  754.542131][ T5782] usbtest 6-1:1.0: couldn't get endpoints, -22
[  754.542226][ T5782] usbtest 6-1:1.0: probe with driver usbtest failed with error -22
[  754.581685][ T5782] usb 6-1: USB disconnect, device number 60
[  754.645656][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  754.758119][  T240] bond1: (slave gretap1): failed to get link speed/duplex
[  754.865493][   T61] bond1: (slave gretap1): failed to get link speed/duplex
[  755.537393][T15856] syzkaller0: entered promiscuous mode
[  755.538163][T15856] batman_adv: batadv0: Interface activated: syzkaller0
[  756.766838][ T1149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  757.403938][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'.
[  757.403960][T15868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  757.403973][T15868] batman_adv: batadv0: Removing interface: batadv_slave_0
[  757.433637][T15868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  757.433656][T15868] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.379738][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'.
[  758.479424][T15880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2842'.
[  758.844851][   T30] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  758.974986][ T1149] net_ratelimit: 25 callbacks suppressed
[  758.975005][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  758.997562][   T30] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  758.998966][   T30] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  758.998989][   T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  758.999008][   T30] usb 5-1: config 0 has no interface number 0
[  758.999388][   T30] usb 5-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  758.999410][   T30] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  758.999448][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.002333][   T30] usb 5-1: config 0 descriptor??
[  759.003200][T15880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  759.066291][   T30] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  759.118610][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  759.325350][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  759.424000][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'.
[  759.440430][T15880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.441001][T15880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.448633][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  759.559864][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  759.667420][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  759.775223][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  759.885762][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  759.907102][   T61] usb 5-1: Failed to submit usb control message: -71
[  759.907142][   T61] usb 5-1: unable to send the bmi data to the device: -71
[  759.907160][   T61] usb 5-1: unable to get target info from device
[  759.907176][   T61] usb 5-1: could not get target info (-71)
[  759.907205][   T61] usb 5-1: could not probe fw (-71)
[  759.907853][ T5782] usb 5-1: USB disconnect, device number 49
[  759.997868][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  760.115335][   T43] bond1: (slave gretap1): failed to get link speed/duplex
[  760.385006][   T30] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[  760.562268][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  760.562323][   T30] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  760.565600][   T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  760.565642][   T30] usb 4-1: config 1 interface 0 has no altsetting 0
[  760.595509][   T30] usb 4-1: string descriptor 0 read error: -22
[  760.595645][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.163639][   T30] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  761.186157][   T30] usb 4-1: USB disconnect, device number 57
[  761.375371][T12749] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  761.543266][T12749] usb 5-1: unable to get BOS descriptor or descriptor too short
[  761.543729][T12749] usb 5-1: not running at top speed; connect to a high speed hub
[  761.543753][T12749] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  761.570743][T12749] usb 5-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config
[  761.570792][T12749] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  761.570822][T12749] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  761.618214][T12749] usb 5-1: string descriptor 0 read error: -22
[  761.618371][T12749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.663162][T12749] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  761.663191][T12749] usb 5-1: found format II with max.bitrate = 512, frame size=4095
[  761.663425][T12749] usb 5-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  761.672124][T12749] usb 5-1: found format II with max.bitrate = 512, frame size=4095
[  761.903526][T15925] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2855'.
[  762.004695][ T5782] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  762.054774][T12774] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  762.166698][ T5782] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  762.168012][ T5782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  762.168038][ T5782] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  762.184039][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.184059][ T5782] usb 2-1: Product: syz
[  762.184068][ T5782] usb 2-1: Manufacturer: syz
[  762.184079][ T5782] usb 2-1: SerialNumber: syz
[  762.231391][T12774] usb 6-1: Using ep0 maxpacket: 32
[  762.241931][T12774] usb 6-1: unable to get BOS descriptor or descriptor too short
[  762.241986][T12774] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[  762.275879][T12774] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[  762.275908][T12774] usb 6-1: config 3 has an invalid interface number: 25 but max is 1
[  762.275943][   T30] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  762.275957][T12774] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[  762.275977][T12774] usb 6-1: config 3 has no interface number 0
[  762.275993][T12774] usb 6-1: config 3 has no interface number 1
[  762.276045][T12774] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  762.276065][T12774] usb 6-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  762.276120][T12774] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[  762.276159][T12774] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[  762.276185][T12774] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  762.276210][T12774] usb 6-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[  762.276263][T12774] usb 6-1: config 3 interface 223 has no altsetting 1
[  762.276281][T12774] usb 6-1: config 3 interface 25 has no altsetting 0
[  762.283735][T12774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.283764][T12774] usb 6-1: Product: syz
[  762.283778][T12774] usb 6-1: Manufacturer: syz
[  762.283792][T12774] usb 6-1: SerialNumber: syz
[  762.452924][   T30] usb 4-1: unable to get BOS descriptor or descriptor too short
[  762.452969][   T30] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  762.456603][   T30] usb 4-1: config 12 has an invalid interface number: 99 but max is 0
[  762.456631][   T30] usb 4-1: config 12 has no interface number 0
[  762.456700][   T30] usb 4-1: config 12 interface 99 has no altsetting 0
[  762.477643][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.477671][   T30] usb 4-1: Product: syz
[  762.477684][   T30] usb 4-1: Manufacturer: syz
[  762.477724][   T30] usb 4-1: SerialNumber: syz
[  762.535681][ T7838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  763.651339][T12774] usbtv 6-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[  763.722270][T12774] usb 6-1: USB disconnect, device number 61
[  764.051052][  T141] net_ratelimit: 34 callbacks suppressed
[  764.053377][  T141] bond1: (slave gretap1): failed to get link speed/duplex
[  764.065066][   T30] usb 4-1: no audio or video endpoints found
[  764.088221][T12774] 
[  764.090616][T12774] =========================
[  764.094790][   T30] usb 4-1: USB disconnect, device number 58
[  764.101048][T12774] WARNING: held lock freed!
[  764.105730][T12774] syzkaller #0 Tainted: G             L     
[  764.111740][T12774] -------------------------
[  764.116359][T12774] kworker/0:8/12774 is freeing memory ffff888030ccf000-ffff888030ccf7ff, with a lock still held there!
[  764.127616][T12774] ffff888030ccf1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  764.137911][T12774] locks held by kworker/0:8/12774: 5, last CPU#0:
[  764.144474][T12774]  #0: ffff8880226b5540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  764.157421][T12774]  #1: ffffc90005ed7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  764.169294][T12774]  #2: ffff888029eb91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  764.178357][T12774]  #3: ffff8880330961d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0
[  764.187549][T12774]  #4: ffff888030ccf1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  764.198186][T12774] 
[  764.198186][T12774] stack backtrace:
[  764.204090][T12774] CPU: 0 UID: 0 PID: 12774 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  764.215127][T12774] Tainted: [L]=SOFTLOCKUP
[  764.219584][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  764.229651][T12774] Workqueue: usb_hub_wq hub_event
[  764.234709][T12774] Call Trace:
[  764.238007][T12774]  <TASK>
[  764.240954][T12774]  dump_stack_lvl+0xe8/0x150
[  764.245619][T12774]  debug_check_no_locks_freed+0x149/0x170
[  764.251523][T12774]  kfree+0x12b/0x650
[  764.255443][T12774]  ? device_release+0xc4/0x1f0
[  764.260236][T12774]  ? __pfx_usb_release_interface+0x10/0x10
[  764.266202][T12774]  device_release+0xc4/0x1f0
[  764.270814][T12774]  kobject_put+0x222/0x550
[  764.275325][T12774]  v4l2_device_disconnect+0x79/0xd0
[  764.280609][T12774]  usbtv_video_free+0x25/0x30
[  764.285344][T12774]  usbtv_disconnect+0x5c/0xa0
[  764.290050][T12774]  usb_unbind_interface+0x295/0x9f0
[  764.295275][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.301391][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.307389][T12774]  ? __pfx_usb_unbind_interface+0x10/0x10
[  764.313123][T12774]  device_release_driver_internal+0x4f5/0x880
[  764.319301][T12774]  bus_remove_device+0x444/0x560
[  764.324263][T12774]  ? __pfx_bus_remove_device+0x10/0x10
[  764.329830][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.335572][T12774]  device_del+0x524/0x8f0
[  764.339930][T12774]  ? __pfx_device_del+0x10/0x10
[  764.344800][T12774]  ? __pfx___mutex_lock+0x10/0x10
[  764.349853][T12774]  usb_disable_device+0x3d4/0x8d0
[  764.354895][T12774]  usb_disconnect+0x346/0x9a0
[  764.359596][T12774]  hub_event+0x1bbb/0x4d30
[  764.364045][T12774]  ? do_raw_spin_unlock+0xf5/0x200
[  764.369197][T12774]  ? register_lock_class+0x31/0x2e0
[  764.374514][T12774]  ? __pfx_hub_event+0x10/0x10
[  764.379331][T12774]  ? rcu_is_watching+0x16/0xb0
[  764.384150][T12774]  ? process_scheduled_works+0x97a/0x1630
[  764.389880][T12774]  process_scheduled_works+0xc3d/0x1630
[  764.395478][T12774]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.401511][T12774]  ? assign_work+0x3cf/0x5d0
[  764.406218][T12774]  worker_thread+0xa47/0xfb0
[  764.410841][T12774]  ? __kthread_parkme+0x71/0x1f0
[  764.415810][T12774]  kthread+0x38b/0x480
[  764.419901][T12774]  ? __pfx_worker_thread+0x10/0x10
[  764.425119][T12774]  ? __pfx_kthread+0x10/0x10
[  764.429731][T12774]  ret_from_fork+0x514/0xb70
[  764.434354][T12774]  ? __pfx_ret_from_fork+0x10/0x10
[  764.439494][T12774]  ? __switch_to+0xc89/0x1420
[  764.444237][T12774]  ? __pfx_kthread+0x10/0x10
[  764.448843][T12774]  ret_from_fork_asm+0x1a/0x30
[  764.453808][T12774]  </TASK>
[  764.476413][ T1149] bond1: (slave gretap1): failed to get link speed/duplex
[  764.486692][T12774] ==================================================================
[  764.486711][T12774] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0
[  764.486748][T12774] Read of size 8 at addr ffff888030ccf008 by task kworker/0:8/12774
[  764.486764][T12774] 
[  764.486778][T12774] CPU: 0 UID: 0 PID: 12774 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  764.486815][T12774] Tainted: [L]=SOFTLOCKUP
[  764.486823][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  764.486836][T12774] Workqueue: usb_hub_wq hub_event
[  764.486860][T12774] Call Trace:
[  764.486869][T12774]  <TASK>
[  764.486878][T12774]  dump_stack_lvl+0xe8/0x150
[  764.486905][T12774]  print_address_description+0x55/0x1e0
[  764.486964][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  764.486986][T12774]  print_report+0x58/0x70
[  764.487007][T12774]  kasan_report+0x117/0x150
[  764.487031][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  764.487056][T12774]  usb_unbind_interface+0x2c2/0x9f0
[  764.487077][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.487100][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.487122][T12774]  ? __pfx_usb_unbind_interface+0x10/0x10
[  764.487143][T12774]  device_release_driver_internal+0x4f5/0x880
[  764.487170][T12774]  bus_remove_device+0x444/0x560
[  764.487198][T12774]  ? __pfx_bus_remove_device+0x10/0x10
[  764.487222][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  764.487243][T12774]  device_del+0x524/0x8f0
[  764.487263][T12774]  ? __pfx_device_del+0x10/0x10
[  764.487283][T12774]  ? __pfx___mutex_lock+0x10/0x10
[  764.487309][T12774]  usb_disable_device+0x3d4/0x8d0
[  764.487335][T12774]  usb_disconnect+0x346/0x9a0
[  764.487357][T12774]  hub_event+0x1bbb/0x4d30
[  764.487378][T12774]  ? do_raw_spin_unlock+0xf5/0x200
[  764.487407][T12774]  ? register_lock_class+0x31/0x2e0
[  764.487436][T12774]  ? __pfx_hub_event+0x10/0x10
[  764.487460][T12774]  ? rcu_is_watching+0x16/0xb0
[  764.487482][T12774]  ? process_scheduled_works+0x97a/0x1630
[  764.487507][T12774]  process_scheduled_works+0xc3d/0x1630
[  764.487536][T12774]  ? __pfx_process_scheduled_works+0x10/0x10
[  764.487551][T12774]  ? assign_work+0x3cf/0x5d0
[  764.487565][T12774]  worker_thread+0xa47/0xfb0
[  764.487610][T12774]  ? __kthread_parkme+0x71/0x1f0
[  764.487641][T12774]  kthread+0x38b/0x480
[  764.487660][T12774]  ? __pfx_worker_thread+0x10/0x10
[  764.487677][T12774]  ? __pfx_kthread+0x10/0x10
[  764.487688][T12774]  ret_from_fork+0x514/0xb70
[  764.487699][T12774]  ? __pfx_ret_from_fork+0x10/0x10
[  764.487711][T12774]  ? __switch_to+0xc89/0x1420
[  764.487727][T12774]  ? __pfx_kthread+0x10/0x10
[  764.487741][T12774]  ret_from_fork_asm+0x1a/0x30
[  764.487773][T12774]  </TASK>
[  764.487781][T12774] 
[  764.487786][T12774] Allocated by task 12774:
[  764.487806][T12774]  kasan_save_track+0x3e/0x80
[  764.487825][T12774]  __kasan_kmalloc+0x93/0xb0
[  764.487843][T12774]  __kmalloc_cache_noprof+0x321/0x600
[  764.487854][T12774]  usb_set_configuration+0x3cc/0x2180
[  764.487866][T12774]  usb_generic_driver_probe+0x8d/0x150
[  764.487963][T12774]  usb_probe_device+0x1c3/0x3b0
[  764.487985][T12774]  really_probe+0x254/0xae0
[  764.487997][T12774]  __driver_probe_device+0x1e8/0x360
[  764.488009][T12774]  driver_probe_device+0x4f/0x240
[  764.488022][T12774]  __device_attach_driver+0x270/0x410
[  764.488034][T12774]  bus_for_each_drv+0x258/0x2f0
[  764.488055][T12774]  __device_attach+0x2c4/0x450
[  764.488074][T12774]  device_initial_probe+0xa1/0xd0
[  764.488094][T12774]  bus_probe_device+0x12a/0x220
[  764.488119][T12774]  device_add+0x7d7/0xb80
[  764.488136][T12774]  usb_new_device+0x9aa/0x1690
[  764.488147][T12774]  hub_event+0x28e8/0x4d30
[  764.488158][T12774]  process_scheduled_works+0xc3d/0x1630
[  764.488171][T12774]  worker_thread+0xa47/0xfb0
[  764.488184][T12774]  kthread+0x38b/0x480
[  764.488194][T12774]  ret_from_fork+0x514/0xb70
[  764.488209][T12774]  ret_from_fork_asm+0x1a/0x30
[  764.488234][T12774] 
[  764.488239][T12774] Freed by task 12774:
[  764.488248][T12774]  kasan_save_track+0x3e/0x80
[  764.488265][T12774]  kasan_save_free_info+0x40/0x50
[  764.488288][T12774]  __kasan_slab_free+0x5c/0x80
[  764.488302][T12774]  kfree+0x1c5/0x650
[  764.488316][T12774]  device_release+0xc4/0x1f0
[  764.488329][T12774]  kobject_put+0x222/0x550
[  764.488343][T12774]  v4l2_device_disconnect+0x79/0xd0
[  764.488367][T12774]  usbtv_video_free+0x25/0x30
[  764.488389][T12774]  usbtv_disconnect+0x5c/0xa0
[  764.488411][T12774]  usb_unbind_interface+0x295/0x9f0
[  764.488432][T12774]  device_release_driver_internal+0x4f5/0x880
[  764.488447][T12774]  bus_remove_device+0x444/0x560
[  764.488462][T12774]  device_del+0x524/0x8f0
[  764.488472][T12774]  usb_disable_device+0x3d4/0x8d0
[  764.488483][T12774]  usb_disconnect+0x346/0x9a0
[  764.488493][T12774]  hub_event+0x1bbb/0x4d30
[  764.488510][T12774]  process_scheduled_works+0xc3d/0x1630
[  764.488532][T12774]  worker_thread+0xa47/0xfb0
[  764.488551][T12774]  kthread+0x38b/0x480
[  764.488566][T12774]  ret_from_fork+0x514/0xb70
[  764.488580][T12774]  ret_from_fork_asm+0x1a/0x30
[  764.488606][T12774] 
[  764.488611][T12774] The buggy address belongs to the object at ffff888030ccf000
[  764.488611][T12774]  which belongs to the cache kmalloc-2k of size 2048
[  764.488627][T12774] The buggy address is located 8 bytes inside of
[  764.488627][T12774]  freed 2048-byte region [ffff888030ccf000, ffff888030ccf800)
[  764.488644][T12774] 
[  764.488647][T12774] The buggy address belongs to the physical page:
[  764.488654][T12774] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030cce000 pfn:0x30cc8
[  764.488673][T12774] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  764.488688][T12774] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  764.488706][T12774] page_type: f5(slab)
[  764.488724][T12774] raw: 00fff00000000240 ffff88801b042000 ffffea000152c010 ffffea0001426210
[  764.488742][T12774] raw: ffff888030cce000 0000000000080007 00000000f5000000 0000000000000000
[  764.488757][T12774] head: 00fff00000000240 ffff88801b042000 ffffea000152c010 ffffea0001426210
[  764.488767][T12774] head: ffff888030cce000 0000000000080007 00000000f5000000 0000000000000000
[  764.488778][T12774] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  764.488787][T12774] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  764.488800][T12774] page dumped because: kasan: bad access detected
[  764.488807][T12774] page_owner tracks the page as allocated
[  764.488813][T12774] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11618, tgid 11615 (syz.1.1905), ts 379159249354
[  764.488842][T12774]  post_alloc_hook+0x1f9/0x250
[  764.488867][T12774]  get_page_from_freelist+0x2209/0x2280
[  764.488887][T12774]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  764.488905][T12774]  allocate_slab+0x7d/0x620
[  764.488919][T12774]  refill_objects+0x2d5/0x350
[  764.488933][T12774]  __pcs_replace_empty_main+0x2c8/0x6c0
[  764.488946][T12774]  __kmalloc_cache_noprof+0x39b/0x600
[  764.488957][T12774]  br_vlan_add+0x22d/0x1060
[  764.489007][T12774]  __vlan_add+0x46b/0x29f0
[  764.489026][T12774]  nbp_vlan_add+0x27c/0xb20
[  764.489064][T12774]  br_vlan_info+0x100/0x470
[  764.489091][T12774]  br_process_vlan_info+0x61f/0x8b0
[  764.489104][T12774]  br_afspec+0x3a5/0x600
[  764.489116][T12774]  br_setlink+0x34f/0x830
[  764.489135][T12774]  rtnl_bridge_setlink+0x5b6/0x7e0
[  764.489161][T12774]  rtnetlink_rcv_msg+0x7b9/0xc00
[  764.489183][T12774] page last free pid 11386 tgid 11380 ts 362227595442 stack trace:
[  764.489197][T12774]  __free_frozen_pages+0xc93/0xd90
[  764.489221][T12774]  __slab_free+0x274/0x2c0
[  764.489235][T12774]  qlist_free_all+0x99/0x100
[  764.489250][T12774]  kasan_quarantine_reduce+0x148/0x160
[  764.489267][T12774]  __kasan_slab_alloc+0x22/0x80
[  764.489286][T12774]  __kmalloc_cache_noprof+0x29f/0x600
[  764.489302][T12774]  kvm_create_vm_debugfs+0x58f/0x8f0
[  764.489319][T12774]  kvm_dev_ioctl+0x1362/0x1770
[  764.489335][T12774]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  764.489355][T12774]  __do_fast_syscall_32+0x27a/0x6a0
[  764.489373][T12774]  do_fast_syscall_32+0x33/0x70
[  764.489386][T12774]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  764.489400][T12774] 
[  764.489403][T12774] Memory state around the buggy address:
[  764.489411][T12774]  ffff888030ccef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  764.489422][T12774]  ffff888030ccef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  764.489435][T12774] >ffff888030ccf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  764.489444][T12774]                       ^
[  764.489455][T12774]  ffff888030ccf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  764.489467][T12774]  ffff888030ccf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  764.489477][T12774] ==================================================================
[  764.489511][T12774] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  765.337241][T12774] CPU: 0 UID: 0 PID: 12774 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  765.348275][T12774] Tainted: [L]=SOFTLOCKUP
[  765.352617][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  765.362719][T12774] Workqueue: usb_hub_wq hub_event
[  765.367778][T12774] Call Trace:
[  765.371154][T12774]  <TASK>
[  765.374095][T12774]  vpanic+0x56d/0xa60
[  765.378095][T12774]  ? __pfx_vpanic+0x10/0x10
[  765.382612][T12774]  ? __pfx___schedule+0x10/0x10
[  765.387475][T12774]  panic+0xc5/0xd0
[  765.391210][T12774]  ? __pfx_panic+0x10/0x10
[  765.395641][T12774]  ? preempt_schedule_thunk+0x16/0x40
[  765.401021][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  765.406399][T12774]  check_panic_on_warn+0x89/0xb0
[  765.411344][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  765.416743][T12774]  end_report+0x73/0x170
[  765.421006][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  765.426392][T12774]  kasan_report+0x128/0x150
[  765.430904][T12774]  ? usb_unbind_interface+0x2c2/0x9f0
[  765.436404][T12774]  usb_unbind_interface+0x2c2/0x9f0
[  765.441618][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  765.447354][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  765.453086][T12774]  ? __pfx_usb_unbind_interface+0x10/0x10
[  765.458820][T12774]  device_release_driver_internal+0x4f5/0x880
[  765.464990][T12774]  bus_remove_device+0x444/0x560
[  765.469953][T12774]  ? __pfx_bus_remove_device+0x10/0x10
[  765.475428][T12774]  ? kernfs_remove_by_name_ns+0x101/0x140
[  765.481162][T12774]  device_del+0x524/0x8f0
[  765.485549][T12774]  ? __pfx_device_del+0x10/0x10
[  765.490432][T12774]  ? __pfx___mutex_lock+0x10/0x10
[  765.495467][T12774]  usb_disable_device+0x3d4/0x8d0
[  765.500506][T12774]  usb_disconnect+0x346/0x9a0
[  765.505190][T12774]  hub_event+0x1bbb/0x4d30
[  765.509614][T12774]  ? do_raw_spin_unlock+0xf5/0x200
[  765.514744][T12774]  ? register_lock_class+0x31/0x2e0
[  765.519965][T12774]  ? __pfx_hub_event+0x10/0x10
[  765.524736][T12774]  ? rcu_is_watching+0x16/0xb0
[  765.529685][T12774]  ? process_scheduled_works+0x97a/0x1630
[  765.535419][T12774]  process_scheduled_works+0xc3d/0x1630
[  765.540986][T12774]  ? __pfx_process_scheduled_works+0x10/0x10
[  765.546992][T12774]  ? assign_work+0x3cf/0x5d0
[  765.551615][T12774]  worker_thread+0xa47/0xfb0
[  765.556239][T12774]  ? __kthread_parkme+0x71/0x1f0
[  765.561204][T12774]  kthread+0x38b/0x480
[  765.565286][T12774]  ? __pfx_worker_thread+0x10/0x10
[  765.570411][T12774]  ? __pfx_kthread+0x10/0x10
[  765.575005][T12774]  ret_from_fork+0x514/0xb70
[  765.579602][T12774]  ? __pfx_ret_from_fork+0x10/0x10
[  765.584759][T12774]  ? __switch_to+0xc89/0x1420
[  765.589498][T12774]  ? __pfx_kthread+0x10/0x10
[  765.594101][T12774]  ret_from_fork_asm+0x1a/0x30
[  765.598982][T12774]  </TASK>
[  765.602329][T12774] Kernel Offset: disabled
[  765.606670][T12774] Rebooting in 86400 seconds..