last executing test programs:

12.105461655s ago: executing program 2 (id=5227):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2)
r6 = socket(0x9, 0xa, 0xffffffff)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9)
io_setup(0x8, &(0x7f00000001c0))
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043)
ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)

11.843242214s ago: executing program 0 (id=5229):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1dc, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x16c, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x17}, 0x44800)
recvmsg$kcm(r7, 0x0, 0x40)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r3, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

11.778230363s ago: executing program 4 (id=5230):
clock_getres(0xb000000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)=<r8=>0x0)
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000002c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, @nfc={0x27, r8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xff32, &(0x7f0000000280)='ip_vti0\x00', 0x5, 0x7, 0x81})
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@deltaction={0x40, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

10.158368061s ago: executing program 2 (id=5231):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2=0x7f000001}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x30}, 0x1, 0x7}, 0x0)

10.049915921s ago: executing program 1 (id=5232):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)

9.949689278s ago: executing program 0 (id=5233):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r5 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc)
ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x8)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)

9.928957514s ago: executing program 4 (id=5234):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
unshare(0x32020780)
r2 = socket(0x2, 0x80000, 0xfffffffc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400)
fchmod(r3, 0x129)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000004540)=""/4120)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000)

8.854659729s ago: executing program 3 (id=5236):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
unshare(0x32020780)
r2 = socket(0x2, 0x80000, 0xfffffffc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400)
fchmod(r3, 0x129)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000004540)=""/4120)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000)

8.84161792s ago: executing program 1 (id=5237):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2=0x7f000001}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x30}, 0x1, 0x7}, 0x0)

7.45463167s ago: executing program 4 (id=5238):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2)
r6 = socket(0x9, 0xa, 0xffffffff)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}])

7.431689961s ago: executing program 0 (id=5239):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2)
r6 = socket(0x9, 0xa, 0xffffffff)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}])

7.376135735s ago: executing program 2 (id=5240):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2=0x7f000001}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x30}, 0x1, 0x7}, 0x0)

7.356883363s ago: executing program 3 (id=5241):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc)
ppoll(&(0x7f0000000000)=[{r1, 0x8108}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4a24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)

5.495164937s ago: executing program 2 (id=5242):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendto$inet(r1, &(0x7f0000000240)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
msgget$private(0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x178}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0)
socket(0x2, 0x80805, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x8804)

5.359202343s ago: executing program 3 (id=5243):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
unshare(0x32020780)
r2 = socket(0x2, 0x80000, 0xfffffffc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400)
fchmod(r3, 0x129)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000004540)=""/4120)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000)

5.349046656s ago: executing program 1 (id=5244):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r5, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1dc, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x16c, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x17}, 0x44800)
recvmsg$kcm(r7, 0x0, 0x40)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r3, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

5.170055998s ago: executing program 0 (id=5245):
fanotify_init(0x200, 0x40000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="0198000000000000200012800800", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000008740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10, 0x1, 0x1, [r9]}}], 0x10, 0x20000000}}], 0x1, 0x40805)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x1140, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1110, 0x2, [@TCA_CGROUP_ACT={0x110c, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x78, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4c, 0x6, "66ec48ee104ca123c847089b0fbc86428251a1a104186c92d8eb981bed54341fafbeef3b2e308e4b7558df5278f77dc876eb6ff5723b187559e04606aa14493171def5366790e56c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x1034, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x1000, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x2c, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x1140}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r10, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f00000070c0)=""/4107, 0x100b}, {&(0x7f0000000000)=""/218, 0xda}], 0x5}, 0x8}], 0x4, 0x122, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0)={0x1, 0x2}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)

5.048336929s ago: executing program 4 (id=5246):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
read$nci(r5, &(0x7f0000002780)=""/3, 0x3)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'})
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)

3.985953294s ago: executing program 3 (id=5247):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
unshare(0x32020780)
r2 = socket(0x2, 0x80000, 0xfffffffc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400)
fchmod(r3, 0x129)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000004540)=""/4120)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000)

3.32848526s ago: executing program 2 (id=5248):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r7, 0x2)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a010000000000fff5dd0000000800030006010000418e01400004fcff3e1a0c16ef7e1ac617b18164d3", 0x58}], 0x1)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1dc, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0xfff3, 0x3}, {0x2, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x16c, 0x2, {{0x4a, [0x9, 0xb, 0xb, 0x5, 0x3, 0x9, 0x1, 0x4, 0x7, 0x7, 0x6, 0x0, 0xe, 0x9, 0x4, 0x5], 0x1, [0x8, 0x9, 0x5, 0x5ec4, 0x101, 0x0, 0xb, 0x7, 0xfffd, 0xf8, 0xc, 0x5d, 0x2, 0xfff, 0x2, 0x8001], [0x0, 0x7, 0xfffd, 0x1b, 0x7, 0x2, 0x3dc, 0x68a, 0x2, 0xc000, 0x4, 0xae50, 0x45b, 0x7, 0x40]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x5}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xfffffffffffffff7}, {0xc}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x40}, {0xc}]}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x6}, {0xc}, {0xc, 0x4, 0x1b}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x101}]}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80000000}, {0xc, 0x4, 0xbea}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x14, 0x2, 0x300, 0x1, 0x2, 0x101, 0x45a5, 0x6}}, {0x10, 0x2, [0x8000, 0x6, 0x2, 0x8001, 0x7fff, 0x401]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x17}, 0x44800)
recvmsg$kcm(r9, 0x0, 0x40)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000080), 0x45c0, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

3.219735991s ago: executing program 1 (id=5249):
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r6, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)

3.094677474s ago: executing program 0 (id=5250):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x30}, 0x1, 0x7}, 0x0)

2.503160146s ago: executing program 4 (id=5251):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x84, 0x24, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2=0x7f000001}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x30}, 0x1, 0x7}, 0x0)

2.268667244s ago: executing program 3 (id=5252):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
r6 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x8)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4a24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)

1.764307992s ago: executing program 0 (id=5253):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRESHEX], 0x30}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8000090503"], 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x21000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000200)={{0x4, 0xffff, 0xc2}, 'syz0\x00', 0x3a})

1.573197087s ago: executing program 1 (id=5254):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2)
r6 = socket(0x9, 0xa, 0xffffffff)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}])

929.837486ms ago: executing program 2 (id=5255):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1df}}, 0x24, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x4c}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000700)={0x0, 0x0, 0x31, "56d107394d056b7accd1489f50134d5df2891e43c5f8d9dc04a02e3f5931e5cffdf81d6b01e1cbde8694fb997b46b6de1b7fb7e80c5e8205d37214eb3cf8b50851f7e1a4034a3e6e06d543c05b5d279e800a3153b83734595ea7bf0e40e03d4cfe4897d762e3ef78587c383eaffc25b0c0bee03a0b5ccbfcb6531f72b1b124a2bd08eb89699b94210645071df3c94ae6bbdd962abded1f62af34905dfa00c6cfc5c1da1198cd0b00a3fbd876818d92b24d17f04b630d1bb2941cd8c3d0da6842e052d9422d819cbe5167fb0a2879b65b49aa4846744da3219db50f1108b47f239ef68690c9b4333a196c748bc98e12cc556700"/256}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000380)={0xc, &(0x7f0000000280)={0x0, 0xb, 0xbb, {0xbb, 0x5, "9f8f69e62ee7ae345e0b13617e4c012af5c2c646410b9ebb2b2dad2d8fde74359e22e613a8c1f3d20dfaf2c3b6d7d5e73296ceca7da07c80e4f9790b003ed7051b848360a811322702e2c52a4525cbcc8d280daa237c7db30552b7e9522e4e97485250e774a9cad933e9994d17be9825e932df698f2934ea0ac3b6fcb0e8f8a7cc928c5c37704f55cb0581ade4de41a085a1d0367ba560d67b0695c33553faa7c9243729e686902ee17cf7c79c6b13bd8b88614b9609005ad4"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x562a}}}, &(0x7f0000000680)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x6c, "42f94ec20376947d93c66f7d3448fcc566062f631040cdfd9dde635f6108c1c02e255050f1a6baff4a1cf596351644e502ad6c481d9c0f75bd2ca018bfa222a94599c7c5640046651b313a433fbf152f0f509893f2ab706e423f9070eb9b4eb99a7097b7599d2dc3f689901d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000540)=ANY=[@ANYBLOB="2000ca13000000c8936bd997f8940ac0f84267af4f9e241b0f719f18bf06000000030406ce0aae6a89815cfd9d662952ee61654bfa8d1a03003c6fb1c297fc563ffa2b5b03f1ade9a5162ce97a28e9378086cc8a68b41d177100000000000049de0e6d5b25750d72f781471863cb682d48d04efa1690018bb4ae5b83878cb705ab7e2902b133bd01e8916412393e69d5e1259be0d79161ee7cd1a8163fc75240b40d90d8648b262c2ddfd2fe510ec872571661556033831849aa58abf1742cb05e26149ae04287b06d5c1f191ae368d9"], &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xaa}})
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000100)={0xc, &(0x7f0000000040)={0x20, 0x31, 0x2e, {0x2e, 0x7, "b4b6c39ef9e400115226d86b72cf06dee6f86636f448482e5cec184b2c32d6e31fb3a64e7b5a6db12de07c12"}}, &(0x7f0000000d00)=ANY=[@ANYBLOB="000304000000040300004a39485352e863891647e2d81b2cdfa81b0e35598742e3c3e8291c0cdd47679fecaafc22f410fe11edf5f71659eb26aa5f3e8d3ef36a0566de55dcb6eace9cf56133b0d4ad0523c0427ad07852ca98d6f6ba9614b7fe9f3be1aeb1240adefa0be836f2b1bf440c56834e5c7cc78590c2d0bc3360fcc007cda0ccf0b7ecd171ffedf244f50a55946668a6c25cdbe0a1be210fd46ca17a83680db79fcfebf15e5a0b3373a54c1dd6315c39f4289165"]}, &(0x7f0000000200)={0x10, &(0x7f0000000140)={0x20, 0x9, 0x2f, "22679400adeb7ac075b8a9126fe880d04cd7fc79a03d8842375c7dc3b5aecb24bcd2b3a9d7ecc3c9965590ee29c75b"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000240)=ANY=[@ANYBLOB="210002000000a3240b2f8b278be15e3bd597dc"]})

546.376445ms ago: executing program 1 (id=5256):
clock_getres(0xb000000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000000))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r5 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r6=>0x0)
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000002c0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x1}}, @nfc={0x27, r6, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xff32, &(0x7f0000000280)='ip_vti0\x00', 0x5, 0x7, 0x81})

457.520684ms ago: executing program 4 (id=5257):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x2c2)
r6 = socket(0x9, 0xa, 0xffffffff)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x0, 0xe, 0x0, 0xfffffff9}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x769043)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}])

0s ago: executing program 3 (id=5258):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
unshare(0x32020780)
r2 = socket(0x2, 0x80000, 0xfffffffc)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400)
fchmod(r3, 0x129)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000004540)=""/4120)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000)

kernel console output (not intermixed with test programs):

" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.635952][   T30] audit: type=1326 audit(1761911523.973:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.662981][   T30] audit: type=1326 audit(1761911523.983:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.695413][   T30] audit: type=1326 audit(1761911523.983:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.759378][   T30] audit: type=1326 audit(1761911523.983:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.803942][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'.
[ 1008.897267][   T30] audit: type=1326 audit(1761911523.983:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1008.986830][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1009.159392][   T30] audit: type=1326 audit(1761911523.983:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1009.219501][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1009.239854][   T30] audit: type=1326 audit(1761911523.983:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1009.282234][   T30] audit: type=1326 audit(1761911523.983:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.0.3086" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000
[ 1009.479927][    T9] usb 2-1: config 0 has an invalid interface number: 59 but max is 0
[ 1009.488202][    T9] usb 2-1: config 0 has no interface number 0
[ 1009.495135][    T9] usb 2-1: config 0 interface 59 has no altsetting 0
[ 1009.590879][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1009.608868][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.617807][    T9] usb 2-1: Product: syz
[ 1009.624456][    T9] usb 2-1: Manufacturer: syz
[ 1009.630150][    T9] usb 2-1: SerialNumber: syz
[ 1009.639044][    T9] usb 2-1: config 0 descriptor??
[ 1009.652095][    T9] smsc75xx v1.0.0
[ 1009.655867][    T9] smsc75xx 2-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1009.670998][    T9] smsc75xx 2-1:0.59: probe with driver smsc75xx failed with error -22
[ 1010.791415][T18084] loop2: detected capacity change from 0 to 7
[ 1010.799838][T18084] Dev loop2: unable to read RDB block 7
[ 1010.806250][T18084]  loop2: unable to read partition table
[ 1010.814766][T18084] loop2: partition table beyond EOD, truncated
[ 1010.869456][T18084] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1010.910778][T18084] netlink: 'syz.4.3093': attribute type 17 has an invalid length.
[ 1011.031736][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'.
[ 1011.070256][T18090] sctp: [Deprecated]: syz.4.3093 (pid 18090) Use of int in max_burst socket option.
[ 1011.070256][T18090] Use struct sctp_assoc_value instead
[ 1011.181455][T18084] gretap0: refused to change device tx_queue_len
[ 1011.189850][T18084] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1011.635464][T18057] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1011.660507][T18057] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1011.689637][T18057] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1011.749547][T18057] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1011.862441][T18057] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1011.945018][T18057] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1011.960082][T18057] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1011.994514][T18057] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1012.312617][T18100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3094'.
[ 1012.593512][    T9] usb 2-1: USB disconnect, device number 63
[ 1012.852794][T18103] bond0: (slave batadv0): Releasing backup interface
[ 1013.109197][ T1646] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1013.123422][T18103] tipc: Resetting bearer <eth:batadv0>
[ 1013.149804][T18103] tipc: Resetting bearer <eth:batadv0>
[ 1013.156893][T18103] bond0: (slave bond_slave_0): Releasing backup interface
[ 1013.166123][T18103] bond0: (slave bond_slave_1): Releasing backup interface
[ 1013.183573][T18103] team0: Port device team_slave_0 removed
[ 1013.208359][T18103] team0: Port device team_slave_1 removed
[ 1013.231983][T18103] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1013.248772][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'.
[ 1013.322669][ T1646] usb 4-1: Using ep0 maxpacket: 8
[ 1013.345298][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'.
[ 1013.371284][T18103] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1013.380095][T18103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1013.441587][ T1646] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[ 1013.450987][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.491039][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'.
[ 1013.579740][ T1646] usb 4-1: Product: syz
[ 1013.612356][ T1646] usb 4-1: Manufacturer: syz
[ 1013.652711][T18114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1013.670830][ T1646] usb 4-1: SerialNumber: syz
[ 1013.764091][ T1646] usb 4-1: config 0 descriptor??
[ 1014.044680][ T1646] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1014.053221][ T1646] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 1014.063522][ T1646] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1014.283609][ T1646] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[ 1014.378106][ T1646] usb 4-1: USB disconnect, device number 59
[ 1015.632717][T18139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'.
[ 1016.627369][T13927] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1016.902414][T18152] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1016.933043][T18152] syzkaller0: entered promiscuous mode
[ 1016.949343][T13927] usb 2-1: Using ep0 maxpacket: 32
[ 1016.958994][T13927] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1016.982947][T18152] syzkaller0: entered allmulticast mode
[ 1017.091131][T13927] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1017.352828][T13927] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1017.362634][T13927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.405494][T13927] usb 2-1: Product: syz
[ 1017.487034][T13927] usb 2-1: Manufacturer: syz
[ 1017.519293][T13927] usb 2-1: SerialNumber: syz
[ 1017.553659][T13927] usb 2-1: config 0 descriptor??
[ 1018.276575][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.286160][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1018.301975][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.311001][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1018.900394][    T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1019.063081][    T9] usb 4-1: config 0 has an invalid interface number: 197 but max is 0
[ 1019.072257][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.207031][    T9] usb 4-1: config 0 has no interface number 0
[ 1019.294996][    T9] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[ 1019.325160][    T9] usb 4-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 1019.447245][    T9] usb 4-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1019.486442][T18184] loop6: detected capacity change from 0 to 524287999
[ 1019.498781][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[ 1019.743651][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.752773][    T9] usb 4-1: Product: syz
[ 1019.757818][    T9] usb 4-1: Manufacturer: syz
[ 1019.765113][    T9] usb 4-1: SerialNumber: syz
[ 1019.831048][    T9] usb 4-1: config 0 descriptor??
[ 1019.836766][T18174] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1020.030414][    T9] usb 2-1: USB disconnect, device number 64
[ 1020.053475][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3110'.
[ 1021.333236][T13927] usb 4-1: USB disconnect, device number 60
[ 1021.392177][T18208] binder: 18207:18208 ioctl 4018620d 0 returned -22
[ 1021.420925][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1023.692514][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'.
[ 1024.232625][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[ 1025.332874][T18253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3121'.
[ 1026.700175][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'.
[ 1028.078133][T18240] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1028.139090][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'.
[ 1028.516381][T13927] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1028.525108][T13927] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1028.533396][T13927] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1028.541149][T13927] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1028.548615][T13927] rtc rtc0: __rtc_set_alarm: err=-22
[ 1029.036161][T18281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1029.139211][T18280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1030.990914][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'.
[ 1031.047144][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'.
[ 1031.544914][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1031.544933][   T30] audit: type=1326 audit(1761911547.103:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1031.645566][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'.
[ 1031.659265][T13927] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1031.752542][   T30] audit: type=1326 audit(1761911547.143:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1031.813857][T13927] usb 2-1: device descriptor read/64, error -71
[ 1031.904660][   T30] audit: type=1326 audit(1761911547.143:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1031.996765][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'.
[ 1032.119895][T13927] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1032.397100][T13927] usb 2-1: device descriptor read/64, error -71
[ 1032.810991][T13927] usb usb2-port1: attempt power cycle
[ 1032.850229][   T30] audit: type=1326 audit(1761911547.143:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1032.967357][   T30] audit: type=1326 audit(1761911547.143:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1033.041659][   T30] audit: type=1326 audit(1761911547.163:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1033.136203][   T30] audit: type=1326 audit(1761911547.163:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1033.245559][   T30] audit: type=1326 audit(1761911547.163:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1033.357102][   T30] audit: type=1326 audit(1761911547.173:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1033.379394][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1033.459735][   T30] audit: type=1326 audit(1761911547.173:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x7ffc0000
[ 1035.479684][    T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1035.583791][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[ 1035.659527][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1035.678092][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1035.767558][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.829670][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1035.838109][    T9] pvrusb2: **********
[ 1035.843138][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1035.889546][    T9] pvrusb2: Important functionality might not be entirely working.
[ 1035.904593][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1035.929581][    T9] pvrusb2: **********
[ 1036.017212][ T2344] pvrusb2: Invalid write control endpoint
[ 1036.080883][ T2344] pvrusb2: Invalid write control endpoint
[ 1036.104590][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1036.137670][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1036.149521][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1036.203411][ T2344] pvrusb2: Device being rendered inoperable
[ 1036.211382][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1036.229750][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1036.238960][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'.
[ 1036.256163][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1036.262011][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1036.275990][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1036.359007][T13927] usb 4-1: USB disconnect, device number 61
[ 1036.750861][T18354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1036.833811][T18356] loop6: detected capacity change from 0 to 524287999
[ 1037.367144][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'.
[ 1037.437102][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'.
[ 1039.419641][   T30] kauditd_printk_skb: 27 callbacks suppressed
[ 1039.419663][   T30] audit: type=1326 audit(1761911554.933:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.509384][   T30] audit: type=1326 audit(1761911554.933:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.532301][   T30] audit: type=1326 audit(1761911554.933:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.590073][   T30] audit: type=1326 audit(1761911554.933:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.633352][   T30] audit: type=1326 audit(1761911554.933:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.656165][   T30] audit: type=1326 audit(1761911554.933:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.738397][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[ 1039.810225][   T30] audit: type=1326 audit(1761911554.933:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.841908][   T30] audit: type=1326 audit(1761911554.933:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.864989][   T30] audit: type=1326 audit(1761911554.933:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1039.974072][   T30] audit: type=1326 audit(1761911554.933:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18378 comm="syz.3.3151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[ 1040.579265][ T1646] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1040.883553][ T1646] usb 2-1: Using ep0 maxpacket: 8
[ 1040.903178][ T1646] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1040.913798][ T1646] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1041.432229][ T1646] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1041.468222][ T1646] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1041.567723][ T1646] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1041.590781][ T1646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.896250][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3165'.
[ 1041.910977][ T1646] usb 2-1: GET_CAPABILITIES returned 0
[ 1041.916738][ T1646] usbtmc 2-1:16.0: can't read capabilities
[ 1042.070377][T18408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3165'.
[ 1042.288005][ T1646] usb 2-1: USB disconnect, device number 68
[ 1044.150154][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1044.556402][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'.
[ 1046.617535][T18453] vivid-004: =================  START STATUS  =================
[ 1046.625551][T18453] vivid-004: Radio HW Seek Mode: Bounded
[ 1046.631635][T18453] vivid-004: Radio Programmable HW Seek: false
[ 1046.637949][T18453] vivid-004: RDS Rx I/O Mode: Block I/O
[ 1046.651643][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'.
[ 1046.820319][T18453] vivid-004: Generate RBDS Instead of RDS: false
[ 1046.826907][T18453] vivid-004: RDS Reception: true
[ 1046.833762][T18453] vivid-004: RDS Program Type: 0 inactive
[ 1046.851706][T18453] vivid-004: RDS PS Name:  inactive
[ 1046.857144][T18453] vivid-004: RDS Radio Text:  inactive
[ 1046.864017][T18453] vivid-004: RDS Traffic Announcement: false inactive
[ 1046.879776][T18453] vivid-004: RDS Traffic Program: false inactive
[ 1046.902232][T18453] vivid-004: RDS Music: false inactive
[ 1046.910605][T18453] vivid-004: ==================  END STATUS  ==================
[ 1049.568187][T18475] syzkaller0: entered promiscuous mode
[ 1049.608246][T18475] syzkaller0: entered allmulticast mode
[ 1051.997311][T18499] syzkaller0: entered promiscuous mode
[ 1052.130165][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[ 1052.196460][T18499] syzkaller0: entered allmulticast mode
[ 1052.676146][T18504] syzkaller0: entered promiscuous mode
[ 1052.684037][T18504] syzkaller0: entered allmulticast mode
[ 1053.164715][T18514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1053.566190][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3179'.
[ 1053.708546][T18529] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1054.453537][T18529] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.538122][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.547011][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.658331][T18529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1054.919332][T13927] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1055.099287][T13927] usb 3-1: Using ep0 maxpacket: 8
[ 1055.122105][T13927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1055.150233][T13927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1055.235670][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'.
[ 1055.329244][T13927] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1055.356122][T13927] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e
[ 1055.444035][T13927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.529717][T13927] usb 3-1: config 0 descriptor??
[ 1055.559677][T13927] io_ti 3-1:0.0: required endpoints missing
[ 1057.088236][ T1646] usb 3-1: USB disconnect, device number 51
[ 1058.202007][T18568] syzkaller0: entered promiscuous mode
[ 1058.207564][T18568] syzkaller0: entered allmulticast mode
[ 1058.543731][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'.
[ 1058.757996][T18577] syzkaller0: entered promiscuous mode
[ 1058.764830][T18577] syzkaller0: entered allmulticast mode
[ 1059.874480][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'.
[ 1060.865478][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[ 1061.293957][T18604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1061.520830][T10863] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1061.650805][T18615] syzkaller0: entered promiscuous mode
[ 1061.656467][T18615] syzkaller0: entered allmulticast mode
[ 1061.769513][T10863] usb 3-1: Using ep0 maxpacket: 16
[ 1061.776908][T10863] usb 3-1: config 0 has no interfaces?
[ 1061.785570][T10863] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1061.796988][T10863] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1061.813856][T10863] usb 3-1: Manufacturer: syz
[ 1061.828194][T10863] usb 3-1: config 0 descriptor??
[ 1061.978761][T18617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1062.057531][   T30] kauditd_printk_skb: 38 callbacks suppressed
[ 1062.057552][   T30] audit: type=1326 audit(1761911577.603:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.2.3198" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0
[ 1062.159627][T18620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.310160][T18620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1062.633158][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'.
[ 1063.400315][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3208'.
[ 1064.470908][T13927] usb 3-1: USB disconnect, device number 52
[ 1065.119625][T10863] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1065.207480][T18663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1065.339410][T10863] usb 5-1: Using ep0 maxpacket: 16
[ 1065.346565][T10863] usb 5-1: config 0 has no interfaces?
[ 1065.355035][T10863] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1065.368643][T10863] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1065.377959][T10863] usb 5-1: Manufacturer: syz
[ 1065.485251][T10863] usb 5-1: config 0 descriptor??
[ 1066.001791][   T30] audit: type=1326 audit(1761911581.553:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18655 comm="syz.4.3211" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1066.024311][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1066.101072][T18671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1066.184540][T18671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1066.420056][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[ 1067.199656][T13927] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1067.349353][T13927] usb 4-1: Using ep0 maxpacket: 16
[ 1067.356870][T13927] usb 4-1: config 0 has no interfaces?
[ 1067.364578][T13927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1067.374167][T13927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1067.382332][T13927] usb 4-1: Manufacturer: syz
[ 1067.397599][T13927] usb 4-1: config 0 descriptor??
[ 1067.559847][T10863] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1067.655298][   T30] audit: type=1326 audit(1761911583.213:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18677 comm="syz.3.3216" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1067.719673][T10863] usb 2-1: Using ep0 maxpacket: 16
[ 1067.726800][T10863] usb 2-1: config 0 has no interfaces?
[ 1067.734941][T10863] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1067.746409][T10863] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1067.759902][T18686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.773809][T18686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.779511][T10863] usb 2-1: Manufacturer: syz
[ 1067.812849][    T9] usb 5-1: USB disconnect, device number 45
[ 1067.854169][T10863] usb 2-1: config 0 descriptor??
[ 1068.103839][   T30] audit: type=1326 audit(1761911583.663:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.1.3217" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1068.205931][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.299654][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1068.510953][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.649227][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1068.685756][    T9] usb 5-1: config 0 has no interfaces?
[ 1068.791096][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1068.801057][    T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1068.809830][    T9] usb 5-1: Manufacturer: syz
[ 1068.818077][    T9] usb 5-1: config 0 descriptor??
[ 1069.052725][T18688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.072027][T18688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.097041][    T9] usb 5-1: USB disconnect, device number 46
[ 1069.893755][T13927] usb 4-1: USB disconnect, device number 63
[ 1070.264983][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 1070.479765][    T9] usb 2-1: USB disconnect, device number 69
[ 1071.081212][T18713] syzkaller0: entered promiscuous mode
[ 1071.130044][T18713] syzkaller0: entered allmulticast mode
[ 1071.625333][T18730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1072.040764][T18735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1072.774494][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'.
[ 1075.917230][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'.
[ 1076.562635][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'.
[ 1077.449339][T13927] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1077.753277][T13927] usb 2-1: Using ep0 maxpacket: 16
[ 1077.761106][T13927] usb 2-1: config 0 has no interfaces?
[ 1077.771730][T13927] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1077.836978][T13927] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1077.861246][T13927] usb 2-1: Manufacturer: syz
[ 1078.351572][T13927] usb 2-1: config 0 descriptor??
[ 1078.590893][   T30] audit: type=1326 audit(1761911594.133:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18789 comm="syz.1.3243" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1078.680109][T18804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.694744][T18804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1079.296668][T18814] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1080.270103][    T9] usb 2-1: USB disconnect, device number 70
[ 1080.474906][T18820] syzkaller0: entered promiscuous mode
[ 1080.481290][T18820] syzkaller0: entered allmulticast mode
[ 1080.599586][T10863] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1080.789955][T10863] usb 5-1: Using ep0 maxpacket: 16
[ 1080.812190][T10863] usb 5-1: config 0 has no interfaces?
[ 1080.821491][T10863] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1080.837870][T10863] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1080.852082][T10863] usb 5-1: Manufacturer: syz
[ 1080.861479][T10863] usb 5-1: config 0 descriptor??
[ 1080.896281][T18829] syzkaller0: entered promiscuous mode
[ 1080.939759][T13927] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1080.947764][T18829] syzkaller0: entered allmulticast mode
[ 1081.087064][   T30] audit: type=1326 audit(1761911596.643:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18817 comm="syz.4.3248" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1081.129542][T13927] usb 4-1: Using ep0 maxpacket: 16
[ 1081.136427][T13927] usb 4-1: config 0 has no interfaces?
[ 1081.144349][T13927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1081.154224][T13927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1081.163156][T13927] usb 4-1: Manufacturer: syz
[ 1081.172435][T18842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1081.278041][T18842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.389897][T13927] usb 4-1: config 0 descriptor??
[ 1081.959718][   T30] audit: type=1326 audit(1761911597.513:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18824 comm="syz.3.3251" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1082.002808][T18850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.011931][T18850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.440573][T18856] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1082.552818][T18859] syzkaller0: entered promiscuous mode
[ 1082.558422][T18859] syzkaller0: entered allmulticast mode
[ 1082.825286][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'.
[ 1083.399510][T13927] usb 5-1: USB disconnect, device number 47
[ 1083.703413][T10863] usb 4-1: USB disconnect, device number 64
[ 1083.794091][T18870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1083.961040][T18873] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1085.092781][T18883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1086.442594][T18899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1087.589205][T13927] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1087.782656][T13927] usb 5-1: Using ep0 maxpacket: 16
[ 1087.791430][T13927] usb 5-1: config 0 has no interfaces?
[ 1087.841020][T18919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1087.899280][ T1646] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1087.919660][T13927] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1087.928844][T13927] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1087.941909][T13927] usb 5-1: Manufacturer: syz
[ 1087.957932][T13927] usb 5-1: config 0 descriptor??
[ 1088.052601][ T1646] usb 2-1: Using ep0 maxpacket: 16
[ 1088.068819][ T1646] usb 2-1: config 0 has no interfaces?
[ 1088.078843][ T1646] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1088.109493][ T1646] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1088.139401][ T1646] usb 2-1: Manufacturer: syz
[ 1088.154881][ T1646] usb 2-1: config 0 descriptor??
[ 1088.183253][   T30] audit: type=1326 audit(1761911603.743:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18904 comm="syz.4.3270" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1088.285246][T18908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.303334][T18908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.346835][T18921] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1088.346835][T18921]    program syz.2.3273 not setting count and/or reply_len properly
[ 1088.393958][   T30] audit: type=1326 audit(1761911603.953:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18915 comm="syz.1.3271" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1088.415893][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1088.499079][T18922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.511765][T18922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.657188][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'.
[ 1088.836022][T18932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1090.065649][ T1646] usb 5-1: USB disconnect, device number 48
[ 1090.088782][T18941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1090.669983][T10863] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1090.676654][T18949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1090.721572][ T1646] usb 2-1: USB disconnect, device number 71
[ 1090.939671][T10863] usb 4-1: Using ep0 maxpacket: 16
[ 1090.970651][T10863] usb 4-1: config 0 has no interfaces?
[ 1090.978120][T10863] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1090.988694][T10863] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1091.067295][T10863] usb 4-1: Manufacturer: syz
[ 1091.191248][T10863] usb 4-1: config 0 descriptor??
[ 1091.454403][   T30] audit: type=1326 audit(1761911607.003:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.3.3278" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1091.532679][T18958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1091.558692][T18960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.582543][T18960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.995594][T18965] syzkaller0: entered promiscuous mode
[ 1092.021898][T18965] syzkaller0: entered allmulticast mode
[ 1093.298462][T18986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1093.356029][ T1646] usb 4-1: USB disconnect, device number 65
[ 1093.631288][T18990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1094.809059][T19003] syzkaller0: entered promiscuous mode
[ 1094.814840][T19003] syzkaller0: entered allmulticast mode
[ 1095.121859][T19011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1095.892375][T19021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1096.850164][T19029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1098.051507][T19032] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1098.051507][T19032]    program syz.3.3298 not setting count and/or reply_len properly
[ 1098.649755][T19051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1099.705166][T19054] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1099.705166][T19054]    program syz.2.3305 not setting count and/or reply_len properly
[ 1099.968020][T19060] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1099.968020][T19060]    program syz.1.3306 not setting count and/or reply_len properly
[ 1101.151138][T19084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1101.425288][T19090] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1101.724954][T19094] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1102.651570][T19093] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1102.651570][T19093]    program syz.3.3313 not setting count and/or reply_len properly
[ 1103.090876][T19096] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1103.090876][T19096]    program syz.1.3312 not setting count and/or reply_len properly
[ 1103.186539][T19113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1104.824568][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'.
[ 1106.169226][ T1646] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[ 1106.169566][T10863] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1106.339714][T10863] usb 5-1: Using ep0 maxpacket: 16
[ 1106.346734][T10863] usb 5-1: config 0 has no interfaces?
[ 1106.354084][T10863] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1106.366243][T10863] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1106.401362][T10863] usb 5-1: Manufacturer: syz
[ 1106.436300][T10863] usb 5-1: config 0 descriptor??
[ 1106.458844][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.501488][ T1646] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1106.510648][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1106.519021][ T1646] usb 3-1: Product: syz
[ 1106.539788][ T1646] usb 3-1: Manufacturer: syz
[ 1106.545965][ T1646] usb 3-1: SerialNumber: syz
[ 1106.606263][ T1646] usb 3-1: config 0 descriptor??
[ 1106.624602][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1106.737976][   T30] audit: type=1326 audit(1761911622.293:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19137 comm="syz.4.3322" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1106.834608][T19150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.871900][T19150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1106.934385][T19129] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1106.934385][T19129]    program syz.2.3320 not setting count and/or reply_len properly
[ 1107.329038][T19154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1107.481858][ T1646] usb 3-1: USB disconnect, device number 53
[ 1108.036801][T19155] udevd[19155]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1108.097383][T19157] syzkaller0: entered promiscuous mode
[ 1108.146964][T19157] syzkaller0: entered allmulticast mode
[ 1108.409801][T19164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'.
[ 1108.581011][T19169] syzkaller0: entered promiscuous mode
[ 1108.587548][T19169] syzkaller0: entered allmulticast mode
[ 1109.094601][T10863] usb 5-1: USB disconnect, device number 49
[ 1110.488403][T19190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'.
[ 1111.360042][T10863] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[ 1111.531765][T10863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.582587][T10863] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1111.613701][T10863] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1111.661102][T10863] usb 4-1: Product: syz
[ 1111.679241][T10863] usb 4-1: Manufacturer: syz
[ 1111.699719][T10863] usb 4-1: SerialNumber: syz
[ 1111.717566][T10863] usb 4-1: config 0 descriptor??
[ 1111.742737][T10863] gspca_main: conex-2.14.0 probing 0572:0041
[ 1112.084261][T19205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1112.257260][T19179] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1112.257260][T19179]    program syz.3.3332 not setting count and/or reply_len properly
[ 1112.403797][T19207] syzkaller0: entered promiscuous mode
[ 1112.416469][T19207] syzkaller0: entered allmulticast mode
[ 1112.568017][T10863] usb 4-1: USB disconnect, device number 66
[ 1112.699200][ T1646] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1112.894484][T19211] udevd[19211]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1112.905962][ T1646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.924210][ T1646] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1112.949195][ T1646] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1112.970702][ T1646] usb 5-1: Product: syz
[ 1112.998146][ T1646] usb 5-1: Manufacturer: syz
[ 1113.013218][ T1646] usb 5-1: SerialNumber: syz
[ 1113.043938][ T1646] usb 5-1: config 0 descriptor??
[ 1113.076517][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1113.290283][T19213] syzkaller0: entered promiscuous mode
[ 1113.295798][T19213] syzkaller0: entered allmulticast mode
[ 1113.464240][T19200] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1113.464240][T19200]    program syz.4.3336 not setting count and/or reply_len properly
[ 1113.653324][ T1646] usb 5-1: USB disconnect, device number 50
[ 1113.708143][T15145] udevd[15145]: setting mode of /dev/bus/usb/005/050 to 020664 failed: No such file or directory
[ 1113.771723][T15145] udevd[15145]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory
[ 1113.937266][T19228] udevd[19228]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1114.979248][ T1646] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1115.209480][ T1646] usb 5-1: Using ep0 maxpacket: 16
[ 1115.219652][ T1646] usb 5-1: config 0 has no interfaces?
[ 1115.229624][ T1646] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1115.239470][ T1646] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1115.247629][ T1646] usb 5-1: Manufacturer: syz
[ 1115.270680][ T1646] usb 5-1: config 0 descriptor??
[ 1115.279899][T19246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1115.515198][   T30] audit: type=1326 audit(1761911631.073:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19234 comm="syz.4.3345" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1115.536969][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1115.571254][T19253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1115.632227][T19253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.004162][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.010768][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.570551][ T1646] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1116.761501][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'.
[ 1116.850201][ T1646] usb 2-1: Using ep0 maxpacket: 16
[ 1116.857379][ T1646] usb 2-1: config 0 has no interfaces?
[ 1116.864641][ T1646] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1116.873794][ T1646] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1116.884113][ T1646] usb 2-1: Manufacturer: syz
[ 1116.934661][ T1646] usb 2-1: config 0 descriptor??
[ 1117.191393][   T30] audit: type=1326 audit(1761911632.753:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.1.3352" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1117.307379][T19271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1117.334705][T19271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1117.651564][ T1646] usb 5-1: USB disconnect, device number 51
[ 1118.715621][T19275] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1118.715621][T19275]    program syz.4.3354 not setting count and/or reply_len properly
[ 1119.309445][ T1646] usb 2-1: USB disconnect, device number 73
[ 1119.830807][T19302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1122.161520][T19324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1122.815606][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3367'.
[ 1123.112509][T19317] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1123.112509][T19317]    program syz.2.3361 not setting count and/or reply_len properly
[ 1124.359632][T10863] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1124.509751][T10863] usb 3-1: Using ep0 maxpacket: 16
[ 1124.526485][T10863] usb 3-1: config 0 has no interfaces?
[ 1124.534289][T10863] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1124.545453][T10863] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1124.554833][T10863] usb 3-1: Manufacturer: syz
[ 1124.575738][T10863] usb 3-1: config 0 descriptor??
[ 1124.829028][   T30] audit: type=1326 audit(1761911640.383:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.2.3370" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0
[ 1124.881326][T19353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1124.890090][T19353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.948339][T19337] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1124.948339][T19337]    program syz.3.3369 not setting count and/or reply_len properly
[ 1125.551442][T19362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1125.910778][T19366] syzkaller0: entered promiscuous mode
[ 1125.929258][T19366] syzkaller0: entered allmulticast mode
[ 1126.479679][T10863] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[ 1126.510780][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'.
[ 1126.641615][T10863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1126.655763][T10863] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1126.686575][T10863] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1126.701889][T10863] usb 5-1: Product: syz
[ 1126.706127][T10863] usb 5-1: Manufacturer: syz
[ 1126.713611][T10863] usb 5-1: SerialNumber: syz
[ 1126.724310][T10863] usb 5-1: config 0 descriptor??
[ 1126.748184][T10863] gspca_main: conex-2.14.0 probing 0572:0041
[ 1126.953078][T19364] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1126.953078][T19364]    program syz.4.3376 not setting count and/or reply_len properly
[ 1127.198626][ T1646] usb 3-1: USB disconnect, device number 54
[ 1127.241322][T10863] usb 5-1: USB disconnect, device number 52
[ 1127.329953][T19378] udevd[19378]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1127.457672][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'.
[ 1127.651712][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 1132.345609][T19431] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1132.451119][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'.
[ 1132.659338][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3391'.
[ 1132.802340][T19438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1133.088456][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'.
[ 1134.617278][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'.
[ 1134.729221][ T1646] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1134.899352][ T1646] usb 5-1: Using ep0 maxpacket: 16
[ 1135.270573][T19468] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1135.336333][ T1646] usb 5-1: config 0 has no interfaces?
[ 1135.345697][ T1646] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1135.355016][ T1646] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1135.376186][ T1646] usb 5-1: Manufacturer: syz
[ 1135.408495][ T1646] usb 5-1: config 0 descriptor??
[ 1135.642125][   T30] audit: type=1326 audit(1761911651.203:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19455 comm="syz.4.3396" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1135.750831][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.785674][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1136.639524][T10863] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[ 1136.801699][T10863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1136.816791][T10863] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1136.827134][T10863] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1136.835837][T10863] usb 4-1: Product: syz
[ 1136.840977][T10863] usb 4-1: Manufacturer: syz
[ 1136.845714][T10863] usb 4-1: SerialNumber: syz
[ 1136.855521][T10863] usb 4-1: config 0 descriptor??
[ 1137.091289][T10863] gspca_main: conex-2.14.0 probing 0572:0041
[ 1137.291685][T19479] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1137.291685][T19479]    program syz.3.3401 not setting count and/or reply_len properly
[ 1137.507554][    T9] usb 5-1: USB disconnect, device number 53
[ 1138.571239][T19506] udevd[19506]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1138.882868][ T1646] usb 4-1: USB disconnect, device number 67
[ 1139.198262][T19511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1139.293978][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'.
[ 1139.502692][T10863] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[ 1139.671543][T10863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1139.684976][T10863] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1139.694724][T10863] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1139.703816][T10863] usb 2-1: Product: syz
[ 1139.708367][T10863] usb 2-1: Manufacturer: syz
[ 1139.713783][T10863] usb 2-1: SerialNumber: syz
[ 1139.723994][T10863] usb 2-1: config 0 descriptor??
[ 1139.737429][T10863] gspca_main: conex-2.14.0 probing 0572:0041
[ 1139.940781][T19504] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1139.940781][T19504]    program syz.1.3405 not setting count and/or reply_len properly
[ 1140.232945][T10863] usb 2-1: USB disconnect, device number 74
[ 1140.256679][T19522] udevd[19522]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1140.489979][T19524] syzkaller0: entered promiscuous mode
[ 1140.500128][T19524] syzkaller0: entered allmulticast mode
[ 1140.803680][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'.
[ 1141.644365][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3417'.
[ 1141.759976][T10863] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1141.946646][T19548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3417'.
[ 1142.029439][T10863] usb 5-1: Using ep0 maxpacket: 8
[ 1142.051113][T10863] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1142.066612][T10863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.115463][T10863] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1142.132858][T10863] pvrusb2: **********
[ 1142.145275][T10863] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1142.872813][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'.
[ 1142.939614][T10863] pvrusb2: Important functionality might not be entirely working.
[ 1143.038302][T10863] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1143.051136][T10863] pvrusb2: **********
[ 1143.058734][ T2344] pvrusb2: Invalid write control endpoint
[ 1143.123439][ T2344] pvrusb2: Invalid write control endpoint
[ 1143.153795][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1143.186824][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1143.226437][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1143.240087][ T2344] pvrusb2: Device being rendered inoperable
[ 1143.246537][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1143.254410][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1143.262894][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1143.268881][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1143.280180][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1143.405193][T19545] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1143.405193][T19545]    program syz.3.3418 not setting count and/or reply_len properly
[ 1143.446635][T13927] usb 5-1: USB disconnect, device number 54
[ 1143.991508][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'.
[ 1144.098633][T19574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1144.359618][T10863] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1144.445114][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'.
[ 1144.679663][T10863] usb 5-1: Using ep0 maxpacket: 16
[ 1144.686705][T10863] usb 5-1: config 0 has no interfaces?
[ 1144.693952][T10863] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1144.703630][T10863] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1144.714252][T10863] usb 5-1: Manufacturer: syz
[ 1144.785134][T10863] usb 5-1: config 0 descriptor??
[ 1145.063014][   T30] audit: type=1326 audit(1761911660.623:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19575 comm="syz.4.3425" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1145.167522][T19583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.196410][T19583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.498274][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[ 1147.139930][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'.
[ 1147.463027][T10863] usb 5-1: USB disconnect, device number 55
[ 1150.764472][T19648] vivid-003: =================  START STATUS  =================
[ 1150.772796][T19648] vivid-003: Radio HW Seek Mode: Bounded
[ 1150.778634][T19648] vivid-003: Radio Programmable HW Seek: false
[ 1150.814840][T19648] vivid-003: RDS Rx I/O Mode: Block I/O
[ 1151.049296][T13927] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1151.319329][T13927] usb 5-1: Using ep0 maxpacket: 32
[ 1151.409556][T19648] vivid-003: Generate RBDS Instead of RDS: false
[ 1151.416378][T19648] vivid-003: RDS Reception: true
[ 1151.421463][T19648] vivid-003: RDS Program Type: 0 inactive
[ 1151.427256][T19648] vivid-003: RDS PS Name:  inactive
[ 1151.456062][T19648] vivid-003: RDS Radio Text:  inactive
[ 1151.462592][T19648] vivid-003: RDS Traffic Announcement: false inactive
[ 1151.490093][T13927] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1151.500751][T13927] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1151.514434][T19648] vivid-003: RDS Traffic Program: false inactive
[ 1151.530113][T13927] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1151.542779][T13927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.553280][T13927] usb 5-1: Product: syz
[ 1151.557479][T13927] usb 5-1: Manufacturer: syz
[ 1151.566724][T13927] usb 5-1: SerialNumber: syz
[ 1151.601177][T13927] usb 5-1: config 0 descriptor??
[ 1151.639441][T19648] vivid-003: RDS Music: false inactive
[ 1151.648199][T19648] vivid-003: ==================  END STATUS  ==================
[ 1151.939345][T19647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.948257][T19647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.984555][T19647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.993587][T19647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.557188][T19636] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1152.557188][T19636]    program syz.2.3438 not setting count and/or reply_len properly
[ 1153.304891][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'.
[ 1154.240703][T19676] syzkaller0: entered promiscuous mode
[ 1154.246401][T19676] syzkaller0: entered allmulticast mode
[ 1154.527529][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'.
[ 1154.556325][T10863] usb 5-1: USB disconnect, device number 56
[ 1154.896824][T19690] syzkaller0: entered promiscuous mode
[ 1154.902724][T19690] syzkaller0: entered allmulticast mode
[ 1156.189990][T19700] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1156.189990][T19700]    program syz.3.3453 not setting count and/or reply_len properly
[ 1156.199699][T10863] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[ 1157.151319][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'.
[ 1157.300534][T19705] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1157.300534][T19705]    program syz.2.3454 not setting count and/or reply_len properly
[ 1157.499231][T13927] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[ 1157.866826][T19727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3459'.
[ 1158.406968][T19730] syzkaller0: entered promiscuous mode
[ 1158.412943][T19730] syzkaller0: entered allmulticast mode
[ 1158.951414][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'.
[ 1159.844925][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'.
[ 1162.050116][T13927] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1162.180314][T13927] usb 4-1: device descriptor read/64, error -71
[ 1162.242256][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3471'.
[ 1162.517166][T13927] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1162.592680][T19772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1162.672769][T13927] usb 4-1: device descriptor read/64, error -71
[ 1162.849752][T13927] usb usb4-port1: attempt power cycle
[ 1163.399232][T13927] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1163.421110][T13927] usb 4-1: device descriptor read/8, error -71
[ 1163.528309][T19767] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1163.528309][T19767]    program syz.1.3470 not setting count and/or reply_len properly
[ 1163.659216][T13927] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1163.691212][T13927] usb 4-1: device descriptor read/8, error -71
[ 1163.811247][T13927] usb usb4-port1: unable to enumerate USB device
[ 1163.899046][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[ 1165.113366][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'.
[ 1165.790955][T19805] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1165.790955][T19805]    program syz.1.3479 not setting count and/or reply_len properly
[ 1165.880456][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'.
[ 1166.456807][T13927] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1166.752011][T13927] usb 3-1: Using ep0 maxpacket: 16
[ 1166.764425][T13927] usb 3-1: no configurations
[ 1166.769700][T13927] usb 3-1: can't read configurations, error -22
[ 1166.909275][T13927] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1167.080626][T13927] usb 3-1: Using ep0 maxpacket: 16
[ 1167.087689][T13927] usb 3-1: no configurations
[ 1167.275520][T13927] usb 3-1: can't read configurations, error -22
[ 1167.317759][T13927] usb usb3-port1: attempt power cycle
[ 1167.680376][T13927] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1167.719234][T13927] usb 3-1: Using ep0 maxpacket: 16
[ 1168.260559][T13927] usb 3-1: no configurations
[ 1168.265269][T13927] usb 3-1: can't read configurations, error -22
[ 1168.449347][T13927] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1168.491767][T13927] usb 3-1: Using ep0 maxpacket: 16
[ 1168.555382][T13927] usb 3-1: no configurations
[ 1168.560245][T13927] usb 3-1: can't read configurations, error -22
[ 1168.571251][T13927] usb usb3-port1: unable to enumerate USB device
[ 1169.334757][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'.
[ 1169.601609][T19862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'.
[ 1172.192384][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[ 1172.707845][T19872] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1172.707845][T19872]    program syz.4.3493 not setting count and/or reply_len properly
[ 1172.938561][T13927] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1175.200148][T19905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1175.200148][T19905]    program syz.1.3501 not setting count and/or reply_len properly
[ 1175.229778][T10863] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1175.545980][    T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[ 1175.554423][T10863] usb 3-1: device descriptor read/64, error -71
[ 1175.629261][T13927] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[ 1175.815875][T10863] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1175.861525][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'.
[ 1175.897859][T13927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1176.013420][T10863] usb 3-1: device descriptor read/64, error -71
[ 1176.041034][T13927] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1176.054685][T13927] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1176.109713][T13927] usb 5-1: Product: syz
[ 1176.122123][T13927] usb 5-1: Manufacturer: syz
[ 1176.130342][T10863] usb usb3-port1: attempt power cycle
[ 1176.144737][T13927] usb 5-1: SerialNumber: syz
[ 1176.159785][T13927] usb 5-1: config 0 descriptor??
[ 1176.179270][T13927] gspca_main: conex-2.14.0 probing 0572:0041
[ 1176.440536][T19903] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1176.440536][T19903]    program syz.4.3499 not setting count and/or reply_len properly
[ 1176.469812][T10863] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1176.490960][T10863] usb 3-1: device descriptor read/8, error -71
[ 1176.758246][T13927] usb 5-1: USB disconnect, device number 58
[ 1176.790012][T10863] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1176.902689][T10863] usb 3-1: device descriptor read/8, error -71
[ 1176.985084][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'.
[ 1177.027125][T10863] usb usb3-port1: unable to enumerate USB device
[ 1177.061560][T19932] udevd[19932]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1177.432864][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.439349][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.445918][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'.
[ 1179.026413][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3511'.
[ 1182.967433][T19999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1184.639269][   T43] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1184.811438][   T43] usb 3-1: Using ep0 maxpacket: 8
[ 1184.836398][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1184.855030][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1184.877158][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1184.910162][   T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1185.451541][   T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1185.487339][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.529297][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'.
[ 1186.340679][   T43] usb 3-1: GET_CAPABILITIES returned 0
[ 1186.659598][   T43] usbtmc 3-1:16.0: can't read capabilities
[ 1186.685642][   T43] usb 3-1: USB disconnect, device number 65
[ 1188.273258][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'.
[ 1190.627175][   T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1191.155249][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1191.165086][   T43] usb 5-1: no configurations
[ 1191.171790][   T43] usb 5-1: can't read configurations, error -22
[ 1191.622052][   T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1191.866825][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1191.939246][   T43] usb 5-1: no configurations
[ 1191.944377][   T43] usb 5-1: can't read configurations, error -22
[ 1191.953776][   T43] usb usb5-port1: attempt power cycle
[ 1192.494005][   T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1192.519975][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1192.526706][   T43] usb 5-1: no configurations
[ 1192.532061][   T43] usb 5-1: can't read configurations, error -22
[ 1192.812638][T20102] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1192.812638][T20102]    program syz.1.3539 not setting count and/or reply_len properly
[ 1192.840112][   T43] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1192.920736][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1192.928598][   T43] usb 5-1: no configurations
[ 1192.954864][   T43] usb 5-1: can't read configurations, error -22
[ 1193.064950][   T43] usb usb5-port1: unable to enumerate USB device
[ 1193.470105][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'.
[ 1198.889274][   T43] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[ 1199.043392][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1199.057257][   T43] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1199.067079][   T43] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1199.076282][   T43] usb 5-1: Product: syz
[ 1199.081522][   T43] usb 5-1: Manufacturer: syz
[ 1199.087458][   T43] usb 5-1: SerialNumber: syz
[ 1199.101040][   T43] usb 5-1: config 0 descriptor??
[ 1199.114111][   T43] gspca_main: conex-2.14.0 probing 0572:0041
[ 1199.291989][T20162] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1199.291989][T20162]    program syz.3.3549 not setting count and/or reply_len properly
[ 1199.325662][T20145] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1199.325662][T20145]    program syz.4.3546 not setting count and/or reply_len properly
[ 1199.517286][   T43] usb 5-1: USB disconnect, device number 63
[ 1199.986731][T20172] udevd[20172]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1201.530201][T20200] syzkaller0: entered promiscuous mode
[ 1201.535820][T20200] syzkaller0: entered allmulticast mode
[ 1204.428666][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3562'.
[ 1205.424626][T20239] syzkaller0: entered promiscuous mode
[ 1205.432368][T20239] syzkaller0: entered allmulticast mode
[ 1205.579794][T18433] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1205.673624][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'.
[ 1205.793880][T18433] usb 5-1: Using ep0 maxpacket: 16
[ 1205.802818][T18433] usb 5-1: config 0 has no interfaces?
[ 1205.814236][T18433] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1205.855693][T18433] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1205.870897][T18433] usb 5-1: Manufacturer: syz
[ 1206.007733][T18433] usb 5-1: config 0 descriptor??
[ 1206.293624][T20235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1206.525194][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'.
[ 1206.543739][T20235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1206.715784][   T43] usb 5-1: USB disconnect, device number 64
[ 1206.762248][T20260] syzkaller0: entered promiscuous mode
[ 1206.777650][T20260] syzkaller0: entered allmulticast mode
[ 1208.050217][   T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1208.297081][   T43] usb 2-1: Using ep0 maxpacket: 16
[ 1208.328041][   T43] usb 2-1: config 0 has no interfaces?
[ 1208.359642][   T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1208.482920][   T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1208.501920][   T43] usb 2-1: Manufacturer: syz
[ 1208.779704][   T43] usb 2-1: config 0 descriptor??
[ 1208.813709][T20267] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1208.813709][T20267]    program syz.4.3571 not setting count and/or reply_len properly
[ 1209.267880][T20284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.287641][T20284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.376115][ T1646] usb 2-1: USB disconnect, device number 76
[ 1210.203387][T20294] syzkaller0: entered promiscuous mode
[ 1210.208989][T20294] syzkaller0: entered allmulticast mode
[ 1211.308523][T20291] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1211.308523][T20291]    program syz.3.3576 not setting count and/or reply_len properly
[ 1211.532118][ T1646] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[ 1211.826109][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.855175][ T1646] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1211.868895][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1211.885592][ T1646] usb 3-1: Product: syz
[ 1211.895147][ T1646] usb 3-1: Manufacturer: syz
[ 1211.903727][ T1646] usb 3-1: SerialNumber: syz
[ 1211.915413][ T1646] usb 3-1: config 0 descriptor??
[ 1211.927266][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1212.262276][T20295] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1212.262276][T20295]    program syz.2.3578 not setting count and/or reply_len properly
[ 1213.461924][ T1646] usb 3-1: USB disconnect, device number 66
[ 1213.873067][T20331] udevd[20331]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1215.283006][ T1646] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[ 1215.483208][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.500479][ T1646] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1215.530204][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1215.556602][ T1646] usb 3-1: Product: syz
[ 1215.561517][ T1646] usb 3-1: Manufacturer: syz
[ 1215.616205][ T1646] usb 3-1: SerialNumber: syz
[ 1215.779861][T18433] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[ 1215.790735][ T1646] usb 3-1: config 0 descriptor??
[ 1215.966135][T18433] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.971691][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1215.987042][T18433] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1215.997375][T18433] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1216.006365][T18433] usb 2-1: Product: syz
[ 1216.015874][T18433] usb 2-1: Manufacturer: syz
[ 1216.023893][T18433] usb 2-1: SerialNumber: syz
[ 1216.053001][T18433] usb 2-1: config 0 descriptor??
[ 1216.067811][T18433] gspca_main: conex-2.14.0 probing 0572:0041
[ 1216.393183][T20335] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1216.393183][T20335]    program syz.1.3586 not setting count and/or reply_len properly
[ 1216.534932][T20326] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1216.534932][T20326]    program syz.2.3584 not setting count and/or reply_len properly
[ 1217.014580][T18433] usb 2-1: USB disconnect, device number 77
[ 1217.093431][T20360] udevd[20360]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1217.414540][ T1646] usb 3-1: USB disconnect, device number 67
[ 1217.477530][T20363] udevd[20363]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1218.729997][T18433] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1219.289541][T18433] usb 3-1: Using ep0 maxpacket: 16
[ 1219.296418][T18433] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1219.304633][T18433] usb 3-1: can't read configurations, error -61
[ 1219.439543][T18433] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1219.719706][T18433] usb 3-1: Using ep0 maxpacket: 16
[ 1219.825900][T18433] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1219.840232][T18433] usb 3-1: can't read configurations, error -61
[ 1219.864023][T18433] usb usb3-port1: attempt power cycle
[ 1220.339701][T18433] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1220.366959][T18433] usb 3-1: Using ep0 maxpacket: 16
[ 1220.380130][T18433] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1220.387753][T18433] usb 3-1: can't read configurations, error -61
[ 1220.509278][ T1646] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1220.519676][T18433] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1220.550391][T18433] usb 3-1: Using ep0 maxpacket: 16
[ 1220.559679][   T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1220.588595][T18433] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1220.598846][T18433] usb 3-1: can't read configurations, error -61
[ 1220.606031][T18433] usb usb3-port1: unable to enumerate USB device
[ 1220.669202][ T1646] usb 4-1: Using ep0 maxpacket: 16
[ 1220.704294][ T1646] usb 4-1: config 0 has no interfaces?
[ 1220.711280][ T1646] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1220.720555][   T43] usb 2-1: Using ep0 maxpacket: 16
[ 1220.728594][   T43] usb 2-1: config 0 has no interfaces?
[ 1220.754214][ T1646] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1220.764286][   T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1220.773638][ T1646] usb 4-1: Manufacturer: syz
[ 1220.778411][   T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1220.787991][   T43] usb 2-1: Manufacturer: syz
[ 1220.793333][ T1646] usb 4-1: config 0 descriptor??
[ 1220.976280][   T43] usb 2-1: config 0 descriptor??
[ 1221.307558][   T30] audit: type=1326 audit(1761911736.863:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.3.3594" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1221.440236][T20401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.454709][T20387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.455042][T20401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1221.845530][T20387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1221.866510][ T1646] usb 2-1: USB disconnect, device number 78
[ 1222.813856][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'.
[ 1223.519725][ T1646] usb 4-1: USB disconnect, device number 73
[ 1229.385150][T20493] fuse: Bad value for 'fd'
[ 1229.937590][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'.
[ 1234.189295][T20164] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[ 1234.361081][T20164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.384588][T20164] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1234.394829][T20164] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1234.415514][T20164] usb 3-1: Product: syz
[ 1234.679549][T20164] usb 3-1: Manufacturer: syz
[ 1234.735746][T20164] usb 3-1: SerialNumber: syz
[ 1234.775060][T20164] usb 3-1: config 0 descriptor??
[ 1234.787352][T20164] gspca_main: conex-2.14.0 probing 0572:0041
[ 1234.858666][T20549] syzkaller0: entered promiscuous mode
[ 1234.886295][T20549] syzkaller0: entered allmulticast mode
[ 1234.987384][T20522] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1234.987384][T20522]    program syz.2.3622 not setting count and/or reply_len properly
[ 1235.212537][T20164] usb 3-1: USB disconnect, device number 72
[ 1235.399639][T18433] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1235.416067][T20559] udevd[20559]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1235.690800][T18433] usb 5-1: Using ep0 maxpacket: 16
[ 1235.697741][T18433] usb 5-1: config 0 has no interfaces?
[ 1235.846083][T18433] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1235.855228][T18433] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1236.112541][T18433] usb 5-1: Manufacturer: syz
[ 1236.132402][T18433] usb 5-1: config 0 descriptor??
[ 1236.520267][   T30] audit: type=1326 audit(1761911752.073:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20554 comm="syz.4.3628" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1236.563754][T20568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1236.593522][T20568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.630567][T20569] fuse: Bad value for 'fd'
[ 1236.723572][T20562] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1236.723572][T20562]    program syz.0.3630 not setting count and/or reply_len properly
[ 1236.954398][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'.
[ 1238.145932][T20164] usb 5-1: USB disconnect, device number 65
[ 1238.331015][T20582] syzkaller0: entered promiscuous mode
[ 1238.340899][T20582] syzkaller0: entered allmulticast mode
[ 1239.099661][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.106098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.292322][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'.
[ 1245.327431][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'.
[ 1250.323828][T20699] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1250.323828][T20699]    program syz.0.3658 not setting count and/or reply_len properly
[ 1250.553358][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'.
[ 1252.899900][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'.
[ 1253.393618][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'.
[ 1255.027787][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'.
[ 1255.338883][T20779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1255.360668][T20164] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1255.529635][T20164] usb 2-1: Using ep0 maxpacket: 16
[ 1255.626663][T20164] usb 2-1: config 0 has no interfaces?
[ 1255.639728][T20164] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1255.649226][T20164] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1255.657439][T20164] usb 2-1: Manufacturer: syz
[ 1255.738998][T20164] usb 2-1: config 0 descriptor??
[ 1256.011638][   T30] audit: type=1326 audit(1761911771.573:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20767 comm="syz.1.3672" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1256.113896][T20790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1256.123935][T20790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1256.699245][T20164] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1256.759512][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'.
[ 1256.930402][T20164] usb 3-1: Using ep0 maxpacket: 16
[ 1256.979662][T20164] usb 3-1: config 0 has no interfaces?
[ 1257.054322][T20164] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1257.076567][T20164] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1257.124523][T20164] usb 3-1: Manufacturer: syz
[ 1257.156049][T20164] usb 3-1: config 0 descriptor??
[ 1257.458750][   T30] audit: type=1326 audit(1761911773.013:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.2.3677" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0
[ 1257.562477][T20811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1257.578489][T20811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1257.627415][T20811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3677'.
[ 1257.860675][T10863] usb 2-1: USB disconnect, device number 79
[ 1259.439729][ T1646] usb 3-1: USB disconnect, device number 73
[ 1261.073908][T20837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'.
[ 1261.310777][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'.
[ 1262.149595][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'.
[ 1264.066748][ T1646] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[ 1264.354924][ T1646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1264.370456][ T1646] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1264.386835][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1264.444942][ T1646] usb 4-1: Product: syz
[ 1264.461101][ T1646] usb 4-1: Manufacturer: syz
[ 1264.477468][ T1646] usb 4-1: SerialNumber: syz
[ 1264.667340][ T1646] usb 4-1: config 0 descriptor??
[ 1264.924093][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1265.126690][T20851] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1265.126690][T20851]    program syz.3.3690 not setting count and/or reply_len properly
[ 1265.302905][ T1646] usb 4-1: USB disconnect, device number 74
[ 1265.343718][T20883] udevd[20883]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1266.813654][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'.
[ 1268.888870][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[ 1270.687293][T20946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1273.869051][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'.
[ 1274.153491][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3713'.
[ 1279.396164][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'.
[ 1280.306433][T21051] syzkaller0: entered promiscuous mode
[ 1280.313711][T21051] syzkaller0: entered allmulticast mode
[ 1283.180529][ T1646] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1283.499166][ T1646] usb 2-1: Using ep0 maxpacket: 16
[ 1283.506484][ T1646] usb 2-1: config 0 has no interfaces?
[ 1283.531731][ T1646] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1283.531763][ T1646] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1283.531784][ T1646] usb 2-1: Manufacturer: syz
[ 1283.534474][ T1646] usb 2-1: config 0 descriptor??
[ 1283.965004][   T30] audit: type=1326 audit(1761911799.483:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21073 comm="syz.1.3731" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1283.991261][T21095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1284.267725][T21095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1286.260667][T10863] usb 2-1: USB disconnect, device number 80
[ 1291.616659][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'.
[ 1297.503388][T21211] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1297.503388][T21211]    program syz.0.3756 not setting count and/or reply_len properly
[ 1298.188883][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'.
[ 1300.355895][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.366518][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.240429][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'.
[ 1302.649711][T18433] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1302.909633][T18433] usb 4-1: Using ep0 maxpacket: 16
[ 1302.927029][T18433] usb 4-1: config 0 has no interfaces?
[ 1302.933939][T18433] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1302.944117][T18433] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1303.003578][T18433] usb 4-1: Manufacturer: syz
[ 1303.403785][T18433] usb 4-1: config 0 descriptor??
[ 1304.134102][   T30] audit: type=1326 audit(1761911819.673:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21278 comm="syz.3.3770" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1304.356991][T21280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1304.417520][T21280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1304.667472][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'.
[ 1305.734014][ T1646] usb 4-1: USB disconnect, device number 75
[ 1306.814267][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'.
[ 1312.018058][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'.
[ 1313.175298][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'.
[ 1313.434343][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'.
[ 1315.099223][ T1646] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[ 1315.281592][ T1646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1315.295033][ T1646] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1315.306619][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1315.315431][ T1646] usb 4-1: Product: syz
[ 1315.324210][ T1646] usb 4-1: Manufacturer: syz
[ 1315.335741][ T1646] usb 4-1: SerialNumber: syz
[ 1315.368908][ T1646] usb 4-1: config 0 descriptor??
[ 1315.510365][ T1646] gspca_main: conex-2.14.0 probing 0572:0041
[ 1315.707704][T21401] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1315.707704][T21401]    program syz.3.3794 not setting count and/or reply_len properly
[ 1316.035607][T20164] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[ 1316.262509][T20164] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1316.335972][T20164] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1316.369744][T20164] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1316.378373][T20164] usb 5-1: Product: syz
[ 1316.384294][T20164] usb 5-1: Manufacturer: syz
[ 1316.390109][T20164] usb 5-1: SerialNumber: syz
[ 1316.426395][T20164] usb 5-1: config 0 descriptor??
[ 1316.448885][T20164] gspca_main: conex-2.14.0 probing 0572:0041
[ 1316.459945][ T1646] usb 4-1: USB disconnect, device number 76
[ 1316.527911][T21431] udevd[21431]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1316.645153][T21410] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1316.645153][T21410]    program syz.4.3797 not setting count and/or reply_len properly
[ 1317.096242][T20164] usb 5-1: USB disconnect, device number 66
[ 1317.149011][T21437] udevd[21437]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[ 1318.103814][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'.
[ 1318.514372][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'.
[ 1319.561733][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3805'.
[ 1321.919457][T21483] syzkaller0: entered promiscuous mode
[ 1321.931748][T21483] syzkaller0: entered allmulticast mode
[ 1323.068818][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3815'.
[ 1323.968094][T21510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'.
[ 1325.104284][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3820'.
[ 1326.215139][T18433] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1326.719218][T18433] usb 2-1: Using ep0 maxpacket: 16
[ 1326.727335][T18433] usb 2-1: config 0 has no interfaces?
[ 1326.737212][T18433] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1326.759054][T18433] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1326.787424][T18433] usb 2-1: Manufacturer: syz
[ 1326.816933][T18433] usb 2-1: config 0 descriptor??
[ 1327.490330][T21555] syzkaller0: entered promiscuous mode
[ 1327.500871][   T30] audit: type=1326 audit(1761911843.063:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21536 comm="syz.1.3823" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0
[ 1327.522921][T21555] syzkaller0: entered allmulticast mode
[ 1327.744181][T21556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1327.757835][T21556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1329.673374][ T1646] usb 2-1: USB disconnect, device number 81
[ 1331.093259][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'.
[ 1332.392150][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'.
[ 1333.307794][T18433] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1333.623014][T18433] usb 3-1: Using ep0 maxpacket: 16
[ 1333.667274][T18433] usb 3-1: config 0 has no interfaces?
[ 1333.677813][T18433] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1333.687714][T18433] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1333.695912][T18433] usb 3-1: Manufacturer: syz
[ 1333.702506][T18433] usb 3-1: config 0 descriptor??
[ 1333.952865][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3841'.
[ 1334.004456][   T30] audit: type=1326 audit(1761911849.563:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.2.3839" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0
[ 1334.461391][T21647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1334.484560][T21647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.006647][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3844'.
[ 1336.071269][ T1646] usb 3-1: USB disconnect, device number 74
[ 1336.310963][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'.
[ 1338.627417][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3851'.
[ 1341.397902][T21729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1341.559444][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'.
[ 1341.645039][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'.
[ 1341.979691][T18433] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1342.129818][T18433] usb 5-1: Using ep0 maxpacket: 16
[ 1342.136699][T18433] usb 5-1: config 0 has no interfaces?
[ 1342.143833][T18433] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1342.153478][T18433] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1342.161900][T18433] usb 5-1: Manufacturer: syz
[ 1342.168268][T18433] usb 5-1: config 0 descriptor??
[ 1342.402947][   T30] audit: type=1326 audit(1761911857.963:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21739 comm="syz.4.3861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55539 code=0x0
[ 1342.579433][T21751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1342.590756][T21751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.065203][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3867'.
[ 1344.328895][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'.
[ 1344.958411][ T1646] usb 5-1: USB disconnect, device number 67
[ 1345.374662][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'.
[ 1346.217026][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'.
[ 1347.426831][T21809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1348.980076][T21831] syzkaller0: entered promiscuous mode
[ 1349.241367][T21831] syzkaller0: entered allmulticast mode
[ 1349.872735][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'.
[ 1350.006962][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3883'.
[ 1350.731535][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'.
[ 1352.971045][T21881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1353.494425][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3891'.
[ 1355.752119][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'.
[ 1360.091823][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'.
[ 1361.755545][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.763097][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.324609][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'.
[ 1369.741025][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3925'.
[ 1375.929190][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'.
[ 1381.917694][T22192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1383.873107][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'.
[ 1386.880036][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'.
[ 1389.385317][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'.
[ 1390.007798][T22286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1395.311506][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'.
[ 1395.436724][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'.
[ 1395.927491][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3977'.
[ 1396.492805][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3982'.
[ 1401.475753][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'.
[ 1406.106492][T22471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1407.902105][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4008'.
[ 1411.748580][T22546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1412.292645][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'.
[ 1412.982119][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'.
[ 1415.587820][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'.
[ 1417.634744][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4035'.
[ 1418.646869][T22637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1420.276756][T22666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'.
[ 1422.357207][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'.
[ 1423.172824][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.179717][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1426.488001][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4059'.
[ 1427.915129][T22753] syzkaller0: entered promiscuous mode
[ 1427.921388][T22753] syzkaller0: entered allmulticast mode
[ 1432.592544][T22804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1432.722508][T22805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4075'.
[ 1433.017737][T22806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1433.091576][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4076'.
[ 1437.251712][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'.
[ 1438.956422][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4090'.
[ 1439.576924][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'.
[ 1443.096735][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'.
[ 1445.732309][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'.
[ 1446.191531][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4111'.
[ 1446.964726][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'.
[ 1448.961989][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4117'.
[ 1449.136664][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'.
[ 1449.516133][T23017] syzkaller0: entered promiscuous mode
[ 1449.522410][T23017] syzkaller0: entered allmulticast mode
[ 1449.714037][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'.
[ 1451.531105][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'.
[ 1451.546511][T23040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[ 1455.703213][T23081] syzkaller0: entered promiscuous mode
[ 1455.729598][T23081] syzkaller0: entered allmulticast mode
[ 1457.024805][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4138'.
[ 1457.689690][T23105] tty tty4: ldisc open failed (-12), clearing slot 3
[ 1458.502632][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4141'.
[ 1461.014033][T23155] syzkaller0: entered promiscuous mode
[ 1461.020417][T23155] syzkaller0: entered allmulticast mode
[ 1464.770692][T23190] fuse: Bad value for 'fd'
[ 1466.498999][T23211] syzkaller0: entered promiscuous mode
[ 1466.515886][T23211] syzkaller0: entered allmulticast mode
[ 1467.615964][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'.
[ 1473.585053][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'.
[ 1475.425975][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'.
[ 1476.273408][T23329] syzkaller0: entered promiscuous mode
[ 1476.279580][T23329] syzkaller0: entered allmulticast mode
[ 1480.544674][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'.
[ 1481.513607][T23381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'.
[ 1484.668426][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.699013][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1488.500661][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'.
[ 1490.759986][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4212'.
[ 1492.153024][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4218'.
[ 1494.971755][T23536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'.
[ 1496.395965][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'.
[ 1499.118824][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[ 1506.007535][T23663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1506.027306][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'.
[ 1512.374015][T23738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4260'.
[ 1522.467658][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4283'.
[ 1524.738022][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'.
[ 1527.817496][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'.
[ 1529.049837][T23943] syzkaller0: entered promiscuous mode
[ 1529.078304][T23943] syzkaller0: entered allmulticast mode
[ 1529.941624][T23952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'.
[ 1533.950610][T23999] syzkaller0: entered promiscuous mode
[ 1533.950628][T23999] syzkaller0: entered allmulticast mode
[ 1536.646597][T24038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'.
[ 1536.728765][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'.
[ 1539.186087][T24068] syzkaller0: entered promiscuous mode
[ 1539.195454][T24068] syzkaller0: entered allmulticast mode
[ 1539.744502][T24073] syzkaller0: entered promiscuous mode
[ 1539.751562][T24073] syzkaller0: entered allmulticast mode
[ 1541.947858][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'.
[ 1544.691182][T24122] syzkaller0: entered promiscuous mode
[ 1544.712733][T24128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'.
[ 1544.875253][T24122] syzkaller0: entered allmulticast mode
[ 1545.468713][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'.
[ 1546.062205][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.069006][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1547.382181][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4343'.
[ 1548.654348][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'.
[ 1550.975163][T24205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4351'.
[ 1553.148200][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'.
[ 1554.440172][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'.
[ 1555.660281][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'.
[ 1558.950189][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'.
[ 1559.189763][T24303] syzkaller0: entered promiscuous mode
[ 1559.196978][T24303] syzkaller0: entered allmulticast mode
[ 1561.558428][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'.
[ 1562.288361][T24342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1567.297516][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4390'.
[ 1574.833306][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'.
[ 1578.432115][T24519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1579.387935][T24533] syzkaller0: entered promiscuous mode
[ 1579.403239][T24533] syzkaller0: entered allmulticast mode
[ 1582.353648][T24574] syzkaller0: entered promiscuous mode
[ 1582.359886][T24574] syzkaller0: entered allmulticast mode
[ 1585.058020][T24607] syzkaller0: entered promiscuous mode
[ 1585.064385][T24607] syzkaller0: entered allmulticast mode
[ 1585.194855][T24603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1587.039382][T24628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'.
[ 1593.525844][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4451'.
[ 1596.682561][T24749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4459'.
[ 1601.264767][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4466'.
[ 1602.112264][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'.
[ 1607.576839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.584577][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1609.550724][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'.
[ 1614.346359][T24938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4494'.
[ 1616.409302][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4498'.
[ 1617.181262][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'.
[ 1620.090857][T24999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4507'.
[ 1621.729703][T25017] syzkaller0: entered promiscuous mode
[ 1621.767563][T25017] syzkaller0: entered allmulticast mode
[ 1623.055030][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4513'.
[ 1625.334976][T25059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4517'.
[ 1626.150242][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 1630.178808][T25114] syzkaller0: entered promiscuous mode
[ 1630.184589][T25114] syzkaller0: entered allmulticast mode
[ 1631.418301][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4533'.
[ 1633.919882][T25160] syzkaller0: entered promiscuous mode
[ 1633.919907][T25160] syzkaller0: entered allmulticast mode
[ 1636.075842][T25180] syzkaller0: entered promiscuous mode
[ 1636.083061][T25180] syzkaller0: entered allmulticast mode
[ 1636.413844][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'.
[ 1636.676758][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4548'.
[ 1641.228064][T25233] syzkaller0: entered promiscuous mode
[ 1641.265207][T25233] syzkaller0: entered allmulticast mode
[ 1642.909254][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4560'.
[ 1643.108134][T25256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1643.814631][T25262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1651.221251][T25345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1651.708966][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4579'.
[ 1651.870667][T25352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4580'.
[ 1654.427943][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4588'.
[ 1657.299976][T25418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4593'.
[ 1657.476433][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4594'.
[ 1657.996859][T25425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1658.707939][T25437] blktrace: Concurrent blktraces are not allowed on sg0
[ 1658.778893][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4598'.
[ 1660.718067][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[ 1663.448038][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4605'.
[ 1664.654867][T25504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1665.618767][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'.
[ 1668.974344][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.983447][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1670.290345][T25560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4621'.
[ 1671.226257][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'.
[ 1671.671112][T25575] syzkaller0: entered promiscuous mode
[ 1671.677325][T25575] syzkaller0: entered allmulticast mode
[ 1672.173583][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'.
[ 1673.332925][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'.
[ 1675.991063][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4636'.
[ 1676.729318][ T1646] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[ 1676.943020][ T1646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.018509][ T1646] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1677.029817][ T1646] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1677.137760][ T1646] usb 5-1: Product: syz
[ 1677.149937][ T1646] usb 5-1: Manufacturer: syz
[ 1677.154765][ T1646] usb 5-1: SerialNumber: syz
[ 1677.174665][ T1646] usb 5-1: config 0 descriptor??
[ 1677.217967][ T1646] usb 5-1: can't set config #0, error -71
[ 1677.248400][ T1646] usb 5-1: USB disconnect, device number 68
[ 1677.433498][T25641] syzkaller0: entered promiscuous mode
[ 1677.509826][T25641] syzkaller0: entered allmulticast mode
[ 1682.436470][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'.
[ 1684.148939][T25704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4650'.
[ 1685.320602][T25719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1685.603862][T25724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1686.862810][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'.
[ 1689.504324][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'.
[ 1691.476580][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'.
[ 1692.319480][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'.
[ 1695.861483][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4675'.
[ 1695.990857][T25837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4676'.
[ 1700.919563][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4687'.
[ 1702.985287][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4691'.
[ 1709.241994][T26002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'.
[ 1711.856490][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'.
[ 1714.334656][T26064] syzkaller0: entered promiscuous mode
[ 1714.449484][T26064] syzkaller0: entered allmulticast mode
[ 1714.672071][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4720'.
[ 1716.505713][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4727'.
[ 1718.822274][T26122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1722.166506][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4740'.
[ 1724.877206][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'.
[ 1728.145778][T26226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'.
[ 1728.429418][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'.
[ 1730.438534][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.444986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.786327][T26266] blktrace: Concurrent blktraces are not allowed on sg0
[ 1737.721714][T26341] fuse: Bad value for 'fd'
[ 1739.463386][T26356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4778'.
[ 1740.058837][T26365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1740.278179][T26370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4780'.
[ 1740.423320][T26373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1741.970383][T26386] syzkaller0: entered promiscuous mode
[ 1741.970406][T26386] syzkaller0: entered allmulticast mode
[ 1759.242535][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4816'.
[ 1763.768042][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4827'.
[ 1766.173570][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[ 1770.212560][T26707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1772.256605][T26726] syzkaller0: entered promiscuous mode
[ 1772.262374][T26726] syzkaller0: entered allmulticast mode
[ 1777.424484][T26784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1778.907567][T26802] syzkaller0: entered promiscuous mode
[ 1778.913210][T26802] syzkaller0: entered allmulticast mode
[ 1792.313556][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.320371][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1793.299883][T26977] fuse: Bad value for 'fd'
[ 1796.607933][T27007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4903'.
[ 1812.991863][T27189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4937'.
[ 1813.661077][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'.
[ 1819.500879][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4950'.
[ 1820.646544][T27282] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1833.174961][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4978'.
[ 1834.970320][T27429] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1838.661062][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4988'.
[ 1839.384810][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4989'.
[ 1844.737706][T27531] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1847.864802][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5006'.
[ 1847.910116][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'.
[ 1848.161824][T27563] syzkaller0: entered promiscuous mode
[ 1848.171998][T27563] syzkaller0: entered allmulticast mode
[ 1849.198102][T27574] fuse: Bad value for 'fd'
[ 1850.677965][T27593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5013'.
[ 1853.357078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.365747][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.414821][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5018'.
[ 1855.840558][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5024'.
[ 1860.182292][T27700] syzkaller0: entered promiscuous mode
[ 1860.198202][T27700] syzkaller0: entered allmulticast mode
[ 1863.190324][T27732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5038'.
[ 1864.148869][T27754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5043'.
[ 1864.813568][T27759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5044'.
[ 1865.441875][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5045'.
[ 1867.248484][T27792] fuse: Bad value for 'fd'
[ 1869.389034][T27814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5052'.
[ 1871.931554][T27826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1875.246308][T27860] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1878.720136][T27897] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1884.043774][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5081'.
[ 1884.076191][T27949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5080'.
[ 1884.362620][T27952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5082'.
[ 1884.550587][T27955] syzkaller0: entered promiscuous mode
[ 1884.556265][T27955] syzkaller0: entered allmulticast mode
[ 1889.635184][T28004] fuse: Invalid rootmode
[ 1890.516172][T28014] syzkaller0: entered promiscuous mode
[ 1890.579312][T28014] syzkaller0: entered allmulticast mode
[ 1890.920138][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5096'.
[ 1891.320335][T28029] fuse: Bad value for 'user_id'
[ 1891.325488][T28029] fuse: Bad value for 'user_id'
[ 1893.071201][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5100'.
[ 1893.835847][T28049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5103'.
[ 1898.757257][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5113'.
[ 1898.959709][T28108] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1904.013932][T28153] syzkaller0: entered promiscuous mode
[ 1904.030857][T28153] syzkaller0: entered allmulticast mode
[ 1904.854388][T28173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5125'.
[ 1906.987366][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5129'.
[ 1909.311641][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'.
[ 1913.322046][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'.
[ 1914.350729][T28270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5147'.
[ 1914.814123][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.829487][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.641342][T28283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5150'.
[ 1917.905596][T28304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5154'.
[ 1919.400659][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5158'.
[ 1919.666075][T28322] syzkaller0: entered promiscuous mode
[ 1919.673866][T28322] syzkaller0: entered allmulticast mode
[ 1920.536126][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5162'.
[ 1921.783850][T28348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5165'.
[ 1922.676766][T28359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5167'.
[ 1922.714210][T28360] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1923.521862][T28373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5170'.
[ 1924.032241][T28376] syzkaller0: entered promiscuous mode
[ 1924.040707][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'.
[ 1924.094441][T28376] syzkaller0: entered allmulticast mode
[ 1924.626980][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'.
[ 1927.008732][T28420] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1928.890758][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'.
[ 1929.917805][T28449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1930.885382][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'.
[ 1936.337143][T28526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5205'.
[ 1937.260727][T28531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5206'.
[ 1941.434325][T28580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5216'.
[ 1946.888027][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5228'.
[ 1947.038038][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5229'.
[ 1949.326293][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'.
[ 1953.530654][T28713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5244'.
[ 1954.081852][T28724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5245'.
[ 1955.537806][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1957.111494][T28758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5253'.
[ 1958.849583][   T31] INFO: task kworker/1:5:5920 blocked for more than 163 seconds.
[ 1958.870187][   T31]       Not tainted syzkaller #0
[ 1958.875468][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1958.887865][   T31] task:kworker/1:5     state:D stack:20680 pid:5920  tgid:5920  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1959.033311][   T31] Workqueue: usb_hub_wq hub_event
[ 1959.038979][   T31] Call Trace:
[ 1959.043498][   T31]  <TASK>
[ 1959.047209][   T31]  __schedule+0x1798/0x4cc0
[ 1959.098689][   T31]  ? __pfx___schedule+0x10/0x10
[ 1959.262369][   T31]  ? schedule+0x91/0x360
[ 1959.273538][   T31]  schedule+0x165/0x360
[ 1959.285482][   T31]  usb_kill_urb+0x1be/0x2d0
[ 1959.594417][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 1959.604065][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1959.618454][   T31]  usb_start_wait_urb+0x18c/0x4c0
[ 1959.632644][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1959.647095][   T31]  ? usb_alloc_urb+0x46/0x150
[ 1959.697766][   T31]  usb_control_msg+0x232/0x3e0
[ 1959.711982][   T31]  hub_port_init+0xbf9/0x2800
[ 1959.719810][   T31]  hub_event+0x2532/0x4a20
[ 1959.727770][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1959.736825][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1959.748267][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1959.757257][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1959.768305][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1959.780473][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1959.791636][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1959.806242][   T31]  worker_thread+0x8a0/0xda0
[ 1959.816307][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1959.827027][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1959.837516][   T31]  kthread+0x711/0x8a0
[ 1959.849264][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1959.854591][   T31]  ? __pfx_kthread+0x10/0x10
[ 1959.899751][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1959.949826][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1959.955990][   T31]  ? __pfx_kthread+0x10/0x10
[ 1959.961249][   T31]  ret_from_fork+0x4bc/0x870
[ 1959.966104][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1959.976208][   T31]  ? __switch_to_asm+0x39/0x70
[ 1959.982651][   T31]  ? __switch_to_asm+0x33/0x70
[ 1959.987878][   T31]  ? __pfx_kthread+0x10/0x10
[ 1960.009002][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1960.014342][   T31]  </TASK>
[ 1960.017621][   T31] 
[ 1960.017621][   T31] Showing all locks held in the system:
[ 1960.067420][   T31] 1 lock held by khungtaskd/31:
[ 1960.079985][   T31]  #0: ffffffff8df3d4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1960.107767][   T31] 2 locks held by getty/5587:
[ 1960.112953][   T31]  #0: ffff88802f9540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1960.123207][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1960.134877][   T31] 5 locks held by kworker/1:5/5920:
[ 1960.140596][   T31]  #0: ffff8881436a7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1960.155134][   T31]  #1: ffffc9000454fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1960.178548][   T31]  #2: ffff888145bc7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 1960.198548][   T31]  #3: ffff888146323518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 1960.221224][   T31]  #4: ffff888145bd4c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 1960.231653][   T31] 5 locks held by kworker/u8:1/16005:
[ 1960.237132][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1960.248705][   T31]  #1: ffffc90016bdfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1960.264985][   T31]  #2: ffffffff8f2be430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[ 1960.274614][   T31]  #3: ffffffff8f2cb2c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[ 1960.283781][   T31]  #4: ffffffff8df42f78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1960.296687][   T31] 3 locks held by kworker/1:0/20164:
[ 1960.302420][   T31]  #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1960.312769][   T31]  #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1960.322069][   T31]  #2: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1960.332627][   T31] 
[ 1960.336249][   T31] =============================================
[ 1960.336249][   T31] 
[ 1960.345176][   T31] NMI backtrace for cpu 0
[ 1960.345194][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1960.345212][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1960.345223][   T31] Call Trace:
[ 1960.345231][   T31]  <TASK>
[ 1960.345238][   T31]  dump_stack_lvl+0x189/0x250
[ 1960.345269][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1960.345291][   T31]  ? __pfx__printk+0x10/0x10
[ 1960.345318][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1960.345339][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1960.345359][   T31]  ? __pfx__printk+0x10/0x10
[ 1960.345382][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1960.345414][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1960.345438][   T31]  watchdog+0xf60/0xfa0
[ 1960.345461][   T31]  ? watchdog+0x1e2/0xfa0
[ 1960.345485][   T31]  kthread+0x711/0x8a0
[ 1960.345513][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1960.345529][   T31]  ? __pfx_kthread+0x10/0x10
[ 1960.345556][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1960.345579][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1960.345601][   T31]  ? __pfx_kthread+0x10/0x10
[ 1960.345628][   T31]  ret_from_fork+0x4bc/0x870
[ 1960.345652][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1960.345680][   T31]  ? __switch_to_asm+0x39/0x70
[ 1960.345696][   T31]  ? __switch_to_asm+0x33/0x70
[ 1960.345713][   T31]  ? __pfx_kthread+0x10/0x10
[ 1960.345740][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1960.345778][   T31]  </TASK>
[ 1960.345786][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1960.501682][    C1] NMI backtrace for cpu 1
[ 1960.501702][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1960.501723][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1960.501734][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1960.501773][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 01 22 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1960.501790][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 1960.501807][    C1] RAX: 07fc43a072932b00 RBX: ffffffff81967be7 RCX: 07fc43a072932b00
[ 1960.501821][    C1] RDX: 0000000000000001 RSI: ffffffff8d70ceaa RDI: ffffffff8bbf0760
[ 1960.501835][    C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[ 1960.501849][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd870
[ 1960.501862][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58
[ 1960.501875][    C1] FS:  0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000
[ 1960.501890][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1960.501902][    C1] CR2: 0000000033c12ffc CR3: 000000007d4fa000 CR4: 00000000003526f0
[ 1960.501918][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1960.501930][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1960.501941][    C1] Call Trace:
[ 1960.501949][    C1]  <TASK>
[ 1960.501956][    C1]  default_idle+0x13/0x20
[ 1960.501981][    C1]  default_idle_call+0x73/0xb0
[ 1960.501997][    C1]  do_idle+0x1e7/0x510
[ 1960.502020][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1960.502045][    C1]  cpu_startup_entry+0x44/0x60
[ 1960.502063][    C1]  start_secondary+0x101/0x110
[ 1960.502088][    C1]  common_startup_64+0x13e/0x147
[ 1960.502118][    C1]  </TASK>