last executing test programs:

8m43.216155158s ago: executing program 3 (id=1393):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2e, 0xfffffffe, 0x7f0f, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3ff, 0x772, 0x40, 0x3, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x552bc1a7, 0x4, 0xbc, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x2, 0xfffffff7, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xf93d70af, 0x50bf, 0x1a, 0x1c52eea7}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffb, 0xf3, 0x45, 0x7, 0x1, 0xb}}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040b0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

8m43.023762874s ago: executing program 3 (id=1396):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
io_setup(0x2, &(0x7f0000000000))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885)
syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r4)
pselect6(0x40, &(0x7f0000000100)={0x5, 0xfffffffffffffffb, 0x20000000000000, 0x0, 0x5, 0x7ff, 0x1}, &(0x7f0000000000)={0x21, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd, 0x80, 0x4}, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076001750b5ba7ea59aabffff07020000", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x8000203d})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000100)=@secondary)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000380)="cd44", 0x2}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000000c0)={r8, 0x160}, 0x8)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7)
keyctl$revoke(0x3, r0)

8m42.644075084s ago: executing program 3 (id=1399):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x4, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896000000000100", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac0000000000000000000000000000000400", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

8m42.467663531s ago: executing program 3 (id=1402):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8014)
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
socket$inet6(0xa, 0x80002, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)={0x3, 0xd6, 0x10, 0x180})
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
r4 = socket(0x1e, 0x4, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
sendfile(r4, r3, 0x0, 0x8010002b)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x22)

8m41.071068148s ago: executing program 3 (id=1410):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000100)=@secondary)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7)
keyctl$revoke(0x3, r0)

8m39.966691814s ago: executing program 3 (id=1414):
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0xb1, {0xb1, 0x3, "f8c42c02f558267bb77b4cae566c21ef17d56559d9268c98512e110ac6bb679617b4fb6e1a97b5033a63b3f94b4bfa4421e8a662b45abebf8638bddb7bfa6d05c685baa87fdd60af9a8ad8e07ae3e31746ebd2b00020d3dbb5ee535e4aca2154a92b9e410880e8e307b8a486df037a552b3345be5322cec260fa60cd2363cd8da215c0ac9af99f7863ad79cf088d5757c38dbc160b11dc9e3f057ec05a76a3ca3d66c18dca2266aea97e5edf70b608"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "de700ce24054cbe0e09dd944c747bd74efbde8ecf8b1cf7f"}}, &(0x7f0000000100)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x4}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x80, 0x0, "52d5f7ea", "6ad9b610"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x9, 0x0, 0x6, 0x9ab, 0xfff}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x5, 0x6b, "556f3886d62369d961a8d36f817e8cf1ae5a30738f90ae026ca053bf2f8f13ab842dd898205ef9813699076a41a335a6bee79676648ddac615fc0d5b42948e1623e1378136e3171ba55130bf1dd261094830ea6ff8d25739bf6f102e4c3423abf5befc8bbc7ab4c5d4a0e7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6f}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "e3f6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "669f"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xfa}})
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0xd1, 0x2, 0xffffffff, 0x8], [0x7, 0x80000000, 0x0, 0x0, 0x0, 0x2], [0x400fa, 0xc, 0x0, 0x0, 0x0, 0xc]], '\x00', [{0xffffffff}, {}, {0x7, 0x100000}, {0x9}, {0x0, 0xe123}, {}, {}, {}, {0x0, 0xffff}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0)

8m39.084480784s ago: executing program 32 (id=1414):
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x20, 0x23, 0xb1, {0xb1, 0x3, "f8c42c02f558267bb77b4cae566c21ef17d56559d9268c98512e110ac6bb679617b4fb6e1a97b5033a63b3f94b4bfa4421e8a662b45abebf8638bddb7bfa6d05c685baa87fdd60af9a8ad8e07ae3e31746ebd2b00020d3dbb5ee535e4aca2154a92b9e410880e8e307b8a486df037a552b3345be5322cec260fa60cd2363cd8da215c0ac9af99f7863ad79cf088d5757c38dbc160b11dc9e3f057ec05a76a3ca3d66c18dca2266aea97e5edf70b608"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "de700ce24054cbe0e09dd944c747bd74efbde8ecf8b1cf7f"}}, &(0x7f0000000100)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x4}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x80, 0x0, "52d5f7ea", "6ad9b610"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x80, 0x9, 0x0, 0x6, 0x9ab, 0xfff}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x5, 0x6b, "556f3886d62369d961a8d36f817e8cf1ae5a30738f90ae026ca053bf2f8f13ab842dd898205ef9813699076a41a335a6bee79676648ddac615fc0d5b42948e1623e1378136e3171ba55130bf1dd261094830ea6ff8d25739bf6f102e4c3423abf5befc8bbc7ab4c5d4a0e7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6f}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf0f0]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "e3f6"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "669f"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xfffd}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xfa}})
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0xd1, 0x2, 0xffffffff, 0x8], [0x7, 0x80000000, 0x0, 0x0, 0x0, 0x2], [0x400fa, 0xc, 0x0, 0x0, 0x0, 0xc]], '\x00', [{0xffffffff}, {}, {0x7, 0x100000}, {0x9}, {0x0, 0xe123}, {}, {}, {}, {0x0, 0xffff}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0)

27.789114446s ago: executing program 4 (id=2988):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10800, 0x4}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) (async)
unlink(&(0x7f00000000c0)='./file0\x00') (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x42840, 0x3, 0x4}, 0x18) (async)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x1, 0x3, 0x20, 0x1e5, &(0x7f0000000180)="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"}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000005c0)) (async)
r2 = fspick(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x1)
getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x144}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x950}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040004}, 0x8a0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000840)="308a62c3b2837155eb6880f12e9b000ee0b660b673ed34b83b02ffbbc4e3333a3d3f5646bb001509a0a6146057e225647eee7f511f6344f0ad2414485c22496c34f2acb2ea3921851565a2110fdeb6cdb5ba820a7f401f3d6315ed1320cdf25e77c02933d8648211b098322113b05ea12d24c9a4a86b3971bf71", 0x7a, 0x40, &(0x7f00000008c0)={0x11, 0x5, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000f40)={<r5=>0x0, 0x3, 0x6}, &(0x7f0000000f80)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000001080)={&(0x7f0000000900)=@in6={0xa, 0x4e24, 0x7, @mcast2, 0x427a}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000940)="9fe7adf1b4f171cc03374f6bd6f12f6c2242df6be73ad8250783e881b3ebe59ffaedf0b30b8df7b5b45b2d29ee3fc6ae3528a37642733ced50b3cd6f439ad8f24f152c7401e4ade61a6d2dd7116c8cc0d1c80b014b732f1a7b3379593325ccee653d1b0a9e45a37c4c310fcac06338c4a4c1e5602da53b3a4f0d2fb59908a1cbc4c6b9c9ef275ef49da54905cf9e623ca04952165c9d77e545d7796423c154e1507b4ed4433758b912ea354c254e4c6134e7f50776d936ef417c108430e3633ddb1985603d27", 0xc6}, {&(0x7f0000000a40)="09cd208a4ee3b526230ff74ab3776cef2143ddbb6ed0756bdf2425e0b67fa463d7ffc4191a9d3cf8b0d9e6470b8cd03d0900188b497dc44fd297ebec770b49632fda5ab55fb8b9b736b14e70cfa5a53d61526689688e97a508013cd066a9a3d8584ba17da9d9e1fd93b221c426bd850f23103cbc83c643685045cdda72f7ede5416e465b1652c7d523534fb9b79b4d8def36a19ecf0670019fe921c222d498ee84f6c911ce38f2c19364f4dc090826448a3cf622d5f11f00294cf517f983da54fe8d3e23d4a5d1500ac8480ed0ea0ef018d6d4689351e6", 0xd7}, {&(0x7f0000000b40)="bb964dcc13e654b72fc4d934421509b651d4fffc3bec4c2874a26b094d763e879c1bd6311915a5fbfe038202c682cbc7aa75858317", 0x35}, {&(0x7f0000000b80)="bfcd3d381dd6ac39759a5bc35522bcd7fd5fc6ee1095a9423a12f3d64c96c24fc0ed4df201be0a607218681f3c2fdf3624e230f2e8fdc091092d8aeb1610", 0x3e}, {&(0x7f0000000bc0)="da84bbe627d7ec35ab85b857", 0xc}, {&(0x7f0000000c00)="e9f4e5de6d69648e5467f0ba927925a9827edfd9a8daafaae6011f874aa5c4ee669a6b83e0722b2a91246bbf3258503908d2b1dcf1ae831508412b839f85dd5b0c92ce3c29b2e00bd15b9b47dc1bd606aab5f76d32e0b2466f82d4bebc8171b42b35e9842647a3a08e6854e7d38d216ed0d9fcc7f4e67c7ec92cbbb7057b1eefe840f45322aeb9f7802ec56847465faeea5591c8998031135597777b496dfc16e8d8db2fae0e5c9eb54156108027455b9507", 0xb2}, {&(0x7f0000000cc0)="8d3c95b6d1d47921bd61490e5d2f7ad96628c295121241092c9b21fabeb4a73f8be47d86716bace837cb0f740f3aae27e9b411d74c4f5861b93f636707456ecd028321cf312159c21fddd1c05abe39e10a37ce36e822f2a77841f26e57c55b4a4c8e8a6f0ae7941e6a79e9c39c1c1bd258b496f2f18eefc554a6dc7ab0172fd3b30a16160830b5236233abee688a6a932860d185d7e6d1c100d743e5752066e132b41ddb37053e2035677883538ed86bc692d30b963f5acee092ad71aefc2cec778d717a006041", 0xc7}, {&(0x7f0000000dc0)="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", 0xfc}], 0x8, &(0x7f0000000fc0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8202, 0x52, 0x7, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x52}}], 0x88, 0x8010}, 0x20000000)
getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f00000010c0)=""/74, &(0x7f0000001140)=0x4a) (async)
r6 = fsopen(&(0x7f0000001180)='securityfs\x00', 0x1)
r7 = fsmount(r6, 0x0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r8=>r2}, './file0\x00'})
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000001200)={r5, 0x80000001}, 0x8) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001280)=@generic={&(0x7f0000001240)='./file0\x00', r1}, 0x18) (async)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000012c0)={0x1, [0x0]}, &(0x7f0000001300)=0x8) (async)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r8, 0x8000000)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x10000000)
syz_io_uring_submit(r10, r11, &(0x7f0000001340)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r1, 0x0, 0x0, 0x1, 0x0, 0x1})
socket$packet(0x11, 0x2, 0x300) (async)
syz_io_uring_setup(0x3275, &(0x7f0000001380)={0x0, 0x1560, 0x4000, 0x0, 0x22a, 0x0, r1}, &(0x7f0000001400), &(0x7f0000001440)) (async)
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000001480)=0x8001) (async)
sendmmsg$inet6(r8, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000014c0)="a40bc29ba9afa9fecb37a10e6299e41e78df193ef067207a399d6fdddc0f0a0acdde4b6afa9f6cbdc43f46572e1fbc93bf75a2dd2a18129d06511b575ed418926a276d92f5a08cf2bc6b07b2163257dc498e60be7c2e398768702ef34b603998d5bd72591a0d61b98c0f4eaf903677c059686ebfa932059c1b259fff8800921c63d5d97493d34d52f4ca9db869a542acf86fe5a907711e7f0aaa27d6b602ee4609eedcd8abade77ffdc028322ca6b0ede8d7f5eda4e1f6a504cd9a14272e248060c4f4d8abf8f4d1c3918f81ac", 0xcd}, {&(0x7f00000015c0)="2caebe0f14c784f21394b1a748d2cb1416da8ec66bf174a86ac9935be595def2f30d6232467baac338057fa90379a78303fa30c708c20d821e559de3ba7c748a293cd88a9d61c43f4913502f1e2a2f66239e719dfceef8d3dc84e27c15aea8363a4d", 0x62}, {&(0x7f0000001640)}, {&(0x7f0000001680)="0d303a14cf9b61f4e498341fb2dfbcc322514f2234e335ed03806376a2bf0b83e2eab51971ce39e6c9da025e71efb3988f5b42320dbc63e94dea02d854d073", 0x3f}, {&(0x7f00000016c0)="aa925c95b241f9a4e60ebde2e917653d3e9d2627dbf1ec93e945d5a5d67e829651b1366935aa5d5cda48c4ea4fc4ef535386e2bb929875c114a3738fa2b5473a2ded1882eb83de9bf0e9226a495b0b38020cd7fdd1f1d40866306cb70ed57719ccfd103ef65772ab98a62e010336d10d17d6f7773b9a5908c5a912cda02f9721331c9ab34f74da7caddc9bc930ba0bf0383db54d0c024185ba4742abb4b733e9db4cdfe035d0a1743444ef5eec83c8ce1933b75ec82039df73c9511f6b3d09bd38d5feec5197e80d55970374e01f48103ee3f770d73f118d54d1c0adf3443f8e6f3f20cfb1", 0xe5}, {&(0x7f00000017c0)="1c0c264cbdd6bb84f817b355ecb2c5e318f2c69169ed35ff381f4217c630c79954fd77c08d3744a73cd9b1182871b69c821027cf7ff06880949c713eba45195a26dfe5619792ea8a4868e38d457e39be1a5776fd71b8351d479fe71b546856e81b2fb0d4492fc495eabd24904245eb4d5b9a1b28076481aa388b0d6a1935c7ad7cf903ba0a03a015d136a252eaeec75755a0184c800ee1f8e3cdd9e6be458836e07057f94c9eefbf5360c24aa0374bcf6a51bd916f3488a6045f6cdacd6cc7355d663f377c", 0xc5}, {&(0x7f00000018c0)="6b88bc4042617e6084480c74500017797662068272dffbc8a5debbc5c8d6069d191e6adcdf44a44b3f9b12ad371924c8b9415c9ff4da3942545d94ce301299dd722abb955ada16d04fba6dea8b07ea0cb31741e3bb1050378015e1bf644571177b4ecdeb4e007ea44f8ece0dff9b687ebb0c75120d0c0aeabb34f0e392a241b8a3c880a72cbdc67cd0c99ef1e47a7c9fa3b9361d740f593b1c8b46299500137850545b4a05a25259c06fff23d9aa156f284752d6d13bead25c187d053f6ca2bf485e", 0xc2}, {&(0x7f00000019c0)="06c9b1f2529fda388c99f1c7079fd7fc484aa29f198a67106f61347ec5896c7e33069dd95300faae93d91cad6ce3aece7fd33cb88dbc07ed7b6d8ab2db5c3dcba1752d65ca1d4d0df39115c07bc6b298b50d1706b24a0faa210d2f", 0x5b}, {&(0x7f0000001a40)="411dcce7c072b7ac5bf55ff73abab4d1ba51b9c15127da64426843095c056f8e69a1355ff4899708488564fb7529520bf165fb4f4a153f185a6e54d6043f6b760a03f5efc401d2344cfc6e03aaed793b1e82360dd33c5202af2c47aba761b37d4c511f9a5fbc7ce2e428d231b1f7c39832812482e389f6155bc8a0fe75b7570f22cf3af3722de31daf16caff4c97936b227bcd3ba75638308d5b1d525148d95f7b4887d86de383e8fcf5a8ed365cb99d6c2e7460ef90d8b3366c2316e259aa95e556350665f91616fb1f468da9d466e1ddd4d41b22cc8a28492a", 0xda}, {&(0x7f0000001b40)="d9d2fc26f4b9cd2ed7d4b5c36c6f26a515c0457573934ef22769842750ad09634b62cdb1a15f0c62b81fffca1e8c19f0fd29539886a603c730c9b0f8fae51f4b9a7cfe72f29c882ba3e56cd377f0ea0ebb72495cd6696abd5ac8cf84c1ce2767fee5924e53e45bd49321b4695a86ce4d6745eee9eaffbd94a3bc98fc23020b1dc858561a6327814d6e4fff3ac9500f65e8be5271278b61eebc504b13f6c2afa3dbb358f20c98f5d29df6e1a163b2acb28df83aca33207273870fa281f588e27a9a647e", 0xc3}], 0xa, &(0x7f0000001d00)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xbc7}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts={{0x150, 0x29, 0x37, {0x2b, 0x26, '\x00', [@generic={0x4, 0xf5, "f131b82ec998b0e9c2ba9c90c80af4b07023f0403facfb33beddfe2fb0e680272ddc92ccad01f43fe2510b2ca8cd62de8b294755d9f52f0e2e6e03c8a8a17b3c444144c643bdb4ea9fd06bea3acafaeb02ab7b428610397fc198b68795d2cc8d44dd1b30c45f8cd301cdb77e2bcdf1c6d941b85fed594fe47a9cea18b015fe4b97d0877716dc7753e3e7e2c5982b0360fb6287dd315f8a67b61fba41860cb5d1bf2f4b4f188e5b1a3cc5d29913a7d32478a928d392687ed2ac15d47728f4a7867fea86c499d177f237d9f5e7a4bdee5ce30b11b6504ff539b6ec1d03033ec022e57346bc5c9ef0f932d0f3d58301f030ccaedc38d5"}, @pad1, @enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x81, [0x4]}}, @pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x73, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0xf800, [0x3, 0x1000, 0x13, 0x5, 0x8]}}, @enc_lim={0x4, 0x1, 0xb}]}}}, @dstopts={{0x208, 0x29, 0x37, {0x2f, 0x3d, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x0, 0x1ff, [0xf, 0xe4d, 0xfffffffffffff6d6, 0x80000000, 0x2, 0x10, 0xa, 0x9]}}, @generic={0x2, 0xb2, "b999f0f9fc4812737b66d742d10b05435c501c8f95a7095868e168871dd4fe5d1243d9b355485b9f9f5936be8835f7a14930772dc51fabd6c4871e310ceced3d7db68930dfb97fa1fb17fa2949f0e629727e3bfddc739ec2873953bc134d31c9ed116e805a98ae52fc74c30bab891b79e47f7671096fed44e561ec724c76e6b8b65baaada98fe6df59751abaef247425254603aa5af182cdba54efe917d73043c7cded4215aaf105ffad4367886a5fcb070e"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0xda, [0x9, 0x0, 0x10, 0x6, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x90, 0x6, [0xffffffffffff0001, 0x8000]}}, @generic={0x8, 0x7a, "72258dbb3ef60896e1cfac3d0e3bdee0a69af796b421bd5bd4e575481e556e9efdcc1d9d097b7ceff6eed205cb813733d34af5e2cb51c932c0ae82863bfc57b338589dacb7555e24aa128ce3415fb818a2bffdad02d8496d1599dec1e9943cf0c40ba21ba70e8f44f2716f9c0dcbe408f4b848d898321a2b10a0"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x29}, @ra={0x5, 0x2, 0x5}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x428}}], 0x1, 0x0)

27.497886553s ago: executing program 4 (id=2991):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2b, 0x1, 0x8, 0x5, 0x43, @loopback, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x7800, 0x4, 0x2}})
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x1c0, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @pic={0x9, 0x1, 0x5, 0x7, 0x3, 0x5c, 0x0, 0xd, 0x57, 0xd, 0x8, 0x7, 0xc4, 0x4, 0x2, 0x9e}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a30000000160a010100000000000000000a000007040003800900010073797a3100000000090002007379541aea7e8e51f4a700001100010000000000000000000700000a"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
io_uring_enter(r5, 0x202217, 0x7721, 0x16, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17)
syz_kvm_setup_syzos_vm$x86(r9, &(0x7f00009f7000/0x400000)=nil)

27.248860257s ago: executing program 4 (id=2995):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000980)={{0x1a7e, 0x2100004}, {0x7}, 0x5, 0x6})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540))
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r4})
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x20, 0x31, 0x7, {0x7, 0x2, "ee797720f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

14.887464551s ago: executing program 5 (id=3024):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
socket$isdn(0x22, 0x3, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x82}, 0x4000)
socket$inet6(0xa, 0xa, 0x7f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff)
read(r5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110b, 0x3})
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x8, 0x2}, @fda={0x66646185, 0x4, 0x0, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/183, 0xb7, 0x0, 0x1b}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})

12.360481825s ago: executing program 2 (id=3029):
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac0000000000000050617d4000", "f4bd000000801900", [0x0, 0x2000000000001]}})

12.100257428s ago: executing program 2 (id=3032):
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100)
fallocate(r1, 0x3, 0x2, 0x8000c62)
ioctl$KDDISABIO(r0, 0x4b37)

11.729806344s ago: executing program 2 (id=3033):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
dup(0xffffffffffffffff)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4})
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
shutdown(0xffffffffffffffff, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xb, 0x491, 0x0, 0x0, 0x2000, 0x20, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000001140), 0x10)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x200a43, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0xfffffffd, 0x0, {0xa, 0x7, 0x0, 0x0, {0x0, 0x5e22, [0x1, 0x1, 0xfffffffe, 0x547], [0xffffffff, 0x6, 0xfffffffd, 0x49d], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002bbd7100fbdbdf250500000008000200080000000800040008000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)

11.404703086s ago: executing program 1 (id=3035):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8301, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000001e40)={0x1, [{0x1, 0x18, 0x5, &(0x7f0000000300)="2b95e0"}, {0x3, 0x18, 0x3, &(0x7f0000000480)="da6e2f"}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x11, 0x80000001, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x0, 0x18, 0x7, &(0x7f00000008c0)="530a02"}, {0x0, 0x0, 0x401, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x644, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x0, 0x0}]})
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000002840)={0x0, "40fe0641bc2f78321c60922ae24a660ee43b99347e6a60571d768fc999a0afc5ff9fce2eb1684b4ed7328ea49291a823932bd9b61f9b20afbd9b9ec109364e02", 0x11}, 0x48, 0xfffffffffffffffe)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40010)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)

8.845825825s ago: executing program 0 (id=3037):
socketpair(0x25, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0xfffffffa, 0x3, 0x4, 0x2, <r1=>0x0}, &(0x7f0000000080)=0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @remote}}, 0x200, 0x8, 0x0, 0x101, 0x1, 0xc5, 0x30}, 0x9c)
r2 = socket$l2tp(0x2, 0x2, 0x73)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={<r3=>0x0, 0x4, 0x20, 0x6, 0x12}, &(0x7f00000001c0)=0x18)
sendto$inet6(r0, &(0x7f0000000200)="598829acf399960eda1e6b80ab099e14e1e1fef15e08ee255bd60a2f60a8a20aeb1796144f9d53a2af8b0cebc5f2ee652583819da9a022a310c4c3e552ab1f8b142b5ed15cccc3676903a424200a1494d8fc704daf8655cbbafcbeb1cb5f88493df54d2a2470e3186b783606b223f5abedc594fbcec09dacfab405226e773bc6d42c436dfb65c14b1d114e04a14a344ce17ed8adc3a46c859aa52b8037192341571646dfa203a48af997f772", 0xac, 0x4000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0x100}, 0x1c)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17)
r5 = dup3(r2, r0, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="670f794cd30666b8280000000f23c00f21f8663500000f000f23f865660f3802c20f01c866b96108000066b83200000066ba000000000f30f40fae6a44baf80c66b82f0cdd8766efbafc0cec66b9070b00000f320f01b8d25c", 0x59}], 0x1, 0x18, &(0x7f00000003c0), 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, ']'}, {}], 0xa, "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"}, 0x10d)
clock_adjtime(0x1, &(0x7f0000000580)={0xffffffff, 0x0, 0x10000, 0x1000, 0x3, 0x1, 0x2, 0x5, 0x4, 0x0, 0x8, 0x9, 0x1, 0x3, 0xb07, 0x4, 0x4, 0x7cd, 0x3, 0x5, 0x40, 0x6b, 0x1000, 0x7, 0x9, 0x60600000000})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000680)=<r7=>0xffffffffffffffff)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
getrandom(&(0x7f00000006c0)=""/164, 0xa4, 0x0)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f00000007c0)={0x3, 0x8f10})
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000800), &(0x7f0000000840)=0x40)
fchdir(r8)
socket(0x22, 0xa, 0x3)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}, 0xffff8001, 0xebc4, 0x3, 0x81, 0x2a, 0x3, 0x8}, 0x9c)
clock_gettime(0x2, &(0x7f0000000940))
r9 = gettid()
ptrace$setregset(0x4205, r9, 0x2, &(0x7f0000000a00)={&(0x7f0000000980)="bf56a340dc4fac7d1ce9eab5075c23fdd20f453ed1f8854efbe5a805fbfaca1cf5dfe9c878853fd9c4cde922a7866b60a672b4ba61a08fb04ca8550f222e81c5be95ff2367a0b924aab146fce50eab87d0e62e9b407eb10fda5a", 0x5a})
writev(r6, &(0x7f0000001c40)=[{&(0x7f0000000a40)="15f83456c2f4c5d4ee283612e1fc911d8857747ad8dc0aa974815d4cc9908bf131e9ab1a964e9407d970f607601df3bafd588395f87ea83ad43e25e5f23b20b3579603f317463d74d09402c9964db34c925ff698a1f0dab62d5019ae34cdfd10ebeea315b59de83ffed1a53ef4469a893af7ef5293a1c30d1eec2eda321e490140022beee3176fae1a94ecc35c1b071cf8799deee8a572c4c48c646fc1cc95febaa5", 0xa2}, {&(0x7f0000000b00)="6a8f7eb0f17a2605c333bb1a4879de8e68baf06b8f86a50420ccd1e753362db8b9d2aeae364f9916dec0ba715efbfd8aa452a5e7f5712de6bb", 0x39}, {&(0x7f0000000b40)="89b5de11becf03838e2d1b4c537bd70d77bd6ad7f6c1ee0d6a0d649ab90799de4c229a2ab3fff4c5fed2504df9464f83e437c8840d99e896d2fb3f7a23bdf7481d263f6f2df52bfe53148e603b75e336486af5482c7f21c014e3e685a7a9f45e3dfe4a1cf66f828b52b5eac603877b9fb55b331502fd5645e7b8d79ab3bf730f3b2411973d646ae50b33be79d6590f37fd972d7735e560a978bd23291a12cead4e3ccb56446f3485b5479016b923d7016cd44fc249f5b026863faa2aa9837dac86f9fe54648dad4cf984dcdfab5ec088581e184e2ca5cc84123160864b", 0xdd}, {&(0x7f0000000c40)="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", 0x1000}], 0x4)
r10 = semget(0x2, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000001cc0)={<r11=>0x0, <r12=>0x0})
semtimedop(r10, &(0x7f0000001c80)=[{0x3, 0xb7, 0x1800}, {0x3, 0x7, 0x1000}], 0x2, &(0x7f0000001d00)={r11, r12+10000000})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d40)={0x0, 'pimreg1\x00', 0x1}, 0x18)

8.676477494s ago: executing program 0 (id=3038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d0000000024000280050003000100000008000440000000060800014000000015080002400000000109ec400073797a30"], 0xd4}}, 0x4000040) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2, 0xc07}, 0x8)

8.474098125s ago: executing program 0 (id=3039):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a502ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0x28, "4b486913b1f26cbc055a65ad9ad1617d4ead7297c4d1387d5406af2231c211ea47bea33588320c62"}, 0x0, 0x0, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x2}, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b15, 0x0)
r2 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000900)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
r7 = socket(0x10, 0x3, 0x6)
r8 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe3, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc, 0x0, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
timer_create(0x3, 0x0, &(0x7f00000012c0)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000001300)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timer_create(0x3, 0x0, &(0x7f00000050c0)=<r11=>0x0)
timer_settime(r11, 0x1, &(0x7f0000005100)={{}, {0x0, 0x3938700}}, 0x0)
timer_settime(r11, 0x1, &(0x7f0000006340)={{}, {0x0, 0x989680}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x8101, 0x0)
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_loaded', 0x301002, 0x150)
r14 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_IRQFD(r14, 0x4020ae76, &(0x7f0000000100)={r13, 0x7, 0x1, r13})
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x24, 0x0, r13, &(0x7f00000003c0), &(0x7f0000000140)='./file0\x00', 0x4, 0x800})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x880, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r13, 0x4068aea3, &(0x7f0000000240)={0xdb, 0x0, 0x2})

7.705881885s ago: executing program 5 (id=3040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1ec089bfb0ed"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)
syz_usb_connect(0x0, 0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="608c876852705574c95755ea9818db98f29f2035205b98e4d8c0cd74a420f83357ecff0f83e8b4ec9bdfd6742492c80f60247f5cffe7f8aa244c34aac7c39264359af3bcdd833c4d7b3df30e1c1dcb72b9c4026cd0ca332d74c8ca3f4a4af596f4f334136ee7de2f6c0bc7f7e0bac9d2139f36ec8273e4c22ef69b7ab18f738340bc8b9b7cf9348f584ea038b38f98292131f9831e0b5677e0c70fe958c4a7b7125940175ecc2f7516893f9d095e72fc5faec86c8b92a984450521a435d605bc9ff2291445bd4535e6b2a3fe03df83046617aa0fa5c4"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1ec089bfb0ed"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async)
syz_usb_connect(0x0, 0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="608c876852705574c95755ea9818db98f29f2035205b98e4d8c0cd74a420f83357ecff0f83e8b4ec9bdfd6742492c80f60247f5cffe7f8aa244c34aac7c39264359af3bcdd833c4d7b3df30e1c1dcb72b9c4026cd0ca332d74c8ca3f4a4af596f4f334136ee7de2f6c0bc7f7e0bac9d2139f36ec8273e4c22ef69b7ab18f738340bc8b9b7cf9348f584ea038b38f98292131f9831e0b5677e0c70fe958c4a7b7125940175ecc2f7516893f9d095e72fc5faec86c8b92a984450521a435d605bc9ff2291445bd4535e6b2a3fe03df83046617aa0fa5c4"], 0x0) (async)

7.011179277s ago: executing program 2 (id=3041):
syz_emit_ethernet(0x4a, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac000000000000000be5a94100", "f4bd000000801900", [0x0, 0x2000000000001]}})

6.810671952s ago: executing program 1 (id=3042):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911000076115d4117e1cfd5fb0c0000008000000000616e000400028008000500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x40040)

6.698908119s ago: executing program 2 (id=3043):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x100000e0, 0x7, 0x7, 0x4, 0x2, 0x5, 0x2ca, 0x5}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004334}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200004c4}, 0xc000) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200004c4}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = dup(r9)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0)

6.572609096s ago: executing program 1 (id=3044):
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'})
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
unshare(0x22020600)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0)
write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x101, 0x3a, '{}[\b\xdf', 0x3a, ']', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x43, 0x50, 0x46]}, 0x32)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

6.299083426s ago: executing program 1 (id=3045):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x7, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10)
readv(r6, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe)
ioctl$VT_SETMODE(r9, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c000280060092000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x4000)

5.473787687s ago: executing program 2 (id=3046):
r0 = dup(0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@rand_addr=0x64090100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = syz_io_uring_setup(0x10e, 0x0, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={<r7=>0x0, @rand_addr, @local}, &(0x7f00000003c0)=0xc)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x2c0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x190, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r8)
sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="04005e80"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004000)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES16=r3, @ANYRES16=r7], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0)

5.30662395s ago: executing program 0 (id=3047):
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x22, 0x2, 0x24)
close(r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1000000}, 0x0)
r3 = memfd_create(0x0, 0xe)
ftruncate(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
writev(r4, &(0x7f0000000200), 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
preadv(r4, &(0x7f00000016c0), 0x0, 0x187, 0x7)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getchain={0x6c, 0x66, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xfff2, 0xfff2}, {0x1a, 0x9}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xa53}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0xda4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xf93}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003ec0)=@newtfilter={0x1580, 0x2c, 0x605, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xc}, {}, {0x5, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x1550, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xeb}]}, @TCA_BASIC_EMATCHES={0x1518, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0xb}, {0x7fff, 0x2, 0x800, 0x3, 0x8, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf800, 0x3, 0x9}, {0x7, 0x100, 0x80000000}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0xe42}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x400}, {0x99f9, 0x7f, 0x7ff, 0x1, 0xf, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x12a0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0x8, 0x9, 0xc}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x32, 0x5, "624be5e88c3eb4bc597a2d348e5e5674fa5a623f6b2c992724fbb48a44519a02c27570c108b8dddf2bfd8df1ccbf"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x30}]}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x101, 0x7, 0xc524}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x4}, "65826d24ef0bf1378034ec6194dda3d2c8c0f05d304bc9d3b1be2e1165ca2b54583e931df564b865ed543178711023bb82696a0e876ac515aac3325b4e031466bfa95f84f726ac8d6ea0d7c76478bd2ef664af2e45c6e21c097ac80c869b79e6afbab490605a572a1973fb1579f431b2a84e79fef122a6645e89d7fabb6ee6114d0f9da048dda720379f7eca1ba60287828a683680cb4f12d3eda1975ebe5639d099de1cd9f8d0dc1fe6085a716308b2d6d99dda5460487d8aca41651f661d98136502de8cdb969ff91114f955aef66ab963a357ec72254b"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0xff}, {0x1, 0x7, 0x2, "942ef973077812"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x400, 0x8, 0x8}, {0x1, 0x6, 0x4}}}, @TCF_EM_IPT={0x103c, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xea}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "ce6c66"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x81, 0x4, 0xd9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1, 0x1}, {0xffff, 0x7}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="85046f8ad1504295351e"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5e973891f9"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="58861999180ab20dc4", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x2}, {0x2, 0xd, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="4ef9e1cb"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xcf24, 0x5f}, {0xa, 0x3, 0x5124d57e24154096}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="285b163ea156e0"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="1d35ad9095f6f4", @TCF_META_TYPE_VAR='x', @TCF_META_TYPE_VAR="bf"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x89}, [@TCA_EM_IPT_MATCH_DATA={0x30, 0x5, "ee8edb2613c4aa44938b80fba89bf0d61bd412e4ac70a2543c580973669278b9c614d078464208ed9ee930f9"}]}}, @TCF_EM_CONTAINER={0x2c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0xd}, "a3e134deadf8a38d94a6da338ba048ec95b15e776b6598764c6c457f07"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1000, 0x3, 0x10}, {0x5a1e, 0x2, 0x4, 0xff}}}]}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x8, 0xfffe}, {0x0, 0x2, 0x3}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x6}, {0x1, 0x2, 0x6}}}, @TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x8000, 0x0, 0x2}, "f1f3148f7549b217318497d1e032d0ab29130496b37bc4f1cee3c454f0d56960e15dc9b038d8619525cbdafd052b9b3db646e0be464a5b1a896991104d14182dae8ab1b607061972f7f696aba67ef4e853293eaf66da508ca2b26e3dd7bba3b136b6c3366233193672951f05bed489f160a83d3dfda1219cde67608f4af6cf7f6b6b0d90297f82eb7d6a4cfe8c379436ea7dbc46a018c49e6a3c"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1000, 0x7, 0x4e6}, {{0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0xb1ef, 0x4, 0xe}, [@TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="0689", @TCF_META_TYPE_VAR="0508f395a04092a710cd", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="2ffb50a84e49890200"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x7, 0x3}, {0x4, 0xcb}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="48287e4e80", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="cfdf4671", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="bea9e4cb", @TCF_META_TYPE_VAR="d7a4bc31", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="1288"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xce, 0x2}, {0x10, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="0febde5b4c5205", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='n', @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x6}, {0x7fffffff, 0xc7, 0x1ff, 0x2, 0xc, 0x2, 0x2}}}]}]}]}}]}, 0x1580}}, 0x20004084)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x398, &(0x7f0000000340)=0xffffffff, 0x0, 0x4)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x29)

4.607642273s ago: executing program 5 (id=3048):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0xc00e, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0)

4.304545309s ago: executing program 4 (id=3001):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r5}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r9, 0x2db26000)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r10 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x3, 0x18000)
mount_setattr(r5, &(0x7f0000000280)='./file0\x00', 0x1000, &(0x7f0000000300)={0x100000, 0xf5, 0x80000, {r10}}, 0x20)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1})
io_uring_enter(r6, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000ff}]})

4.238452968s ago: executing program 5 (id=3049):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.602766906s ago: executing program 1 (id=3050):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x47)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lchown(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1c4}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="00008a38bb5ef76954c20000a3683f7af8fa6f10d2cf12a2308f00000000"], &(0x7f0000003ff6)='GPL\x00', 0x81, 0xd2, &(0x7f00000004c0)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf25010000000800070009000000540008804c000080240002009959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb73370600459b3922040000801400020077673100"/126], 0x84}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000440)="e67ab166972ce298f4681ef5c755f60473b17b7887d62bd37cecdcbad562ef030000009005bc69f6c3c5238bebfbce42362d29d64c37eeaeec2d13731c56a864da45a465e64de62d", 0x48, 0x33)

3.025851434s ago: executing program 5 (id=3051):
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
unshare(0x28040680)
r2 = timerfd_create(0x0, 0x0)
timerfd_gettime(r2, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffffc}, 0x80, 0x0}, 0x0)
r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x87)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB])
sched_setscheduler(0x0, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)

1.485962492s ago: executing program 4 (id=3053):
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x309d00, 0xc2)
r1 = syz_io_uring_setup(0x1e7f, &(0x7f00000000c0)={0x0, 0xac24, 0x40, 0x1, 0x239, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000000))
close(0x3)
socket$rds(0x15, 0x5, 0x0)
io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

788.461641ms ago: executing program 4 (id=3054):
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@deltclass={0x0, 0x29, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff2, 0xfff3}, {0x4, 0x7}}, [@tclass_kind_options=@c_mqprio, @tclass_kind_options=@c_clsact]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r3, 0x6)
socket$netlink(0x10, 0x3, 0x15)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000001c0)={0x0, r5, 0x0, 0x0, 0x4})
close(r4)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58)
r6 = shmget$private(0x0, 0x1000, 0x4, &(0x7f00008ef000/0x1000)=nil)
shmctl$SHM_LOCK(r6, 0xb)

750.111602ms ago: executing program 0 (id=3055):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f00000000c0)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0xfffffffffffffd2b)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={r9}, 0x8)
syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)

296.323742ms ago: executing program 5 (id=3056):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffec}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x40, 0xc3d, 0x2, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x67, 0x0, 0x86, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
ioprio_get$uid(0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)

81.349797ms ago: executing program 0 (id=3057):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x510040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000014000000380001801400020073797a5f74756e0000000000000000000800170005000000"], 0x34}}, 0x0)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
socket(0x8, 0x3, 0xfa)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169b82, 0x189)
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
syz_open_dev$midi(0x0, 0x3, 0x88c02)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8)
connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
fsopen(&(0x7f00000007c0)='erofs\x00', 0x1)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=<r10=>0x0, &(0x7f00000005c0)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})

0s ago: executing program 1 (id=3058):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000002eb000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x4040010)
writev(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x2f)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a000020000280"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
unshare(0x40000000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x200)
setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)

kernel console output (not intermixed with test programs):

8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.201860][ T6108] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  896.202893][ T5919] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  896.225159][ T6108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.239121][ T6108] usb 2-1: config 0 descriptor??
[  896.307980][ T7026] usb 6-1: Using ep0 maxpacket: 16
[  896.331061][ T7026] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.353983][ T5919] usb 5-1: device descriptor read/64, error -71
[  896.360644][ T7026] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.372570][ T7026] usb 6-1: config 0 interface 0 has no altsetting 0
[  896.381549][ T7026] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  896.397414][ T7026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.413866][ T7026] usb 6-1: config 0 descriptor??
[  896.511003][ T6108] ntrig 0003:1B96:0008.0032: unknown main item tag 0x0
[  896.527520][ T6108] ntrig 0003:1B96:0008.0032: unknown main item tag 0x0
[  896.548639][ T6108] ntrig 0003:1B96:0008.0032: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0
[  896.603414][ T5919] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  896.660251][ T7026] hid (null): report_id 478693179 is invalid
[  896.666697][ T7026] hid (null): unknown global tag 0xc
[  896.677722][ T7026] hid (null): invalid report_size 58514
[  896.690753][ T7026] hid (null): unknown global tag 0xd
[  896.703557][ T7026] hid (null): report_id 40748 is invalid
[  896.720104][ T7026] hid (null): invalid report_size 4105
[  896.722673][T15229] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  896.730283][ T7026] hid (null): global environment stack underflow
[  896.764296][ T5919] usb 5-1: device descriptor read/64, error -71
[  896.778843][ T6108] ntrig 0003:1B96:0008.0032: Firmware version: 1.3.17.35.7 (0e62 7724)
[  896.783713][ T7026] hid (null): global environment stack underflow
[  896.828260][ T7026] hid (null): report_id 2022769709 is invalid
[  896.849360][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.858003][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.867144][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.877573][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.887243][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.896551][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.904174][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.914737][T15229] usb 3-1: device descriptor read/64, error -71
[  896.915029][ T5919] usb usb5-port1: attempt power cycle
[  896.958852][ T7026] cougar 0003:060B:500A.0033: unknown main item tag 0x0
[  896.975982][ T5891] usb 2-1: USB disconnect, device number 18
[  896.985819][ T7026] cougar 0003:060B:500A.0033: unexpected long global item
[  897.006095][ T7026] cougar 0003:060B:500A.0033: parse failed
[  897.032585][ T7026] cougar 0003:060B:500A.0033: probe with driver cougar failed with error -22
[  897.104969][ T7026] usb 6-1: USB disconnect, device number 57
[  897.163788][T15229] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  897.302624][ T5919] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  897.322617][T15229] usb 3-1: device descriptor read/64, error -71
[  897.335964][ T5919] usb 5-1: device descriptor read/8, error -71
[  897.443129][T15229] usb usb3-port1: attempt power cycle
[  897.582603][ T5919] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  897.603549][ T5919] usb 5-1: device descriptor read/8, error -71
[  897.800101][ T5919] usb usb5-port1: unable to enumerate USB device
[  897.862562][T15229] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  897.883298][T15229] usb 3-1: device descriptor read/8, error -71
[  898.132677][T15229] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  898.155970][T15229] usb 3-1: device descriptor read/8, error -71
[  898.360448][T15229] usb usb3-port1: unable to enumerate USB device
[  899.033920][T16138] vivid-000: disconnect
[  899.642872][T16138] vivid-000: reconnect
[  900.599583][ T5988] hid-generic 0000:0000:0000.0034: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  900.814080][ T5988] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  901.095478][ T5988] usb 3-1: config 0 has no interfaces?
[  901.112302][ T5988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  901.160631][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  901.195209][ T5988] usb 3-1: SerialNumber: syz
[  901.217057][ T5988] usb 3-1: config 0 descriptor??
[  901.459406][T16164] pim6reg: entered allmulticast mode
[  901.776803][T16171] dummy0: entered promiscuous mode
[  901.806210][T16171] vlan2: entered promiscuous mode
[  902.243535][ T5891] usb 3-1: USB disconnect, device number 31
[  902.908560][ T5988] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  903.079202][ T5988] usb 2-1: unable to get BOS descriptor or descriptor too short
[  903.100480][ T5988] usb 2-1: not running at top speed; connect to a high speed hub
[  903.124765][ T5988] usb 2-1: config 1 has an invalid interface number: 94 but max is 0
[  903.144867][ T5988] usb 2-1: config 1 has no interface number 0
[  903.178798][ T5988] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70
[  903.190191][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.198590][ T6108] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  903.212483][ T5988] usb 2-1: Product: syz
[  903.217024][ T5988] usb 2-1: Manufacturer: syz
[  903.221860][ T5988] usb 2-1: SerialNumber: syz
[  903.236900][T16221] vivid-000: disconnect
[  903.376992][ T6108] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  903.399475][ T6108] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  903.420220][ T6108] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  903.437479][ T6108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.473164][ T5988] usb 2-1: Invalid firmware size=18.
[  903.498208][ T5988] usb 2-1: USB disconnect, device number 19
[  903.506983][T16211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  903.566007][ T6108] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  903.718977][T16227] xt_hashlimit: max too large, truncated to 1048576
[  903.973265][T16221] vivid-000: reconnect
[  904.167588][ T5988] usb 5-1: USB disconnect, device number 59
[  905.191075][T16250] pimreg: entered allmulticast mode
[  905.320994][T16250] input: syz1 as /devices/virtual/input/input61
[  905.554650][T16262] fuse: Bad value for 'fd'
[  907.516294][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'.
[  907.927690][T16302] vivid-000: disconnect
[  908.362527][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  908.532636][ T5919] usb 3-1: Using ep0 maxpacket: 16
[  908.558164][ T5919] usb 3-1: config 0 has no interfaces?
[  908.567906][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  908.577327][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  908.585393][ T5919] usb 3-1: Manufacturer: syz
[  908.644458][ T5919] usb 3-1: config 0 descriptor??
[  908.704802][T16302] vivid-000: reconnect
[  909.105962][ T6108] usb 3-1: USB disconnect, device number 32
[  909.462693][ T5988] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  909.575725][T16327] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  909.659800][ T5988] usb 6-1: Using ep0 maxpacket: 32
[  909.672517][ T6108] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  909.694319][ T5988] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  909.714166][ T5988] usb 6-1: config 0 has no interface number 0
[  909.722470][ T5988] usb 6-1: config 0 interface 12 has no altsetting 0
[  909.750491][ T5988] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  909.769049][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.804133][ T5988] usb 6-1: Product: syz
[  909.808375][ T5988] usb 6-1: Manufacturer: syz
[  909.836830][ T5988] usb 6-1: SerialNumber: syz
[  909.890223][ T6108] usb 5-1: unable to get BOS descriptor or descriptor too short
[  909.905730][ T5988] usb 6-1: config 0 descriptor??
[  909.930135][ T6108] usb 5-1: unable to read config index 0 descriptor/start: -71
[  909.952207][ T6108] usb 5-1: can't read configurations, error -71
[  910.017615][T16338] netlink: 'syz.2.2652': attribute type 30 has an invalid length.
[  910.093224][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  910.254842][ T5919] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  910.265549][ T7026] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  910.273247][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0
[  910.283963][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  910.293917][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  910.302123][ T5919] usb 2-1: Product: syz
[  910.306680][ T5919] usb 2-1: Manufacturer: syz
[  910.311497][ T5919] usb 2-1: SerialNumber: syz
[  910.325767][ T5919] usb 2-1: config 0 descriptor??
[  910.344186][ T5919] usb 2-1: selecting invalid altsetting 0
[  910.422968][ T7026] usb 3-1: Using ep0 maxpacket: 32
[  910.432307][ T7026] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  910.462607][ T7026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.479806][ T7026] usb 3-1: config 0 descriptor??
[  910.705276][ T7026] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  910.729356][ T7026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  910.751920][ T7026] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  910.761389][ T7026] usb 3-1: media controller created
[  910.792138][ T7026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  910.906182][ T7026] az6027: usb out operation failed. (-71)
[  910.918750][ T7026] az6027: usb out operation failed. (-71)
[  910.927310][ T7026] stb0899_attach: Driver disabled by Kconfig
[  910.933802][ T7026] az6027: no front-end attached
[  910.933802][ T7026] 
[  910.941507][ T7026] az6027: usb out operation failed. (-71)
[  910.948963][ T7026] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  910.961317][ T7026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62
[  910.981614][ T7026] dvb-usb: schedule remote query interval to 400 msecs.
[  910.989386][ T7026] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  911.001912][ T7026] usb 3-1: USB disconnect, device number 33
[  911.103627][ T7026] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  911.163105][ T5988] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[  911.185228][ T5988] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  911.195573][ T5988] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  911.205116][ T5988] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  911.226719][ T5988] usb 6-1: USB disconnect, device number 58
[  911.393329][T16358] vivid-000: disconnect
[  911.920983][ T7026] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  912.113867][T16369] netlink: 'syz.5.2661': attribute type 5 has an invalid length.
[  912.263092][ T7026] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  912.273087][ T7026] usb 3-1: config 0 has no interface number 0
[  912.374984][ T7026] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4
[  912.445250][ T7026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.474281][ T7026] usb 3-1: Product: syz
[  912.478477][ T7026] usb 3-1: Manufacturer: syz
[  912.484252][ T7026] usb 3-1: SerialNumber: syz
[  912.505467][ T7026] usb 3-1: config 0 descriptor??
[  912.525317][T16364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  912.779917][ T5988] usb 2-1: USB disconnect, device number 20
[  912.866805][T16364] fuse: Bad value for 'user_id'
[  912.894605][T16364] fuse: Bad value for 'user_id'
[  912.924709][ T7026] asix 3-1:0.251: probe with driver asix failed with error -71
[  913.444489][ T7026] usb 3-1: USB disconnect, device number 34
[  913.451389][T16344] vivid-000: reconnect
[  914.059212][T16381] input: syz0 as /devices/virtual/input/input63
[  915.112506][  T769] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  915.293555][T16408] program syz.1.2670 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  917.231492][T16427] vivid-000: disconnect
[  917.404397][T16427] vivid-000: reconnect
[  917.640381][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'.
[  917.772607][ T5898] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  917.942831][ T5898] usb 2-1: Using ep0 maxpacket: 32
[  917.955434][ T5898] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.972219][ T5898] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0
[  918.022722][ T5898] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  918.041603][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0
[  918.049654][ T5898] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  918.059743][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.095825][ T5898] usb 2-1: config 0 descriptor??
[  918.517275][ T5898] hid_parser_main: 460 callbacks suppressed
[  918.517295][ T5898] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0
[  918.537731][ T5898] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0
[  918.576433][ T5898] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0
[  918.588639][ T5898] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0
[  918.600892][ T5898] hid-thrustmaster 0003:044F:B65D.0035: unknown main item tag 0x0
[  918.624522][ T5898] hid-thrustmaster 0003:044F:B65D.0035: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  918.661603][ T5898] hid-thrustmaster 0003:044F:B65D.0035: Unexpected non-int endpoint
[  918.740022][T16431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.781898][T16431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.812288][T16431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.840678][T16431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.991258][    C1] hid-thrustmaster 0003:044F:B65D.0035: URB to get model id failed with error -71
[  919.033492][ T5898] usb 2-1: USB disconnect, device number 21
[  919.338596][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2682'.
[  919.467474][T16452] cifs: Unknown parameter 'f,'
[  919.719936][T16460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2684'.
[  920.258277][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  920.634254][   T30] audit: type=1326 audit(1765916082.429:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16481 comm="syz.2.2692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7372b8f749 code=0x0
[  920.802849][T16488] vivid-000: disconnect
[  921.059576][   T30] audit: type=1326 audit(1765916082.849:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16492 comm="syz.0.2695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92faf8f749 code=0x0
[  921.109586][T16495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.143072][T16495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.346084][T16488] vivid-000: reconnect
[  921.393687][ T5923] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  921.566112][ T5923] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  921.580009][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.612551][ T5923] usb 6-1: Product: syz
[  921.628192][ T5923] usb 6-1: Manufacturer: syz
[  921.656201][ T5923] usb 6-1: SerialNumber: syz
[  921.681425][ T5923] usb 6-1: config 0 descriptor??
[  921.902193][ T5923] usb 6-1: ignoring: probably an ADSL modem
[  922.304257][ T5923] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  922.561888][T16496] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2694'.
[  922.611154][ T5923] usb 6-1: USB disconnect, device number 59
[  923.389464][T16539] syzkaller0: entered promiscuous mode
[  923.403147][T16539] syzkaller0: entered allmulticast mode
[  923.592909][ T5923] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  923.772738][ T5923] usb 2-1: device descriptor read/64, error -71
[  923.772777][   T30] audit: type=1326 audit(1765916085.539:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20dbf8f749 code=0x0
[  923.974487][T16552] vivid-000: disconnect
[  924.066595][ T5923] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  924.251116][ T5923] usb 2-1: device descriptor read/64, error -71
[  924.372964][ T5923] usb usb2-port1: attempt power cycle
[  924.532541][ T6108] usb 6-1: new low-speed USB device number 60 using dummy_hcd
[  924.616151][T16552] vivid-000: reconnect
[  924.762640][ T5923] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  924.784366][ T5923] usb 2-1: device descriptor read/8, error -71
[  924.796056][ T6108] usb 6-1: string descriptor 0 read error: -22
[  924.805226][ T6108] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  924.832570][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.879693][ T6108] usb 6-1: config 0 descriptor??
[  924.906861][ T6108] usbtest 6-1:0.0: FX2 device
[  924.911590][ T6108] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  925.048117][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  925.073509][ T5923] usb 2-1: device descriptor read/8, error -71
[  925.094618][ T7026] usb 6-1: USB disconnect, device number 60
[  925.193670][ T5923] usb usb2-port1: unable to enumerate USB device
[  925.201731][T16561] FAULT_INJECTION: forcing a failure.
[  925.201731][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  925.215412][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.2.2714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  925.215447][T16561] Tainted: [L]=SOFTLOCKUP
[  925.215454][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  925.215467][T16561] Call Trace:
[  925.215476][T16561]  <TASK>
[  925.215484][T16561]  dump_stack_lvl+0x189/0x250
[  925.215515][T16561]  ? __pfx____ratelimit+0x10/0x10
[  925.215554][T16561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  925.215579][T16561]  ? __pfx__printk+0x10/0x10
[  925.215609][T16561]  ? __might_fault+0xb0/0x130
[  925.215652][T16561]  should_fail_ex+0x414/0x560
[  925.215687][T16561]  _copy_from_iter+0x1cd/0x1630
[  925.215713][T16561]  ? __build_skb_around+0x22d/0x3c0
[  925.215741][T16561]  ? __pfx__copy_from_iter+0x10/0x10
[  925.215760][T16561]  ? __alloc_skb+0x2f1/0x430
[  925.215783][T16561]  ? __pfx___alloc_skb+0x10/0x10
[  925.215806][T16561]  ? netlink_sendmsg+0x642/0xb30
[  925.215830][T16561]  ? skb_put+0x11b/0x210
[  925.215856][T16561]  netlink_sendmsg+0x6b2/0xb30
[  925.215892][T16561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  925.215922][T16561]  ? aa_sock_msg_perm+0xf1/0x1b0
[  925.215951][T16561]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  925.215970][T16561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  925.215997][T16561]  __sock_sendmsg+0x21c/0x270
[  925.216031][T16561]  ____sys_sendmsg+0x505/0x820
[  925.216062][T16561]  ? __pfx_____sys_sendmsg+0x10/0x10
[  925.216097][T16561]  ? import_iovec+0x74/0xa0
[  925.216125][T16561]  ___sys_sendmsg+0x21f/0x2a0
[  925.216152][T16561]  ? __pfx____sys_sendmsg+0x10/0x10
[  925.216184][T16561]  ? rcu_read_lock_any_held+0xb3/0x120
[  925.216242][T16561]  ? __fget_files+0x2a/0x420
[  925.216267][T16561]  ? __fget_files+0x3a0/0x420
[  925.216304][T16561]  __x64_sys_sendmsg+0x19b/0x260
[  925.216332][T16561]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  925.216368][T16561]  ? __pfx_ksys_write+0x10/0x10
[  925.216394][T16561]  ? do_syscall_64+0xbe/0xf80
[  925.216420][T16561]  do_syscall_64+0xfa/0xf80
[  925.216443][T16561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.216464][T16561]  ? clear_bhb_loop+0x60/0xb0
[  925.216489][T16561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.216509][T16561] RIP: 0033:0x7f7372b8f749
[  925.216529][T16561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  925.216554][T16561] RSP: 002b:00007f7373a86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  925.216579][T16561] RAX: ffffffffffffffda RBX: 00007f7372de5fa0 RCX: 00007f7372b8f749
[  925.216595][T16561] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003
[  925.216609][T16561] RBP: 00007f7373a86090 R08: 0000000000000000 R09: 0000000000000000
[  925.216622][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  925.216634][T16561] R13: 00007f7372de6038 R14: 00007f7372de5fa0 R15: 00007f7372f0fa28
[  925.216670][T16561]  </TASK>
[  925.782491][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  925.886851][T16573] fuse: Unknown parameter ''
[  925.936019][ T5923] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  925.947651][ T6108] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  925.960785][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.977165][ T5923] usb 3-1: Product: syz
[  925.986853][ T5923] usb 3-1: Manufacturer: syz
[  925.997209][ T5923] usb 3-1: SerialNumber: syz
[  926.012945][ T5923] usb 3-1: config 0 descriptor??
[  926.028265][ T5923] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  926.102512][ T6108] usb 5-1: Using ep0 maxpacket: 16
[  926.111773][ T6108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  926.128934][ T6108] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  926.147039][ T6108] usb 5-1: config 1 has no interface number 1
[  926.159017][ T6108] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  926.189478][ T6108] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  926.209108][ T6108] usb 5-1: config 1 interface 2 has no altsetting 0
[  926.244435][ T6108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  926.255225][ T6108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.265568][ T6108] usb 5-1: Product: syz
[  926.295692][ T6108] usb 5-1: Manufacturer: syz
[  926.309416][ T6108] usb 5-1: SerialNumber: syz
[  926.635112][ T5923] gspca_sunplus: reg_r err -71
[  926.665689][ T5923] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  926.772948][ T5923] usb 3-1: USB disconnect, device number 35
[  927.022693][ T5988] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  927.173096][ T5988] usb 2-1: device descriptor read/64, error -71
[  927.549144][ T5988] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  927.819435][ T5988] usb 2-1: device descriptor read/64, error -71
[  928.019222][ T5988] usb usb2-port1: attempt power cycle
[  928.337650][   T30] audit: type=1326 audit(1765916090.089:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.5.2723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f9438f749 code=0x0
[  928.369702][ T5988] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  928.454657][ T5988] usb 2-1: device descriptor read/8, error -71
[  928.722580][ T5988] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  928.765404][ T5988] usb 2-1: device descriptor read/8, error -71
[  928.886446][T16609] vivid-000: disconnect
[  928.934180][ T5988] usb usb2-port1: unable to enumerate USB device
[  929.329353][ T6108] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  929.357770][ T6108] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  929.382216][ T6108] usb 5-1: selecting invalid altsetting 0
[  929.461105][ T6108] usb 5-1: selecting invalid altsetting 0
[  929.514929][T16609] vivid-000: reconnect
[  929.654225][ T6108] usb 5-1: USB disconnect, device number 62
[  929.663214][T16614] syz_tun: entered allmulticast mode
[  929.763166][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  930.002500][ T5988] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  930.067969][T16619] net_ratelimit: 44 callbacks suppressed
[  930.067990][T16619] IPVS: sh: FWM 3 0x00000003 - no destination available
[  930.162517][ T5988] usb 3-1: Using ep0 maxpacket: 16
[  930.169316][ T5988] usb 3-1: config 0 has an invalid interface number: 245 but max is 1
[  930.178813][T16619] program syz.5.2728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  930.210684][ T5988] usb 3-1: config 0 has an invalid interface number: 126 but max is 1
[  930.230948][ T5988] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping
[  930.252346][ T5988] usb 3-1: config 0 has no interface number 0
[  930.271517][ T5988] usb 3-1: config 0 has no interface number 1
[  930.285002][ T5988] usb 3-1: config 0 interface 245 has no altsetting 0
[  930.300718][ T5988] usb 3-1: config 0 interface 126 has no altsetting 0
[  930.350497][ T5988] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc
[  930.369847][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.409570][ T5988] usb 3-1: Product: syz
[  930.425262][ T5988] usb 3-1: Manufacturer: syz
[  930.451094][ T5988] usb 3-1: SerialNumber: syz
[  930.497981][ T5988] usb 3-1: config 0 descriptor??
[  930.812762][ T7026] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  930.908219][T16613] syz_tun: left allmulticast mode
[  930.922703][ T5988] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  930.980281][ T5988] usb 3-1: selecting invalid altsetting 0
[  930.988756][ T2345] pvrusb2: Invalid write control endpoint
[  930.994164][ T5988] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  931.015884][ T5988] usb 3-1: selecting invalid altsetting 0
[  931.049033][ T5988] usb 3-1: USB disconnect, device number 36
[  931.304274][ T7026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.328810][ T7026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  931.540977][ T2345] pvrusb2: Invalid write control endpoint
[  931.563449][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  931.585494][ T7026] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  931.592643][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  931.612897][ T7026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  931.622676][ T7026] usb 5-1: SerialNumber: syz
[  931.686742][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  931.719237][ T2345] pvrusb2: Device being rendered inoperable
[  931.740840][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  931.760441][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  931.767056][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  931.779781][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  931.811441][ T2345] pvrusb2: Attached sub-driver cx25840
[  931.892631][ T7026] usb 5-1: 0:2 : does not exist
[  931.897688][ T7026] usb 5-1: unit 48 not found!
[  931.950577][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  931.971339][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  931.993468][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  932.001493][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  932.036574][ T2345] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  932.095909][ T7026] usb 5-1: USB disconnect, device number 63
[  932.128602][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'.
[  932.198646][T16637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2732'.
[  932.231311][ T6342] udevd[6342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  932.410899][ T2345] TUNER: Unable to find symbol tda829x_probe()
[  932.517023][T16644] fuse: Unknown parameter 'goup_��00000000000000000000'
[  932.758919][ T2345] DVB: Unable to find symbol tda9887_attach()
[  932.772490][ T2345] tuner: 2-0043: Tuner 4 found with type(s) Radio TV.
[  932.782656][ T2345] pvrusb2: Attached sub-driver tuner
[  932.788110][ T2345] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  932.802574][ T5923] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  932.802877][ T2345] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  932.841150][ T2345] pvrusb2: Invalid write control endpoint
[  932.992021][ T2345] pvrusb2: Invalid write control endpoint
[  933.017811][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  933.032476][ T6108] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  933.045810][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  933.050334][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  933.069693][ T5923] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  933.084725][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  933.084741][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  933.104701][ T5923] usb 5-1: SerialNumber: syz
[  933.110603][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  933.203827][ T2345] pvrusb2: Device being rendered inoperable
[  933.209856][ T2345] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[  933.227213][ T2345] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  933.327090][ T6108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  933.342791][ T6108] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  933.352065][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.360953][ T6108] usb 2-1: Product: syz
[  933.399565][ T2345] pvrusb2: Attached sub-driver cx25840
[  933.406807][ T6108] usb 2-1: Manufacturer: syz
[  933.432193][ T6108] usb 2-1: SerialNumber: syz
[  933.485135][ T6108] usb 2-1: config 0 descriptor??
[  933.615448][ T6108] powermate 2-1:0.0: probe with driver powermate failed with error -22
[  933.725919][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  933.749510][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  933.758855][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  933.825111][ T2345] pvrusb2: Attempted to execute control transfer when device not ok
[  933.881581][ T2345] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  934.526336][ T2345] TUNER: Unable to find symbol tda829x_probe()
[  934.618645][ T5923] usb 5-1: 0:2 : does not exist
[  934.678660][ T5923] usb 5-1: USB disconnect, device number 64
[  934.719763][ T2345] DVB: Unable to find symbol tda9887_attach()
[  934.729611][   T30] audit: type=1326 audit(1765916096.519:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  934.824103][T16667] netlink: 'syz.0.2738': attribute type 15 has an invalid length.
[  934.858872][   T30] audit: type=1326 audit(1765916096.549:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  934.860048][ T2345] tuner: 3-0043: Tuner 4 found with type(s) Radio TV.
[  934.917358][   T30] audit: type=1326 audit(1765916096.549:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  934.956113][   T30] audit: type=1326 audit(1765916096.549:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  934.981240][   T30] audit: type=1326 audit(1765916096.549:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  935.027459][   T30] audit: type=1326 audit(1765916096.549:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  935.060870][ T2345] pvrusb2: Attached sub-driver tuner
[  935.062205][   T30] audit: type=1326 audit(1765916096.549:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92faf8df90 code=0x7ffc0000
[  935.097805][ T2345] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  935.097822][   T30] audit: type=1326 audit(1765916096.559:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  935.138975][ T2345] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  935.139017][   T30] audit: type=1326 audit(1765916096.559:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  935.180872][   T30] audit: type=1326 audit(1765916096.559:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92faf8f749 code=0x7ffc0000
[  935.882999][ T6108] usb 2-1: USB disconnect, device number 30
[  936.207013][T16682] vivid-000: disconnect
[  936.967607][T16682] vivid-000: reconnect
[  937.125606][T16705] program syz.0.2746 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  937.577691][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2747'.
[  937.849993][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'.
[  938.039516][T16714] xt_recent: Unsupported userspace flags (000000de)
[  938.475532][ T6108] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  938.712512][ T6108] usb 5-1: Using ep0 maxpacket: 32
[  938.724118][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  938.742248][ T6108] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  938.765348][T16729] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2751'.
[  938.774532][T16729] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  939.312559][ T6108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.406237][ T6108] usb 5-1: config 0 descriptor??
[  939.842901][T16728] could not allocate digest TFM handle 
[  940.044187][ T6108] hkems 0003:2006:0118.0036: item fetching failed at offset 1/2
[  940.065255][ T6108] hkems 0003:2006:0118.0036: parse failed
[  940.083455][ T6108] hkems 0003:2006:0118.0036: probe with driver hkems failed with error -22
[  940.226671][T16737] syzkaller1: entered promiscuous mode
[  940.263026][ T6108] usb 5-1: USB disconnect, device number 65
[  940.300302][T16737] syzkaller1: entered allmulticast mode
[  940.686275][T16741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  941.232730][ T5898] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  941.382906][ T5898] usb 5-1: Using ep0 maxpacket: 16
[  941.394948][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.416265][ T5898] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  941.438921][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.479306][ T5898] usb 5-1: config 0 descriptor??
[  941.556649][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'.
[  942.162539][    T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  942.332503][    T9] usb 6-1: Using ep0 maxpacket: 32
[  942.375970][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  942.406447][ T5898] semitek 0003:1EA7:0907.0037: item fetching failed at offset 0/2
[  942.436109][ T5898] semitek 0003:1EA7:0907.0037: probe with driver semitek failed with error -22
[  942.465255][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  942.480515][    T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  942.491045][    T9] usb 6-1: Product: syz
[  942.501568][    T9] usb 6-1: Manufacturer: syz
[  942.547302][    T9] usb 6-1: SerialNumber: syz
[  942.598230][    T9] usb 6-1: config 0 descriptor??
[  942.615962][T16759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  942.893929][ T5898] usb 6-1: USB disconnect, device number 61
[  943.702966][T16785] trusted_key: encrypted_key: insufficient parameters specified
[  943.725753][T16785] binder: 16783:16785 ioctl c018620c 200000000000 returned -1
[  943.750970][T16786] binder: 16783:16786 ioctl c018620c 200000000000 returned -1
[  943.779713][    C1] sd 0:0:1:0: [sda] tag#3146 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  943.791594][    C1] sd 0:0:1:0: [sda] tag#3146 CDB: Write(6) 0a 00 00 00 00 00 00 00 66 73 2f 62
[  943.800817][    C1] sd 0:0:1:0: [sda] tag#3147 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  943.811340][    C1] sd 0:0:1:0: [sda] tag#3147 CDB: Write(6) 0a 00 00 00 00 00 00 00 66 73 2f 62
[  944.018014][    T9] usb 5-1: USB disconnect, device number 66
[  944.081521][T16788] syzkaller0: entered promiscuous mode
[  944.131410][T16788] syzkaller0: entered allmulticast mode
[  944.181707][T16788] tipc: Started in network mode
[  944.193319][T16788] tipc: Node identity 8a308fd3643f, cluster identity 4711
[  944.264461][T16788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  944.308786][T16789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  944.775052][T16798] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  944.855700][T16798] vlan4: entered promiscuous mode
[  944.867695][T16798] bond0: entered promiscuous mode
[  944.882499][T16798] bond_slave_0: entered promiscuous mode
[  944.932921][T16798] bond_slave_1: entered promiscuous mode
[  944.938922][T16798] bond1: entered promiscuous mode
[  944.946685][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2773'.
[  945.018039][T16787] tipc: Resetting bearer <eth:syzkaller0>
[  945.058763][T16787] tipc: Disabling bearer <eth:syzkaller0>
[  945.073784][T16799] pimreg: entered allmulticast mode
[  945.116379][T16793] pimreg: left allmulticast mode
[  945.207725][T16813] IPVS: sh: FWM 3 0x00000003 - no destination available
[  945.215216][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  945.226444][T16813] program syz.0.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  945.266198][T16814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2774'.
[  945.813954][    T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  945.973673][ T5898] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  945.994346][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  946.016886][    T9] usb 2-1: config 68 has an invalid interface number: 25 but max is 0
[  946.057965][T16831] binder: 16830:16831 ioctl c0306201 2000000001c0 returned -14
[  946.153655][ T5898] usb 5-1: Using ep0 maxpacket: 16
[  946.159141][    T9] usb 2-1: config 68 has no interface number 0
[  946.180278][    T9] usb 2-1: config 68 interface 25 has no altsetting 0
[  946.222198][ T5898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  946.242710][ T7026] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  946.255826][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=8a.8c
[  946.272928][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.292615][    T9] usb 2-1: Product: syz
[  946.296829][    T9] usb 2-1: Manufacturer: syz
[  946.311690][ T5898] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  946.325212][ T5898] usb 5-1: config 1 has no interface number 1
[  946.331417][ T5898] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  946.372565][ T5898] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  946.383593][    T9] usb 2-1: SerialNumber: syz
[  946.403017][ T5898] usb 5-1: config 1 interface 2 has no altsetting 0
[  946.473697][ T7026] usb 6-1: Using ep0 maxpacket: 16
[  946.502687][ T7026] usb 6-1: config 0 has no interfaces?
[  946.514636][ T7026] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  946.524495][ T7026] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  946.533269][ T7026] usb 6-1: Manufacturer: syz
[  946.645007][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  946.649143][T16821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.654544][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.692133][ T7026] usb 6-1: config 0 descriptor??
[  946.708997][T16821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.814122][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:68.25/input/input64
[  946.955559][ T5185] bcm5974 2-1:68.25: could not read from device
[  947.018301][    T9] usb 2-1: USB disconnect, device number 31
[  947.024912][ T5185] bcm5974 2-1:68.25: could not read from device
[  947.041545][ T5898] usb 5-1: Product: syz
[  947.058211][ T5898] usb 5-1: Manufacturer: syz
[  947.072129][ T5898] usb 5-1: SerialNumber: syz
[  947.077749][ T5185] bcm5974 2-1:68.25: could not read from device
[  947.162446][ T6007] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  948.190741][T16829] netlink: 11 bytes leftover after parsing attributes in process `syz.5.2778'.
[  948.613691][ T5898] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  948.633923][ T5898] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  948.683715][ T5898] usb 5-1: selecting invalid altsetting 0
[  948.716101][ T5898] usb 5-1: selecting invalid altsetting 0
[  948.897960][ T5898] usb 5-1: USB disconnect, device number 67
[  949.062269][ T9476] udevd[9476]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  949.110524][T16853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2786'.
[  949.211269][T16854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  949.679499][ T5898] usb 6-1: USB disconnect, device number 62
[  951.683171][ T5898] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  951.852476][ T5898] usb 6-1: Using ep0 maxpacket: 16
[  951.872085][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  951.937844][ T5898] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  951.982488][ T5898] usb 6-1: config 1 has no interface number 1
[  952.016397][ T5898] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  952.078632][ T5898] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  952.109965][ T5898] usb 6-1: config 1 interface 2 has no altsetting 0
[  952.135335][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  952.144861][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.174797][ T5898] usb 6-1: Product: syz
[  952.185384][ T5898] usb 6-1: Manufacturer: syz
[  952.213404][ T5898] usb 6-1: SerialNumber: syz
[  952.292696][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  952.570728][    T9] usb 2-1: Using ep0 maxpacket: 32
[  952.580228][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  952.589962][    T9] usb 2-1: config 13 has an invalid interface number: 218 but max is 0
[  952.637813][    T9] usb 2-1: config 13 has no interface number 0
[  952.645980][    T9] usb 2-1: config 13 interface 218 altsetting 6 endpoint 0x7 has invalid maxpacket 3088, setting to 64
[  952.659087][    T9] usb 2-1: config 13 interface 218 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  952.681992][    T9] usb 2-1: config 13 interface 218 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  952.715392][    T9] usb 2-1: config 13 interface 218 has no altsetting 0
[  953.033987][    T9] usb 2-1: New USB device found, idVendor=1199, idProduct=0220, bcdDevice= a.bd
[  953.052222][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.077110][    T9] usb 2-1: Product: syz
[  953.085210][    T9] usb 2-1: Manufacturer: syz
[  953.093759][    T9] usb 2-1: SerialNumber: syz
[  953.259187][T16916] bond4: option primary_reselect: invalid value (13)
[  953.300534][T16916] bond4 (unregistering): Released all slaves
[  954.072752][ T7026] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  954.227320][ T7026] usb 3-1: config 0 has an invalid interface number: 205 but max is 0
[  954.236475][ T7026] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config
[  954.298379][ T7026] usb 3-1: config 0 has no interface number 0
[  954.318646][ T7026] usb 3-1: config 0 interface 205 has no altsetting 0
[  954.336208][ T7026] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  954.345708][ T7026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.353972][ T7026] usb 3-1: Product: syz
[  954.358211][ T7026] usb 3-1: Manufacturer: syz
[  954.380824][ T7026] usb 3-1: SerialNumber: syz
[  954.422070][ T7026] usb 3-1: config 0 descriptor??
[  954.433115][T16931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2804'.
[  954.707037][T16926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.724566][T16926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.949490][    T9] sierra 2-1:13.218: Sierra USB modem converter detected
[  955.002747][    T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  955.025811][ T5898] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  955.065046][ T5898] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  955.115753][    T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[  955.126123][ T5898] usb 6-1: selecting invalid altsetting 0
[  955.172985][ T5898] usb 6-1: selecting invalid altsetting 0
[  955.174580][    T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB2
[  955.193522][T16940] FAULT_INJECTION: forcing a failure.
[  955.193522][T16940] name failslab, interval 1, probability 0, space 0, times 0
[  955.246572][T16940] CPU: 0 UID: 0 PID: 16940 Comm: syz.1.2807 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  955.246597][T16940] Tainted: [L]=SOFTLOCKUP
[  955.246603][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  955.246614][T16940] Call Trace:
[  955.246623][T16940]  <TASK>
[  955.246632][T16940]  dump_stack_lvl+0x189/0x250
[  955.246682][T16940]  ? __pfx____ratelimit+0x10/0x10
[  955.246714][T16940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  955.246729][T16940]  ? __pfx__printk+0x10/0x10
[  955.246749][T16940]  ? __pfx___might_resched+0x10/0x10
[  955.246765][T16940]  should_fail_ex+0x414/0x560
[  955.246801][T16940]  should_failslab+0xa8/0x100
[  955.246827][T16940]  __kmalloc_noprof+0xdf/0x800
[  955.246845][T16940]  ? kfree+0x4d/0x660
[  955.246868][T16940]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  955.246888][T16940]  tomoyo_realpath_from_path+0xe3/0x5d0
[  955.246904][T16940]  ? tomoyo_domain+0xd8/0x130
[  955.246924][T16940]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  955.246946][T16940]  tomoyo_path_number_perm+0x1e8/0x5a0
[  955.246971][T16940]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  955.247011][T16940]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  955.247041][T16940]  ? __fget_files+0x2a/0x420
[  955.247059][T16940]  ? __fget_files+0x3a0/0x420
[  955.247072][T16940]  ? __fget_files+0x2a/0x420
[  955.247101][T16940]  security_file_ioctl+0xcb/0x2d0
[  955.247125][T16940]  __se_sys_ioctl+0x47/0x170
[  955.247157][T16940]  do_syscall_64+0xfa/0xf80
[  955.247179][T16940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.247192][T16940]  ? clear_bhb_loop+0x60/0xb0
[  955.247206][T16940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  955.247219][T16940] RIP: 0033:0x7fbe9db8f749
[  955.247231][T16940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  955.247246][T16940] RSP: 002b:00007fbe9e9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  955.247278][T16940] RAX: ffffffffffffffda RBX: 00007fbe9dde5fa0 RCX: 00007fbe9db8f749
[  955.247293][T16940] RDX: 0000200000000280 RSI: 00000000c4c85512 RDI: 0000000000000004
[  955.247306][T16940] RBP: 00007fbe9e9da090 R08: 0000000000000000 R09: 0000000000000000
[  955.247318][T16940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  955.247330][T16940] R13: 00007fbe9dde6038 R14: 00007fbe9dde5fa0 R15: 00007fbe9df0fa28
[  955.247354][T16940]  </TASK>
[  955.247381][T16940] ERROR: Out of memory at tomoyo_realpath_from_path.
[  955.673530][ T5898] usb 6-1: USB disconnect, device number 63
[  955.677706][    T9] usb 2-1: USB disconnect, device number 32
[  955.935586][    T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  956.009592][    T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  956.081089][    T9] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2
[  956.146175][    T9] sierra 2-1:13.218: device disconnected
[  956.361354][ T5898] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  956.461076][T16968] program syz.0.2813 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  956.533192][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  956.551142][ T5898] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  956.578876][ T5898] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  956.590243][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.600938][ T5898] usb 6-1: Product: syz
[  956.606072][ T5898] usb 6-1: Manufacturer: syz
[  956.610903][ T5898] usb 6-1: SerialNumber: syz
[  956.634626][ T5898] usb 6-1: config 0 descriptor??
[  956.727102][ T5898] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  956.754451][ T5898] usb 6-1: setting power ON
[  956.759504][ T5898] dvb-usb: bulk message failed: -22 (2/0)
[  956.823032][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'.
[  956.886380][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  956.953616][ T5898] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  956.962236][ T5898] usb 6-1: media controller created
[  956.971235][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.993723][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.087707][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  957.242875][ T5898] usb 6-1: selecting invalid altsetting 6
[  957.242970][ T5898] usb 6-1: digital interface selection failed (-22)
[  957.243016][ T5898] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  957.251611][ T5898] usb 6-1: setting power OFF
[  957.251778][ T5898] dvb-usb: bulk message failed: -22 (2/0)
[  957.251829][ T5898] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  957.251846][ T5898] (NULL device *): no alternate interface
[  957.344916][ T7026] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  957.345092][ T7026] dvb-usb: bulk message failed: -22 (3/0)
[  957.360392][ T5898] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  957.377506][ T5898] usb 6-1: USB disconnect, device number 64
[  957.392947][ T7026] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  957.393873][ T7026] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  957.393953][ T7026] usb 3-1: media controller created
[  957.396406][ T7026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  957.423585][ T7026] dvb-usb: bulk message failed: -22 (6/0)
[  957.423714][ T7026] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  957.433640][ T7026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input65
[  957.448178][ T7026] dvb-usb: schedule remote query interval to 150 msecs.
[  957.448270][ T7026] dvb-usb: bulk message failed: -22 (3/0)
[  957.472762][ T7026] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  957.476812][ T7026] usb 3-1: USB disconnect, device number 38
[  957.531277][ T7026] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  957.644500][T16992] vivid-007: disconnect
[  958.331070][T16989] vivid-007: reconnect
[  958.343863][ T5898] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  958.846865][T17015] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2828'.
[  958.914374][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2829'.
[  959.072583][ T7026] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  959.244864][ T7026] usb 3-1: unable to get BOS descriptor or descriptor too short
[  959.287001][ T7026] usb 3-1: not running at top speed; connect to a high speed hub
[  959.318540][ T7026] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  959.328531][ T7026] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  959.339134][ T7026] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  959.355105][ T7026] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64
[  959.386882][ T7026] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  959.413134][ T7026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.462214][ T7026] usb 3-1: Product: syz
[  959.470169][ T7026] usb 3-1: Manufacturer: syz
[  959.480170][ T7026] usb 3-1: SerialNumber: syz
[  959.704665][ T7026] usb 3-1: 0:2 : does not exist
[  959.786018][ T7026] usb 3-1: USB disconnect, device number 39
[  959.829286][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  960.202739][    T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  960.374631][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.389761][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.415356][T17044] openvswitch: netlink: Flow key attr not present in new flow.
[  960.426690][    T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  960.467500][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.517446][    T9] usb 5-1: config 0 descriptor??
[  960.975726][    T9] usb 5-1: string descriptor 0 read error: -71
[  960.983354][    T9] uclogic 0003:5543:0045.0038: failed retrieving string descriptor #200: -71
[  960.993101][    T9] uclogic 0003:5543:0045.0038: failed retrieving pen parameters: -71
[  961.015374][    T9] uclogic 0003:5543:0045.0038: failed probing pen v2 parameters: -71
[  961.031868][    T9] uclogic 0003:5543:0045.0038: failed probing parameters: -71
[  961.051034][    T9] uclogic 0003:5543:0045.0038: probe with driver uclogic failed with error -71
[  961.092599][ T6108] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  961.106619][    T9] usb 5-1: USB disconnect, device number 69
[  961.113930][T17021] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  961.124341][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  961.133438][T17021] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  961.263115][ T6108] usb 3-1: device descriptor read/64, error -71
[  961.504310][ T6108] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  961.654171][ T6108] usb 3-1: device descriptor read/64, error -71
[  961.803688][ T6108] usb usb3-port1: attempt power cycle
[  962.064512][    T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  962.182587][ T6108] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[  962.221875][ T6108] usb 3-1: device descriptor read/8, error -71
[  962.242544][    T9] usb 5-1: Using ep0 maxpacket: 32
[  962.256960][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  962.296061][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  962.332489][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  962.378245][    T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  962.392170][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  962.483949][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  962.493264][ T6108] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  962.502832][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  962.523861][ T6108] usb 3-1: device descriptor read/8, error -71
[  962.532141][    T9] usb 5-1: Product: syz
[  962.536683][    T9] usb 5-1: Manufacturer: syz
[  962.542012][    T9] usb 5-1: SerialNumber: syz
[  962.565151][    T9] usb 5-1: config 0 descriptor??
[  962.586410][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  962.606593][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  962.643450][ T6108] usb usb3-port1: unable to enumerate USB device
[  962.739114][T17021] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  962.745192][T17021] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  962.759984][T17021] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  962.769897][T17021] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  962.793056][T17021] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  962.799220][T17021] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  962.804921][T17070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  962.818357][T17021] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  962.824997][T17021] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  962.893553][T17061] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  962.905119][T17068] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  962.914398][    T9] usb 5-1: USB disconnect, device number 70
[  962.920395][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  962.929930][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  962.968998][T17073] C: renamed from team_slave_0
[  962.974688][ T6108] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  962.985938][T17073] netlink: 'syz.5.2848': attribute type 1 has an invalid length.
[  962.994088][T17073] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2848'.
[  963.003340][T17073] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  963.018519][T17074] netlink: 'syz.5.2848': attribute type 1 has an invalid length.
[  963.026669][T17074] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2848'.
[  963.037274][T17074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  963.147861][ T6108] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  963.157322][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.158403][T17071] trusted_key: encrypted_key: insufficient parameters specified
[  963.165415][ T6108] usb 2-1: Product: syz
[  963.165437][ T6108] usb 2-1: Manufacturer: syz
[  963.165453][ T6108] usb 2-1: SerialNumber: syz
[  963.191431][ T6108] usb 2-1: config 0 descriptor??
[  963.205833][ T6108] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  963.357282][T17080] input: syz1 as /devices/virtual/input/input66
[  963.485037][T17080] netlink: 'syz.4.2849': attribute type 1 has an invalid length.
[  963.525974][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.536463][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.707703][ T6108] sonixb 2-1:0.0: Error reading register 00: -71
[  963.725387][ T6108] usb 2-1: USB disconnect, device number 33
[  965.972495][ T5919] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  966.102582][ T5919] usb 5-1: device descriptor read/64, error -71
[  966.342563][ T5919] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  966.661665][ T5919] usb 5-1: device descriptor read/64, error -71
[  966.772784][ T5919] usb usb5-port1: attempt power cycle
[  966.822655][ T6108] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  967.003682][ T6108] usb 2-1: Using ep0 maxpacket: 16
[  967.011809][T17122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2859'.
[  967.035947][ T6108] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  967.052806][ T6108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.106272][ T6108] usb 2-1: Product: syz
[  967.110591][ T6108] usb 2-1: Manufacturer: syz
[  967.120593][ T5919] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  967.150209][ T6108] usb 2-1: SerialNumber: syz
[  967.155758][ T5919] usb 5-1: device descriptor read/8, error -71
[  967.197238][ T6108] r8152-cfgselector 2-1: Unknown version 0x0000
[  967.240213][ T6108] r8152-cfgselector 2-1: config 0 descriptor??
[  967.293761][T17127] batman_adv: batadv0: Interface deactivated: dummy0
[  967.302562][T17127] batman_adv: batadv0: Removing interface: dummy0
[  967.387034][T17127] 
: left allmulticast mode
[  967.402522][ T5919] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  967.427416][T17127] 
: left promiscuous mode
[  967.463612][ T5919] usb 5-1: device descriptor read/8, error -71
[  967.472960][T17127] bridge0: port 1(
) entered disabled state
[  967.548786][T17127] bridge_slave_1: left allmulticast mode
[  967.571210][T17127] bridge_slave_1: left promiscuous mode
[  967.578493][ T5919] usb usb5-port1: unable to enumerate USB device
[  967.591772][T17131] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  967.624279][T17127] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.766390][T17127] bond0: (slave bond_slave_0): Releasing backup interface
[  967.788795][T17118] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.2855'.
[  967.841484][T17127] bond_slave_0: left promiscuous mode
[  967.986489][T17127] bond0: (slave bond_slave_1): Releasing backup interface
[  968.004019][T17127] bond_slave_1: left promiscuous mode
[  968.045343][T17127] team0: Port device team_slave_0 removed
[  968.069802][T17127] team0: Port device team_slave_1 removed
[  968.095871][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  968.159492][T17127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  968.187793][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  968.231052][T17127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  968.256927][T17127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  968.336968][T17128] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  968.365702][T17128] macvtap1: entered promiscuous mode
[  968.375664][T17128] macvtap1: entered allmulticast mode
[  968.386198][T17128] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  968.492896][T17146] input: syz1 as /devices/virtual/input/input67
[  968.655046][T17146] netlink: 'syz.2.2865': attribute type 1 has an invalid length.
[  969.114223][ T7026] r8152-cfgselector 2-1: USB disconnect, device number 34
[  969.372280][T17171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.411837][T17171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.172515][    T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  970.192549][ T7026] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  970.384116][ T7026] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  970.393289][ T7026] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.418040][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  970.422428][ T7026] usb 2-1: config 0 has no interface number 0
[  970.463201][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.507471][    T9] usb 6-1: config 0 descriptor??
[  970.509843][ T7026] usb 2-1: New USB device found, idVendor=fff8, idProduct=ffff, bcdDevice= b.28
[  970.590023][    T9] cp210x 6-1:0.0: cp210x converter detected
[  970.639617][ T7026] usb 2-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3
[  970.669865][ T7026] usb 2-1: Product: syz
[  970.698258][ T7026] usb 2-1: Manufacturer: syz
[  970.719759][ T7026] usb 2-1: SerialNumber: syz
[  970.757853][ T7026] usb 2-1: config 0 descriptor??
[  970.869551][ T7026] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22
[  971.016468][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  971.208373][    T9] usb 6-1: USB disconnect, device number 65
[  971.222977][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  971.243229][    T9] cp210x 6-1:0.0: device disconnected
[  972.036515][T17195] veth3: entered promiscuous mode
[  972.409517][T17209] netlink: 'syz.2.2881': attribute type 2 has an invalid length.
[  972.439993][T17209] : entered promiscuous mode
[  972.678306][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  972.745629][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'.
[  972.784158][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'.
[  972.831376][    T9] usb 2-1: USB disconnect, device number 35
[  973.941137][T17224] binder: 17213:17224 ioctl 40101288 200000000240 returned -22
[  974.364076][T17229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2887'.
[  974.852560][T17242] binder: BINDER_SET_CONTEXT_MGR already set
[  974.858851][T17242] binder: 17233:17242 ioctl 4018620d 200000000040 returned -16
[  975.654000][ T7026] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  975.833940][ T7026] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.852425][ T7026] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  975.872542][ T7026] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  975.905237][ T7026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.962039][ T7026] usb 2-1: config 0 descriptor??
[  976.233364][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  976.240889][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  976.248505][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  976.259056][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  976.266380][ T7026] usb 2-1: string descriptor 0 read error: -32
[  976.289994][ T7026] usb 2-1: USB disconnect, device number 36
[  976.974072][ T7026] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  977.186617][ T7026] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  977.227079][ T7026] usb 3-1: config 0 has no interface number 0
[  977.325081][ T7026] usb 3-1: config 0 interface 41 has no altsetting 0
[  977.400830][ T7026] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  977.415738][ T7026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.610105][T17275] vivid-000: disconnect
[  977.652525][ T7026] usb 3-1: Product: syz
[  977.669310][ T7026] usb 3-1: Manufacturer: syz
[  977.685363][ T7026] usb 3-1: SerialNumber: syz
[  977.704215][ T7026] usb 3-1: config 0 descriptor??
[  977.727328][T17277] syzkaller0: entered promiscuous mode
[  977.741588][T17277] syzkaller0: entered allmulticast mode
[  978.282888][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'.
[  978.432906][T17275] vivid-000: reconnect
[  978.505789][ T8117] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  978.950660][ T7026] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  978.983257][ T7026] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  979.032013][ T7026] usb 3-1: USB disconnect, device number 44
[  979.401366][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2901'.
[  980.104573][ T6108] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[  980.140830][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  980.150883][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'.
[  980.160751][T17305] netlink: 'syz.1.2908': attribute type 12 has an invalid length.
[  980.185442][ T8118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  980.196626][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  980.205862][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  980.215349][ T8118] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  980.225325][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'.
[  980.235177][ T8118] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  980.246847][T17305] netlink: 'syz.1.2908': attribute type 12 has an invalid length.
[  980.254894][ T8118] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  980.267015][ T6108] usb 6-1: config 3 has an invalid interface number: 61 but max is 0
[  980.275475][ T6108] usb 6-1: config 3 has no interface number 0
[  980.295796][ T6108] usb 6-1: config 3 interface 61 has no altsetting 0
[  980.329236][ T6108] usb 6-1: string descriptor 0 read error: -22
[  980.339821][ T6108] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[  980.363006][ T6108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.384274][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.408646][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  980.422118][ T6108] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  980.440612][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  980.456549][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.499915][    T9] usb 3-1: config 0 descriptor??
[  980.511739][ T6108] snd-usb-audio 6-1:3.61: probe with driver snd-usb-audio failed with error -2
[  980.667919][ T6108] usb 6-1: USB disconnect, device number 66
[  980.733626][    T9] usb 3-1: string descriptor 0 read error: -71
[  980.759141][    T9] usb 3-1: USB disconnect, device number 45
[  980.902517][ T5923] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  981.082809][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  981.099113][ T5923] usb 2-1: unable to get BOS descriptor or descriptor too short
[  981.124364][ T5923] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=a7.8c
[  981.142560][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.150825][ T5923] usb 2-1: Product: syz
[  981.156487][ T5923] usb 2-1: Manufacturer: syz
[  981.165278][ T5923] usb 2-1: SerialNumber: syz
[  981.379470][T17311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.462990][T17311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.556752][ T5923] as10x_usb: device has been detected
[  981.574061][ T5923] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  981.591676][ T5923] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  981.669077][ T5923] as10x_usb: error during firmware upload part1
[  981.684497][ T5923] Registered device Abilis Systems DVB-Titan
[  981.700908][ T5923] usb 2-1: USB disconnect, device number 37
[  981.771674][ T5923] Unregistered device Abilis Systems DVB-Titan
[  981.776245][ T5923] as10x_usb: device has been disconnected
[  981.807812][ T5840] udevd[5840]: setting mode of /dev/bus/usb/002/037 to 020664 failed: No such file or directory
[  981.827076][ T5840] udevd[5840]: setting owner of /dev/bus/usb/002/037 to uid=0, gid=0 failed: No such file or directory
[  981.852516][ T7026] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  981.993175][ T7026] usb 6-1: device descriptor read/64, error -71
[  982.296990][ T7026] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  982.447769][   T30] kauditd_printk_skb: 35 callbacks suppressed
[  982.447792][   T30] audit: type=1326 audit(1765916144.239:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.1.2918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9db8f749 code=0x0
[  982.695103][ T7026] usb 6-1: device descriptor read/64, error -71
[  982.833421][ T7026] usb usb6-port1: attempt power cycle
[  983.193169][ T7026] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  983.234738][ T7026] usb 6-1: device descriptor read/8, error -71
[  983.504547][ T7026] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  983.546608][ T7026] usb 6-1: device descriptor read/8, error -71
[  983.658242][T17349] program syz.4.2922 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  983.673453][ T7026] usb usb6-port1: unable to enumerate USB device
[  984.206214][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'.
[  984.435168][T17364] hsr_slave_1 (unregistering): left promiscuous mode
[  984.520351][T17377] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2929'.
[  984.543912][T17377] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.2929'.
[  984.583026][T17377] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2929'.
[  984.772572][ T5891] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  984.938498][ T5891] usb 2-1: Using ep0 maxpacket: 8
[  984.957234][ T5891] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[  984.972699][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  984.985881][ T5891] usb 2-1: config 0 has no interface number 0
[  985.002512][ T5891] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  985.022429][ T5891] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  985.042618][ T5891] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  985.076014][ T5891] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  985.123191][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.132995][ T5891] usb 2-1: Product: syz
[  985.137551][ T5891] usb 2-1: Manufacturer: syz
[  985.142798][ T5891] usb 2-1: SerialNumber: syz
[  985.169643][ T5891] usb 2-1: config 0 descriptor??
[  985.181448][T17378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  985.562649][ T5923] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  985.725420][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  985.745804][ T5923] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  985.786840][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  985.805534][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  985.833772][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  985.861370][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  985.884097][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  985.900010][ T5923] usb 3-1: Product: syz
[  985.913674][ T5923] usb 3-1: Manufacturer: syz
[  985.938563][ T5923] cdc_wdm 3-1:1.0: skipping garbage
[  985.947822][ T5923] cdc_wdm 3-1:1.0: skipping garbage
[  985.973319][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  985.991932][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol
[  986.343855][T17405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  986.353002][T17405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.952619][ T5923] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[  987.105052][ T7026] usb 3-1: USB disconnect, device number 46
[  987.123104][ T5923] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  987.143983][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.172221][ T5923] usb 6-1: Product: syz
[  987.180859][ T5923] usb 6-1: Manufacturer: syz
[  987.189204][ T5923] usb 6-1: SerialNumber: syz
[  987.207279][ T5923] usb 6-1: config 0 descriptor??
[  987.222803][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  987.248169][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  987.264576][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  988.011839][ T5891] usb 2-1: NFC: intf ffff88805661f000 id ffffffff8e93ede0
[  988.063784][ T5891] usb 2-1: USB disconnect, device number 38
[  988.182627][ T7026] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  988.517140][ T7026] usb 3-1: Using ep0 maxpacket: 32
[  988.649564][ T7026] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  988.693129][ T7026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.831452][ T7026] usb 3-1: config 0 descriptor??
[  989.732853][ T5923] usb 6-1: USB disconnect, device number 71
[  989.780069][ T7026] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  990.018689][ T7026] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  990.035060][ T7026] dib0700: firmware download failed at 7 with -22
[  990.312704][ T5923] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  990.485615][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8
[  990.497437][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  990.512760][ T5923] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  990.530521][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.558959][ T5923] usb 6-1: config 0 descriptor??
[  990.591322][T17438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2945'.
[  990.638304][T17438] input: syz0 as /devices/virtual/input/input69
[  990.771336][T17431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  990.784639][T17431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  990.961551][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'.
[  991.083821][T17431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.093254][T17431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.356254][ T5891] usb 3-1: USB disconnect, device number 47
[  992.822545][ T6108] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  992.986544][ T5923] usbhid 6-1:0.0: can't add hid device: -71
[  992.992641][ T6108] usb 3-1: Using ep0 maxpacket: 16
[  993.000970][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  993.025917][ T6108] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  993.044527][ T5923] usb 6-1: USB disconnect, device number 72
[  993.059728][ T6108] usb 3-1: config 0 has no interface number 0
[  993.081991][ T6108] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  993.115086][ T6108] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  993.167384][ T6108] usb 3-1: config 0 interface 41 has no altsetting 0
[  993.197394][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  993.204081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  993.262897][ T6108] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  993.322729][ T6108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.341182][ T6108] usb 3-1: Product: syz
[  993.351734][ T6108] usb 3-1: Manufacturer: syz
[  993.366914][ T6108] usb 3-1: SerialNumber: syz
[  993.404008][ T6108] usb 3-1: config 0 descriptor??
[  993.420518][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  993.428582][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  993.695541][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  993.716079][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  994.132546][T17479] program syz.4.2954 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  994.263536][ T6108] Error reading MAC address
[  994.283665][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  994.291738][T17461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  996.685313][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  996.700211][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  996.724086][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  996.752743][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  996.760680][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  996.793785][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  996.812955][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  996.825403][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  996.858312][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  996.871888][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  997.425501][ T6108] sr9700 3-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, e6:96:b9:ab:ab:09
[  997.482074][ T6108] usb 3-1: USB disconnect, device number 48
[  997.528414][ T6108] sr9700 3-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet
[  997.622874][ T7026] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  997.794304][ T7026] usb 5-1: Using ep0 maxpacket: 32
[  997.848989][ T7026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  997.896655][ T7026] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  997.923945][ T7026] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  997.954378][ T7026] usb 5-1: Product: syz
[  997.967003][ T7026] usb 5-1: Manufacturer: syz
[  998.003078][ T7026] usb 5-1: SerialNumber: syz
[  998.068766][ T7026] usb 5-1: config 0 descriptor??
[  998.093141][T17490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  998.349911][ T6108] usb 3-1: new low-speed USB device number 49 using dummy_hcd
[  998.385269][ T7026] usb 5-1: USB disconnect, device number 76
[  998.411874][T17490] netlink: 'syz.4.2957': attribute type 10 has an invalid length.
[  998.531479][ T6108] usb 3-1: config 6 has an invalid interface number: 236 but max is 3
[  998.550898][ T6108] usb 3-1: config 6 has an invalid interface number: 97 but max is 3
[  998.577661][ T6108] usb 3-1: config 6 has an invalid interface number: 207 but max is 3
[  998.595785][ T6108] usb 3-1: config 6 has an invalid interface number: 147 but max is 3
[  998.626363][ T6108] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  998.644469][T17486] chnl_net:caif_netlink_parms(): no params data found
[  998.657611][ T6108] usb 3-1: config 6 has an invalid interface number: 53 but max is 3
[  998.694399][ T6108] usb 3-1: config 6 has an invalid descriptor of length 177, skipping remainder of the config
[  998.734327][ T6108] usb 3-1: config 6 has 5 interfaces, different from the descriptor's value: 4
[  998.775546][ T6108] usb 3-1: config 6 has no interface number 0
[  998.782035][ T6108] usb 3-1: config 6 has no interface number 1
[  998.809768][ T6108] usb 3-1: config 6 has no interface number 2
[  998.825144][ T6108] usb 3-1: config 6 has no interface number 3
[  998.832884][ T6108] usb 3-1: config 6 has no interface number 4
[  998.840244][ T6108] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 8
[  998.852841][ T6108] usb 3-1: config 6 interface 236 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  998.866139][ T6108] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 8
[  998.877415][ T6108] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x2 has invalid maxpacket 64, setting to 8
[  998.889567][ T6108] usb 3-1: config 6 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 9313, setting to 8
[  998.901268][ T6108] usb 3-1: config 6 interface 236 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 12
[  998.949392][ T6108] usb 3-1: too many endpoints for config 6 interface 97 altsetting 230: 35, using maximum allowed: 30
[  998.952858][ T5836] Bluetooth: hci5: command tx timeout
[  998.985293][ T6108] usb 3-1: config 6 interface 97 altsetting 230 has a duplicate endpoint with address 0x6, skipping
[  999.007656][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  999.051153][ T6108] usb 3-1: config 6 interface 97 altsetting 230 endpoint 0xF has invalid maxpacket 512, setting to 8
[  999.072938][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.101081][ T6108] usb 3-1: config 6 interface 97 altsetting 230 endpoint 0xD has invalid maxpacket 512, setting to 8
[  999.113022][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  999.129717][ T6108] usb 3-1: config 6 interface 97 altsetting 230 endpoint 0x1 has invalid maxpacket 1023, setting to 8
[  999.179261][ T6108] usb 3-1: config 6 interface 97 altsetting 230 endpoint 0x8 has invalid maxpacket 32, setting to 8
[  999.215751][ T6108] usb 3-1: config 6 interface 97 altsetting 230 has a duplicate endpoint with address 0xD, skipping
[  999.249167][ T6108] usb 3-1: config 6 interface 97 altsetting 230 has an invalid descriptor for endpoint zero, skipping
[  999.271987][ T6108] usb 3-1: config 6 interface 97 altsetting 230 has 7 endpoint descriptors, different from the interface descriptor's value: 35
[  999.288900][ T6108] usb 3-1: config 6 interface 207 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[  999.300238][ T6108] usb 3-1: config 6 interface 207 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  999.311415][ T6108] usb 3-1: config 6 interface 207 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 8
[  999.325776][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  999.336982][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  999.348271][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0x5 has invalid maxpacket 16, setting to 8
[  999.360269][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  999.371378][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0xA has invalid maxpacket 64, setting to 8
[  999.374732][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  999.382430][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xF, skipping
[  999.415764][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 8
[  999.438279][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xF, skipping
[  999.451328][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[  999.463424][ T6108] usb 3-1: config 6 interface 147 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  999.476682][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0xB has an invalid bInterval 0, changing to 4
[  999.482449][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.492159][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0xB has invalid maxpacket 8, setting to 0
[  999.538882][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  999.540188][ T6108] usb 3-1: config 6 interface 147 altsetting 6 endpoint 0x3 has invalid maxpacket 32, setting to 8
[  999.564871][ T6108] usb 3-1: config 6 interface 53 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  999.648854][ T6108] usb 3-1: config 6 interface 97 has no altsetting 0
[  999.665428][ T6108] usb 3-1: config 6 interface 207 has no altsetting 0
[  999.682447][ T7026] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  999.699752][ T6108] usb 3-1: config 6 interface 147 has no altsetting 0
[  999.706812][ T6108] usb 3-1: config 6 interface 53 has no altsetting 0
[  999.727246][ T6108] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=bf.18
[  999.737443][ T6108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.758231][ T6108] usb 3-1: Product: 㱐䃟ᚹ诞ퟥ朴낔㞋᳔䢤ꆘꪚ笊染ᯏ欇蔌쫓䮍쿱坔왝ୋ⇭邌٢埚⒞웨㤸鎎뮺♫굀蔋폋֖ↈС้鶾ﭐ솖槕ᩢ⒛鱓ᕅؚ걿ႂ騐疭㛟뷮먖䉬躯爚甙ⷩᄒ䊨濽䗧蔼賰緐ꆙs脯粺劻癊ﾅ
[  999.785269][ T6108] usb 3-1: Manufacturer: ⠉
[  999.787644][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  999.790011][ T6108] usb 3-1: SerialNumber: 鏡â볉茻驵ﱬ
[  999.817005][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  999.853899][ T7026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11
[  999.875603][ T7026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024
[  999.895730][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  999.909103][ T7026] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  999.934268][ T7026] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  999.951032][ T7026] usb 5-1: Manufacturer: syz
[  999.985683][ T7026] usb 5-1: config 0 descriptor??
[ 1000.151995][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1000.187124][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.241046][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1000.266619][ T6108] usb 3-1: USB disconnect, device number 49
[ 1000.324976][T17486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.357276][T17486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.409014][T17486] bridge_slave_0: entered allmulticast mode
[ 1000.440847][T17486] bridge_slave_0: entered promiscuous mode
[ 1000.505788][T17486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.527402][T17486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.547801][T17486] bridge_slave_1: entered allmulticast mode
[ 1000.574187][T17486] bridge_slave_1: entered promiscuous mode
[ 1000.821933][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1001.052757][ T5836] Bluetooth: hci5: command tx timeout
[ 1001.074549][ T7026] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0039/input/input70
[ 1001.242240][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.243776][ T7026] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0039/input/input71
[ 1001.360443][ T7026] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0039/input/input72
[ 1001.458604][ T7026] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0039/input/input73
[ 1001.585301][ T7026] uclogic 0003:256C:006D.0039: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[ 1001.684604][ T7026] usb 5-1: USB disconnect, device number 77
[ 1001.692882][T17486] team0: Port device team_slave_0 added
[ 1001.871599][T17556] fido_id[17556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1001.922240][ T3471] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.322517][ T6108] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1002.482745][ T6108] usb 6-1: device descriptor read/64, error -71
[ 1002.502737][ T7026] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1002.654569][ T7026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1002.666307][ T7026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1002.676571][ T7026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1002.686741][ T7026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1002.699192][ T7026] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[ 1002.709491][ T7026] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3
[ 1002.718141][ T7026] usb 5-1: Product: syz
[ 1002.722727][ T7026] usb 5-1: Manufacturer: syz
[ 1002.727392][ T7026] usb 5-1: SerialNumber: syz
[ 1002.735649][ T7026] usb 5-1: config 0 descriptor??
[ 1002.742868][ T6108] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1002.743867][ T7026] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[ 1002.758442][ T7026] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card
[ 1002.766449][ T7026] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90
[ 1002.807205][ T3471] tipc: Disabling bearer <eth:syzkaller0>
[ 1002.884306][ T6108] usb 6-1: device descriptor read/64, error -71
[ 1002.965067][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'.
[ 1003.002847][ T6108] usb usb6-port1: attempt power cycle
[ 1003.087832][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1003.098977][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1003.109877][ T3471] bond0 (unregistering): Released all slaves
[ 1003.116069][ T5836] Bluetooth: hci5: command tx timeout
[ 1003.133150][ T3471] bond1 (unregistering): Released all slaves
[ 1003.147181][ T3471] bond2 (unregistering): Released all slaves
[ 1003.162123][ T3471] bond3 (unregistering): Released all slaves
[ 1003.180188][T17486] team0: Port device team_slave_1 added
[ 1003.256762][ T7026] usb 5-1: USB disconnect, device number 78
[ 1003.358055][ T3471] tipc: Disabling bearer <udp:syz2>
[ 1003.363959][ T3471] tipc: Disabling bearer <eth:macvlan0>
[ 1003.372534][ T6108] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1003.385044][ T3471] tipc: Left network mode
[ 1003.393908][T17486] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1003.411607][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.444474][ T6108] usb 6-1: device descriptor read/8, error -71
[ 1003.456639][T17486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1003.491963][T17486] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1003.507126][T17486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.536656][T17486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1003.693716][ T6108] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1003.713231][ T6108] usb 6-1: device descriptor read/8, error -71
[ 1003.822807][ T6108] usb usb6-port1: unable to enumerate USB device
[ 1003.883069][T17486] hsr_slave_0: entered promiscuous mode
[ 1003.896421][T17486] hsr_slave_1: entered promiscuous mode
[ 1003.911417][T17486] debugfs: 'hsr0' already exists in 'hsr'
[ 1004.101801][   T30] audit: type=1326 audit(1765916165.889:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20dbf8f749 code=0x7ffc0000
[ 1004.102653][   T30] audit: type=1326 audit(1765916165.889:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20dbf8f749 code=0x7ffc0000
[ 1004.148842][T17486] Cannot create hsr debugfs directory
[ 1004.185987][   T30] audit: type=1326 audit(1765916165.949:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20dbf8f749 code=0x7ffc0000
[ 1004.222608][ T3471] hsr_slave_0: left promiscuous mode
[ 1004.228518][ T3471] hsr_slave_1: left promiscuous mode
[ 1004.240604][   T30] audit: type=1326 audit(1765916165.949:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20dbf8f749 code=0x7ffc0000
[ 1004.267639][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1004.277632][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1004.293790][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1004.302738][   T30] audit: type=1326 audit(1765916165.949:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.4.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20dbf8f749 code=0x7ffc0000
[ 1004.420604][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1004.459873][ T3471] veth1_macvtap: left promiscuous mode
[ 1004.467318][ T3471] veth0_macvtap: left promiscuous mode
[ 1004.477404][ T3471] veth1_vlan: left promiscuous mode
[ 1004.486517][ T3471] veth0_vlan: left promiscuous mode
[ 1004.638241][ T3471] pim6reg (unregistering): left allmulticast mode
[ 1005.222673][ T5836] Bluetooth: hci5: command tx timeout
[ 1005.416156][T17600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2972'.
[ 1005.693521][ T6108] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 1005.854824][ T6108] usb 5-1: Using ep0 maxpacket: 16
[ 1005.871206][ T6108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.883119][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1005.893696][ T6108] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1005.909293][ T6108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1005.927564][ T6108] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1005.937212][ T6108] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1005.945667][ T6108] usb 5-1: Manufacturer: syz
[ 1006.017992][ T6108] usb 5-1: config 0 descriptor??
[ 1006.230006][ T6108] usb 5-1: USB disconnect, device number 79
[ 1006.325470][ T3471] team0 (unregistering): Port device team_slave_1 removed
[ 1006.473354][ T3471] team0 (unregistering): Port device team_slave_0 removed
[ 1008.292960][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2980'.
[ 1008.772818][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2983'.
[ 1008.781900][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2983'.
[ 1008.861301][T17637] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2983'.
[ 1008.876145][T17637] netlink: 'syz.5.2983': attribute type 1 has an invalid length.
[ 1009.053555][T17637] netlink: 464 bytes leftover after parsing attributes in process `syz.5.2983'.
[ 1009.631507][ T3471] IPVS: stop unused estimator thread 0...
[ 1010.244617][T17486] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1010.336404][T17486] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1010.413890][T17486] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1010.472628][ T3471] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1010.488792][T17486] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1010.729625][T17672] netlink: 'syz.2.2985': attribute type 1 has an invalid length.
[ 1010.752095][T17673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2985'.
[ 1010.811626][T17486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1010.914355][T17486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1010.935623][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.942844][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1011.010735][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.017958][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1011.569099][T17486] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1011.814255][T17486] veth0_vlan: entered promiscuous mode
[ 1011.832053][T17486] veth1_vlan: entered promiscuous mode
[ 1011.889005][T17486] veth0_macvtap: entered promiscuous mode
[ 1011.905768][T17486] veth1_macvtap: entered promiscuous mode
[ 1011.932533][ T6108] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1011.948226][T17486] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1011.968099][T17486] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1011.991085][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.011562][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.040596][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.058510][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.121303][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.166569][ T6108] usb 5-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[ 1012.186906][ T6108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.210999][ T6108] usb 5-1: config 0 descriptor??
[ 1012.307554][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.329343][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.442034][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.455167][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.700528][T17704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.981266][T17704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.334479][ T6108] usb 5-1: string descriptor 0 read error: -71
[ 1013.348003][ T6108] uclogic 0003:5543:006E.003A: failed retrieving string descriptor #200: -71
[ 1013.360522][ T6108] uclogic 0003:5543:006E.003A: failed retrieving pen parameters: -71
[ 1013.369091][ T6108] uclogic 0003:5543:006E.003A: failed probing pen v2 parameters: -71
[ 1013.480096][T17746] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[ 1013.522458][   T44] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1013.629251][ T6108] uclogic 0003:5543:006E.003A: failed probing parameters: -71
[ 1013.655093][ T6108] uclogic 0003:5543:006E.003A: probe with driver uclogic failed with error -71
[ 1013.712455][   T44] usb 6-1: Using ep0 maxpacket: 16
[ 1013.718388][ T6108] usb 5-1: USB disconnect, device number 80
[ 1013.719491][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1013.746505][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1013.780428][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1013.846875][   T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1013.889282][   T44] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1013.931065][   T44] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1013.950371][   T44] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1013.978610][   T44] usb 6-1: Manufacturer: syz
[ 1014.031758][   T44] usb 6-1: config 0 descriptor??
[ 1014.643637][   T44] rc_core: IR keymap rc-hauppauge not found
[ 1014.665327][   T44] Registered IR keymap rc-empty
[ 1014.684096][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1014.723747][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1014.777753][   T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1014.845863][   T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75
[ 1014.892492][   T30] audit: type=1326 audit(1765916176.669:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17766 comm="syz.1.3003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e2758f749 code=0x0
[ 1014.968675][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1014.992585][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.000973][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1015.023414][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1015.035444][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1015.045071][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1015.062681][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.072742][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1015.110942][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.145696][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.192035][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.212691][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.242591][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.273493][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.294780][   T44] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1015.337214][   T44] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1015.362493][   T44] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1015.650849][T17780] netlink: 'syz.0.3004': attribute type 1 has an invalid length.
[ 1016.001668][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'.
[ 1016.586259][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3006'.
[ 1016.595397][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3006'.
[ 1016.783683][T17773] chnl_net:caif_netlink_parms(): no params data found
[ 1016.832679][T12045] usb 6-1: USB disconnect, device number 77
[ 1017.114478][ T5833] Bluetooth: hci4: command tx timeout
[ 1017.655979][T17809] pimreg3: entered allmulticast mode
[ 1017.985366][T17773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.004600][T17773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1018.018922][T17773] bridge_slave_0: entered allmulticast mode
[ 1018.052536][T17773] bridge_slave_0: entered promiscuous mode
[ 1018.068452][T17773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.095303][T17773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1018.112119][T17773] bridge_slave_1: entered allmulticast mode
[ 1018.147418][T17773] bridge_slave_1: entered promiscuous mode
[ 1019.202482][ T5833] Bluetooth: hci4: command tx timeout
[ 1019.986848][T17773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1020.081046][T17773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1020.490878][T17773] team0: Port device team_slave_0 added
[ 1020.534321][T17773] team0: Port device team_slave_1 added
[ 1020.825426][T17773] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1020.845622][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.954094][T17773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1021.104446][T17773] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1021.111446][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.184969][T17773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1021.283945][ T5833] Bluetooth: hci4: command tx timeout
[ 1021.412991][T17867] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3017'.
[ 1022.059025][T17773] hsr_slave_0: entered promiscuous mode
[ 1022.081495][T17773] hsr_slave_1: entered promiscuous mode
[ 1022.114373][T17881] netlink: 'syz.2.3021': attribute type 1 has an invalid length.
[ 1022.131013][T17773] debugfs: 'hsr0' already exists in 'hsr'
[ 1022.267673][T17773] Cannot create hsr debugfs directory
[ 1023.043539][ T8119] bridge_slave_1: left allmulticast mode
[ 1023.055931][ T8119] bridge_slave_1: left promiscuous mode
[ 1023.084695][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.136835][ T8119] bridge_slave_0: left allmulticast mode
[ 1023.151541][ T8119] bridge_slave_0: left promiscuous mode
[ 1023.172114][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.369144][ T5833] Bluetooth: hci4: command tx timeout
[ 1023.833857][ T8119] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1024.909323][ T8119] bond1 (unregistering): (slave bridge3): Releasing backup interface
[ 1024.922446][ T8119] bridge3 (unregistering): left promiscuous mode
[ 1024.931541][ T8119] bridge3 (unregistering): left allmulticast mode
[ 1025.308810][ T7026] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[ 1025.340417][ T8119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1025.353717][ T8119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1025.378038][ T8119] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1025.395231][ T8119] bond0 (unregistering): Released all slaves
[ 1025.496010][ T7026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1025.509517][ T7026] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1025.544561][ T7026] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1025.583333][ T7026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.616621][ T7026] usb 2-1: config 0 descriptor??
[ 1025.623063][T17913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1025.797586][ T8119] bond1 (unregistering): Released all slaves
[ 1025.842464][ T8119] bond2 (unregistering): Released all slaves
[ 1025.878919][ T8119] bond3 (unregistering): Released all slaves
[ 1025.906627][ T8119] bond4 (unregistering): Released all slaves
[ 1025.979441][T17912] syzkaller1: entered promiscuous mode
[ 1025.985496][T17912] syzkaller1: entered allmulticast mode
[ 1026.064272][ T7026] logitech 0003:046D:C50C.003B: unknown main item tag 0x0
[ 1026.071489][ T7026] logitech 0003:046D:C50C.003B: unknown main item tag 0x0
[ 1026.096676][ T7026] logitech 0003:046D:C50C.003B: unknown main item tag 0x0
[ 1026.104547][ T7026] logitech 0003:046D:C50C.003B: unknown main item tag 0x0
[ 1026.111755][ T7026] logitech 0003:046D:C50C.003B: unknown main item tag 0x0
[ 1026.121879][ T8119] tipc: Left network mode
[ 1026.143571][ T7026] logitech 0003:046D:C50C.003B: hidraw0: USB HID v1.01 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0
[ 1026.333335][ T7026] usb 2-1: USB disconnect, device number 39
[ 1026.358720][T17914] fido_id[17914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1026.776870][T17932] FAULT_INJECTION: forcing a failure.
[ 1026.776870][T17932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1026.805722][T17932] CPU: 1 UID: 0 PID: 17932 Comm: syz.0.3031 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1026.805758][T17932] Tainted: [L]=SOFTLOCKUP
[ 1026.805767][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1026.805780][T17932] Call Trace:
[ 1026.805789][T17932]  <TASK>
[ 1026.805799][T17932]  dump_stack_lvl+0x189/0x250
[ 1026.805834][T17932]  ? __pfx____ratelimit+0x10/0x10
[ 1026.805868][T17932]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1026.805895][T17932]  ? __pfx__printk+0x10/0x10
[ 1026.805934][T17932]  ? __might_fault+0xb0/0x130
[ 1026.805979][T17932]  should_fail_ex+0x414/0x560
[ 1026.806016][T17932]  _copy_from_user+0x2d/0xb0
[ 1026.806043][T17932]  video_usercopy+0x349/0x13f0
[ 1026.806078][T17932]  ? __pfx_subdev_do_ioctl_lock+0x10/0x10
[ 1026.806105][T17932]  ? __pfx_video_usercopy+0x10/0x10
[ 1026.806146][T17932]  ? __fget_files+0x3a0/0x420
[ 1026.806178][T17932]  v4l2_ioctl+0x18d/0x1e0
[ 1026.806211][T17932]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1026.806242][T17932]  __se_sys_ioctl+0xfc/0x170
[ 1026.806277][T17932]  do_syscall_64+0xfa/0xf80
[ 1026.806302][T17932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.806324][T17932]  ? clear_bhb_loop+0x60/0xb0
[ 1026.806351][T17932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.806372][T17932] RIP: 0033:0x7f92faf8f749
[ 1026.806392][T17932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1026.806412][T17932] RSP: 002b:00007f92fbe92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1026.806436][T17932] RAX: ffffffffffffffda RBX: 00007f92fb1e5fa0 RCX: 00007f92faf8f749
[ 1026.806453][T17932] RDX: 00002000000000c0 RSI: 00000000c0585605 RDI: 0000000000000003
[ 1026.806468][T17932] RBP: 00007f92fbe92090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.806482][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1026.806495][T17932] R13: 00007f92fb1e6038 R14: 00007f92fb1e5fa0 R15: 00007f92fb30fa28
[ 1026.806530][T17932]  </TASK>
[ 1027.553383][T17944] netlink: 'syz.0.3034': attribute type 1 has an invalid length.
[ 1027.643405][T17947] netlink: 'syz.2.3033': attribute type 13 has an invalid length.
[ 1028.832917][T17947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1028.894252][ T5988] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1029.074309][ T5988] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1029.100357][ T5988] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1029.132470][ T5988] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1029.157037][ T5988] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1029.185753][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.216349][ T5988] usb 2-1: Product: syz
[ 1029.232434][ T5988] usb 2-1: Manufacturer: syz
[ 1029.237094][ T5988] usb 2-1: SerialNumber: syz
[ 1029.255639][ T5988] usb 2-1: config 0 descriptor??
[ 1029.276991][T17957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1029.354728][T17957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1029.384690][ T5988] usb 2-1: ucan: probing device on interface #0
[ 1029.730030][ T8119] hsr_slave_0: left promiscuous mode
[ 1029.741734][T17963] loop9: detected capacity change from 0 to 7
[ 1029.754938][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1029.765812][T17963] Dev loop9: unable to read RDB block 7
[ 1029.779236][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1029.779313][T17963]  loop9: unable to read partition table
[ 1029.812614][T17963] loop9: partition table beyond EOD, truncated
[ 1029.825349][T17963] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1029.837540][ T8119] pimreg (unregistering): left allmulticast mode
[ 1030.218531][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'.
[ 1030.392874][ T5988] usb 2-1: ucan: could not read protocol version, ret=-110
[ 1030.400262][ T5988] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1031.053793][ T8119] team0 (unregistering): Port device team_slave_1 removed
[ 1031.148632][ T8119] team0 (unregistering): Port device team_slave_0 removed
[ 1031.165521][ T7026] usb 2-1: USB disconnect, device number 40
[ 1031.362702][T12045] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1031.501153][T12045] usb 6-1: device descriptor read/64, error -71
[ 1031.765334][T12045] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1031.952471][T12045] usb 6-1: device descriptor read/64, error -71
[ 1032.022829][T17773] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1032.074905][T12045] usb usb6-port1: attempt power cycle
[ 1032.086747][T17773] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1032.122198][T17773] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1032.155621][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3042'.
[ 1032.165307][T17773] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1032.428066][T17773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1032.452498][T12045] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1032.494668][T12045] usb 6-1: device descriptor read/8, error -71
[ 1032.506242][T17773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.547588][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.554767][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.614842][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.622274][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.752914][T12045] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1032.776629][T18008] input: syz1 as /devices/virtual/input/input76
[ 1032.813971][T12045] usb 6-1: device descriptor read/8, error -71
[ 1032.840099][T17773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1032.882592][T17773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1032.934975][T18008] netlink: 'syz.1.3045': attribute type 1 has an invalid length.
[ 1032.952855][T12045] usb usb6-port1: unable to enumerate USB device
[ 1033.040243][T18008] gretap1: entered allmulticast mode
[ 1033.111088][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1033.218565][T17773] veth0_vlan: entered promiscuous mode
[ 1033.239019][T17773] veth1_vlan: entered promiscuous mode
[ 1033.355168][T17773] veth0_macvtap: entered promiscuous mode
[ 1033.476653][T17773] veth1_macvtap: entered promiscuous mode
[ 1033.602143][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1033.639447][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1033.699017][ T6007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.745653][T18018] delete_channel: no stack
[ 1033.755338][ T6007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.767776][ T6007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.832698][ T5988] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1033.868044][ T6007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1033.891360][ T8119] IPVS: stop unused estimator thread 0...
[ 1034.012551][ T5988] usb 3-1: Using ep0 maxpacket: 16
[ 1034.032008][ T5988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.132768][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1034.167391][ T5988] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1034.192829][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1034.215708][ T5988] usb 3-1: config 1 has no interface number 1
[ 1034.277735][ T5988] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 1034.329681][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1034.337721][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1034.359850][ T5988] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1034.383934][ T5988] usb 3-1: config 1 interface 2 has no altsetting 0
[ 1034.405601][ T5988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1034.426694][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.458199][ T5988] usb 3-1: Product: syz
[ 1034.497154][ T5988] usb 3-1: Manufacturer: syz
[ 1034.542439][ T5988] usb 3-1: SerialNumber: syz
[ 1034.779462][T18027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1034.956284][T18027] syzkaller0: entered promiscuous mode
[ 1035.057612][T18027] syzkaller0: entered allmulticast mode
[ 1035.336271][T18027] tipc: Resetting bearer <eth:syzkaller0>
[ 1035.414680][T18025] tipc: Resetting bearer <eth:syzkaller0>
[ 1035.515243][T18025] tipc: Disabling bearer <eth:syzkaller0>
[ 1036.068939][T18037] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1036.085587][T18037] program syz.5.3051 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1036.836506][ T5988] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1036.859156][ T5988] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[ 1037.003115][ T5988] usb 3-1: selecting invalid altsetting 0
[ 1037.033157][ T5988] usb 3-1: selecting invalid altsetting 0
[ 1037.094976][ T5988] usb 3-1: USB disconnect, device number 50
[ 1037.250714][ T9476] udevd[9476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1037.789741][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1037.798781][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1037.811182][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1037.848635][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1037.912831][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1038.818734][T18058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1038.835931][T18045] chnl_net:caif_netlink_parms(): no params data found
[ 1038.865569][   T36] ------------[ cut here ]------------
[ 1038.871330][   T36] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#1: kworker/u8:2/36
[ 1038.882014][   T36] Modules linked in:
[ 1038.886375][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1038.897448][   T36] Tainted: [L]=SOFTLOCKUP
[ 1038.901891][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1038.912108][   T36] Workqueue: netns cleanup_net
[ 1038.916976][   T36] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[ 1038.923075][   T36] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 1d a3 a6 f8 4d 39 37 74 36 e8 e3 4b 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d e9 3f 36 dd 01 cc e8 c9
[ 1038.943265][   T36] RSP: 0018:ffffc90000ac7748 EFLAGS: 00010293
[ 1038.949385][   T36] RAX: ffffffff8981650b RBX: ffff888057010000 RCX: ffff888140af9e80
[ 1038.958717][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1038.967422][   T36] RBP: 0000000000000000 R08: ffff888140af9e80 R09: 0000000000000006
[ 1038.975588][   T36] R10: 000000000000000a R11: 0000000000000000 R12: ffff88803213a5c0
[ 1038.983744][   T36] R13: 0000000000000005 R14: ffff88803213a5c0 R15: ffff888057010108
[ 1038.991735][   T36] FS:  0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000
[ 1039.000750][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1039.007393][   T36] CR2: 00007f2e283156c0 CR3: 000000003b22a000 CR4: 00000000003526f0
[ 1039.015436][   T36] Call Trace:
[ 1039.018726][   T36]  <TASK>
[ 1039.021658][   T36]  __nf_unregister_net_hook+0x74/0x6f0
[ 1039.027319][   T36]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 1039.034655][   T36]  __nft_release_hook+0x180/0x350
[ 1039.039794][   T36]  nf_tables_pre_exit_net+0xa7/0x110
[ 1039.045412][   T36]  ops_undo_list+0x187/0x990
[ 1039.050135][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[ 1039.056239][   T36]  ? do_raw_spin_unlock+0x122/0x240
[ 1039.061507][   T36]  cleanup_net+0x4d8/0x7a0
[ 1039.066655][   T36]  ? __pfx_cleanup_net+0x10/0x10
[ 1039.071756][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.077280][   T36]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.083040][   T36]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.088937][   T36]  process_scheduled_works+0xad1/0x1770
[ 1039.094677][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1039.100687][   T36]  worker_thread+0x8a0/0xda0
[ 1039.105425][   T36]  kthread+0x711/0x8a0
[ 1039.109647][   T36]  ? __pfx_worker_thread+0x10/0x10
[ 1039.115282][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.120026][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.125497][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.130761][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.135424][   T36]  ret_from_fork+0x599/0xb30
[ 1039.140178][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[ 1039.145490][   T36]  ? __switch_to_asm+0x39/0x70
[ 1039.150671][   T36]  ? __switch_to_asm+0x33/0x70
[ 1039.156002][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.161063][   T36]  ret_from_fork_asm+0x1a/0x30
[ 1039.166192][   T36]  </TASK>
[ 1039.169247][   T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1039.176627][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1039.187746][   T36] Tainted: [L]=SOFTLOCKUP
[ 1039.192203][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1039.202274][   T36] Workqueue: netns cleanup_net
[ 1039.207087][   T36] Call Trace:
[ 1039.210376][   T36]  <TASK>
[ 1039.213310][   T36]  dump_stack_lvl+0x99/0x250
[ 1039.217919][   T36]  ? __asan_memcpy+0x40/0x70
[ 1039.222592][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1039.227830][   T36]  ? __pfx__printk+0x10/0x10
[ 1039.232452][   T36]  vpanic+0x237/0x6d0
[ 1039.236454][   T36]  ? __pfx_vpanic+0x10/0x10
[ 1039.240967][   T36]  ? is_bpf_text_address+0x292/0x2b0
[ 1039.246257][   T36]  ? is_bpf_text_address+0x26/0x2b0
[ 1039.251475][   T36]  panic+0xb9/0xc0
[ 1039.255254][   T36]  ? __pfx_panic+0x10/0x10
[ 1039.259739][   T36]  ? ret_from_fork_asm+0x1a/0x30
[ 1039.264771][   T36]  __warn+0x317/0x4b0
[ 1039.268759][   T36]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1039.273969][   T36]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1039.279236][   T36]  __report_bug+0x288/0x500
[ 1039.283839][   T36]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1039.289062][   T36]  ? __pfx___report_bug+0x10/0x10
[ 1039.294103][   T36]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[ 1039.300101][   T36]  ? kfree+0x1c0/0x660
[ 1039.304215][   T36]  ? nf_flow_offload_xdp_setup+0x68a/0x690
[ 1039.310063][   T36]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1039.315294][   T36]  report_bug+0x16a/0x220
[ 1039.319642][   T36]  ? nf_hook_entry_head+0x23e/0x2c0
[ 1039.324855][   T36]  ? nf_hook_entry_head+0x240/0x2c0
[ 1039.330070][   T36]  handle_bug+0x98/0x200
[ 1039.334344][   T36]  exc_invalid_op+0x1a/0x50
[ 1039.338955][   T36]  asm_exc_invalid_op+0x1a/0x20
[ 1039.343818][   T36] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0
[ 1039.349951][   T36] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 1d a3 a6 f8 4d 39 37 74 36 e8 e3 4b 40 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d e9 3f 36 dd 01 cc e8 c9
[ 1039.369574][   T36] RSP: 0018:ffffc90000ac7748 EFLAGS: 00010293
[ 1039.375832][   T36] RAX: ffffffff8981650b RBX: ffff888057010000 RCX: ffff888140af9e80
[ 1039.383834][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1039.391903][   T36] RBP: 0000000000000000 R08: ffff888140af9e80 R09: 0000000000000006
[ 1039.399972][   T36] R10: 000000000000000a R11: 0000000000000000 R12: ffff88803213a5c0
[ 1039.408233][   T36] R13: 0000000000000005 R14: ffff88803213a5c0 R15: ffff888057010108
[ 1039.416225][   T36]  ? nf_hook_entry_head+0x1fb/0x2c0
[ 1039.421532][   T36]  ? nf_hook_entry_head+0x1fb/0x2c0
[ 1039.426728][   T36]  __nf_unregister_net_hook+0x74/0x6f0
[ 1039.432211][   T36]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[ 1039.438540][   T36]  __nft_release_hook+0x180/0x350
[ 1039.443593][   T36]  nf_tables_pre_exit_net+0xa7/0x110
[ 1039.448992][   T36]  ops_undo_list+0x187/0x990
[ 1039.453613][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[ 1039.458724][   T36]  ? do_raw_spin_unlock+0x122/0x240
[ 1039.464026][   T36]  cleanup_net+0x4d8/0x7a0
[ 1039.468550][   T36]  ? __pfx_cleanup_net+0x10/0x10
[ 1039.473840][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.479043][   T36]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.484756][   T36]  ? process_scheduled_works+0x9ef/0x1770
[ 1039.490491][   T36]  process_scheduled_works+0xad1/0x1770
[ 1039.496090][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1039.502081][   T36]  worker_thread+0x8a0/0xda0
[ 1039.506764][   T36]  kthread+0x711/0x8a0
[ 1039.510836][   T36]  ? __pfx_worker_thread+0x10/0x10
[ 1039.515949][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.520543][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1039.525853][   T36]  ? lockdep_hardirqs_on+0x98/0x140
[ 1039.531069][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.535661][   T36]  ret_from_fork+0x599/0xb30
[ 1039.540251][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[ 1039.545465][   T36]  ? __switch_to_asm+0x39/0x70
[ 1039.550277][   T36]  ? __switch_to_asm+0x33/0x70
[ 1039.555064][   T36]  ? __pfx_kthread+0x10/0x10
[ 1039.559655][   T36]  ret_from_fork_asm+0x1a/0x30
[ 1039.564601][   T36]  </TASK>
[ 1039.567962][   T36] Kernel Offset: disabled
[ 1039.572319][   T36] Rebooting in 86400 seconds..