last executing test programs:

20.116992603s ago: executing program 4 (id=5869):
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000004"], 0x0)

20.068665142s ago: executing program 4 (id=5870):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000021000100001400000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a000000e80011"], 0x144}}, 0x0)

19.959305739s ago: executing program 4 (id=5871):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000b6c0e249bd400f0000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800"], 0xc4}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0xfd}, 0xfdff)

19.851361814s ago: executing program 4 (id=5872):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = getgid()
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r1}}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x4, 0x1, 0x0, [0x0]}}, 0x29)
syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)

19.708903067s ago: executing program 4 (id=5875):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0)
r0 = open(&(0x7f00000001c0)='./file1\x00', 0xc930122c3f642257, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000008000000000000000080000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000063a970a600000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rmdir(&(0x7f0000000040)='./file1\x00')
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)

19.096750552s ago: executing program 4 (id=5878):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x200, 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x9, 0x8, 0x0, 0x0, 0x4, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x1, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r0, 0x203, 0x70bd27, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})

18.665486752s ago: executing program 32 (id=5878):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x200, 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x9, 0x8, 0x0, 0x0, 0x4, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x1, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r0, 0x203, 0x70bd27, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})

12.581432171s ago: executing program 1 (id=5905):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000021000100000000000000000a00000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000a000000e80011"], 0x144}}, 0x0)

12.482280933s ago: executing program 1 (id=5906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'pim6reg0\x00', 0x2})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x20000000)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xe18c18475b77c332, 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r7=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r5, &(0x7f0000004580)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r5, 0x0, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r8, r5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0)

10.5853684s ago: executing program 1 (id=5910):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r3=>0x0, 0x6, 0x4e, 0x1, 0x7, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x740, 0x40, 0xfff, 0x4}})
sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000002840)=@newtfilter={0x164, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0x3, 0xa}, {0xf, 0xad59fb5d201bfbb3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x118, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x108, 0x4, [@m_tunnel_key={0x48, 0xb, 0x0, 0x0, {{0xf}, {0x4}, {0x15, 0x6, "67d4355b33fdceff2d23e91b417bcfef0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xbc, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x3, 0xffffffffffffffff, 0x1, 0x5}, 0x3}}]}, {0x71, 0x6, "1d021e74490a57d2a3ec75101feaa1ac4ee35eed3cf5a37c1cf5a72f9fd841f022195e0faf1d32259099c74409eedd40ec4772b7f270a87860142b33fb26f5e948e3e00224db154b7e755b623cbb6243a8f6b31378b7a8f5951f34e45069e7b44028324cdecba4801ec7846021"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x164}, 0x1, 0x0, 0x0, 0x48004}, 0x40000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10.380152135s ago: executing program 1 (id=5912):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="015d8c4613"], 0x38}}, 0x20044050)
recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/160, 0xa0}, {&(0x7f0000000140)=""/113, 0x71}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f0000000400)=""/34, 0x22}], 0x7, &(0x7f00000004c0)=""/6, 0x6}, 0xfffff001}], 0x1, 0x40002000, &(0x7f0000000540))
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x8)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000580)={0x8, 'hsr0\x00', {'bridge_slave_1\x00'}, 0x7})
ioctl$VT_RELDISP(r0, 0x5605)

9.975486269s ago: executing program 1 (id=5914):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
syz_usb_connect(0x3, 0x46, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16], &(0x7f0000000300)={0x3c, 0x0, 0x0, 0x0, 0x6, [{0x64, &(0x7f0000000000)=@string={0x64, 0x3, "7d6782656d54305a0974396363cfde78c90192884d866b807156d19b4b005165a298f8ecf8f2c2ebe188151c5701b1347df38c9c9a0fec7a8e59c82f25923ff728ac13c9bf00cc0ec788b3cc9f0d66417a491ec555b38381c4972d0717b44d0135a3"}}, {0xac, &(0x7f0000000080)=@string={0xac, 0x3, "94f4f30c51067534add5234a184851b0e90b2ae3fc3ca15a321cc56d8a8dfa220f3e8675ff293dc950bbd0dc4a6c250195382d7faf08efabf6bdd3de4ea5f43e554756b7b06fdb932210b31f7eeb750f12cf25c301c9eddc70705fdfb0a4a2a2a72084b23677b69fb9753dc9e161c33e38f0ebd27bd7c72984519e5c4cfce9eb7718b9209832050718e473b5632449ab382aeae4ba97a2ca605aba5ec246df923a71c6831f6cc1e02c17"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0xab, &(0x7f0000000180)=@string={0xab, 0x3, "807208db68f5b9d7724f228b73ebaa13646b609cffb52285068bb51b083d22ac93628a4702f5de13211008414d32cfd29ed1fcebf32c4c282b611254aca8134cf5815101b617057f3331d107db7fecea9b65d7f39914a18e135daa403c7153336fcc658ef4d8f0e452fba8fe1b5121131d3974fe2eae136b284cb28963984de038966de674cd116b197f57ea90c6590608e352265029cbd0e32b05efa39c7b55dbafa3a29c93547c21"}}, {0x75, &(0x7f0000000240)=@string={0x75, 0x3, "1d75ec0e1a3d1f069eb66e4be1e289aa481c94f31b76681acf194a1b15eaa62bed7aa6f0d8fcd90f844fceb076a0ebd0773ef6d96d67bb5e443e343195c01e24cd4a58d59d8fdefbcb845fe478df992ce788b6cde182405138bdfe372af28ccb1289e5b0c69ec03f73a1e30f85b899e6cbdc33"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}]})

6.812518192s ago: executing program 1 (id=5938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd1}, 0x8044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (rerun: 64)

6.680046876s ago: executing program 0 (id=5941):
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x149842, 0x4)
r2 = eventfd2(0x8, 0x1)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
io_submit(r0, 0x11, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xd, r1, &(0x7f0000000100)='\x00', 0x1, 0x9000, 0x0, 0x1, r2}])

6.483739557s ago: executing program 0 (id=5944):
r0 = fanotify_init(0x200, 0x0)
memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
dup(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1580, &(0x7f0000000040)={0x0, 0x242, 0x800, 0x20000, 0xc0, 0x0, r2})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3)
bind$inet6(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
socket$inet6(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @rand_addr, @local}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)

6.224590811s ago: executing program 2 (id=5948):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff036}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xeb}]}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0)
accept4(r1, &(0x7f0000000340)=@nfc_llcp, &(0x7f00000003c0)=0x80, 0x80000)
sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@phonet={0x23, 0x7, 0x7, 0x94}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="643f24f71b8c7bf1d79c98253c725b95860cf60e3c1c0c018b874077981f08e149aeda4d5114420d88c974042ef6f673860a616548d92f240537ffd03b197defcd15d2eaffcd909bb264a6b288fb0e768c40bc6a3f7c7075ee7da0121a7fd034a883b679bd0b7ff3c72e7a371f8671ab29b2da5d133e0611ed3723426dde737500", 0x81}, {&(0x7f0000000180)="468e07569c340fd86d6648494eb597911dcdb9a8e945ca464ee413d7b46ca7fe76ee994da3c70165ea2234f548c74c305b043cc6313c337fd9515925093cac50ec633915a66e9ca310dfdb264bd80da2f3a38881099280006a2d4355efefc8646cf8f1b00f171888da9af2ee04d6ce61c64cd23f165198c38c206e1955fb80804efb4b21cdefb484bd48f1eeb4c6c0b150c276a003888a677b3a1bd2fcfc5837981c523cb4086bd6e53af0f9770aae1b79a6f364f35ff0b2f11fefba390fc8", 0xbf}, {&(0x7f0000000240)="d01879dff80b52a392c719542749e225a1df3ede5b8846417814b4ecee28af6f41f7e4aee75667eb09c3d833bf39f7d0b33b1e4576f4fe8f443784fbba9b38eac96c018111895435e7fbbfb3339f2f2a43085b6f9c49615bf2f26bc53b", 0x5d}], 0x3, &(0x7f00000004c0)=[{0xc8, 0x10d, 0x67a, "c2918439d7c62c01bed4c083e84776f31118e6f8d8544721d7d11d96705c16d157f5d088078576f6cb9145254f80ef19b6b2cc948be5574517442b6482dc00c7059751c2662ac05e5dc6d65f23e7220e2669c9156e2a2f121178a1dbb16332259631b7b43bc8cc7f7ecf07b21ca9641aeeddf900c379a79b15624410a797b7a1a58d8d852f8937ec95145cf81d3c8e7296cf019a9b386abef1d368a631a3d049c9d4eb8232ede4980d2a4625f7063e4b43d5"}, {0xe8, 0x10d, 0x3, "fe20aafa2b44bc70cd7f24267f7570cd5272b281104d3add3c059249a4eaf403cb41e6600374680fcfa401524da2d225b410919e326dc0c6f56c012125456fd17e3328307ab29cf9d86c54fcc6adbdd172b688fe70ce1078010540632145466bac9a22d306501ef8e610788a8fb6449396571cd617e6fc27253c944f6332d98f7404188137836c757dd0af9e94fb580318ee84fe3ef4319e652d2c25497ffbcca8eb3452692ba69046aa5dafeb63d2c7e5ee0f8211fa6acd5aaa65708f5eaa2efef5b7060d91667a0955f9a70642a69a00965f1c0d9e7e"}, {0x110, 0x116, 0x0, "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"}, {0x110, 0x10c, 0x400, "869c8f2a331f03325903f7116ae0fee3a6edeef3e42e52ba8150785bd51da120375d0838de3ed8b5cd95050e77c19d1ba1c3e3be0d8b9c1e7020ccc6825cc17f0f68b284a6d2cfb79efc51dcd73a5be719a36b0b520c24d3ae62e3786e6c47aa37ea162c9f7d547bafde6e881adbd760850b3ebca430654d959c5ac21302aed320d47f09f35c27860f301dbf512990211f55b355bed60759327400e82ffcb96ea3b1ea5250e4e9bc29c6081f7284b6fe221f91a3ff236bba014ab347c87d64438a4a0239415d9c1015a03c2e0ea5f550304075af7e35f2e5958a480a8e5d185bebc59c909a40d2d64d7409a8aee6200462dc63f8fec76f46f1254ea3c20e00"}, {0x1010, 0x6, 0x7fff, "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"}, {0xb0, 0xff, 0x9, "deb6cff315fc12c4754e2134eb53abd2c4b172a9e7f867d47639fefa1207f1467e6ab116a42ad98489fae2496a42aa69f5291ab24c3bfc1a7b9ff7d0dc198085e080ce5127dce7d0fcb72a79609386e005e42a397494f3fd093b5f388ef1032c7b58b19764518694c31b0457afaf50b2a5c1b46a100af2f76e6cfffe76dff3df66ea7d957b012f6449b3cab6eba55eeac5079efb04b344c22cd06e305b"}, {0x78, 0x110, 0xd6, "435d65043e2ab77cc4ed2ee6855c0e1bf6eda8886a439c295e53aab18939d315e58773ba276a251e9bf15723fc42df5ba4196ca77e1cacd7b579ee090dab5c2b9ceab13a8ea6434effc3d296a81f442ae228d157393b0951916d29e2b07953f53e03d1303860bea5"}, {0x18, 0x104, 0xc1cc, "c9e6"}, {0x48, 0xff, 0x7, "b5dc381e0f1e5b4b357036db7ef22434c8d3972c14e6b034a3872c734ed97bd5dacfc10c7c53913d42465624eff7e3a0f8be7a93cc2fac"}], 0x1568}, 0x40044)
syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0b17570803c80180c200000186dd61de03000000ff01fe8000000008000000000000000000bb00000000000000000000ffff7f000001"], 0x0)

6.138159007s ago: executing program 2 (id=5950):
r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20803)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000180))
ioctl$EVIOCGREP(r0, 0x80084503, 0x0)
mlock2(&(0x7f0000e22000/0x1000)=nil, 0x1000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl(r5, 0x4, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r9, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x10, 0x20000000, 0x1, {{0x11, 0x4, 0x0, 0x24, 0x44, 0x68, 0x0, 0xbf, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x1, [{0x2, 0xa, "5c656f8f1cbb0b72"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x39, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
getpeername$inet(r11, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

5.573903783s ago: executing program 0 (id=5951):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

5.448574068s ago: executing program 0 (id=5952):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000200002000000200800040001000000", 0x24)

5.288563936s ago: executing program 3 (id=5953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
read$FUSE(r0, &(0x7f0000003ec0)={0x2020}, 0x2020)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
close(0x3)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x8, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x8, 0x8, 0x4, {0x6, 0x0, 0xb, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x30, 0x1, 0x7, 0x3}, 0xb, 0x5}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0)

5.240256683s ago: executing program 0 (id=5954):
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x149842, 0x4)
r2 = eventfd2(0x8, 0x1)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
io_submit(r0, 0x11, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xd, r1, &(0x7f0000000100)='\x00', 0x1, 0x9000, 0x0, 0x1, r2}])

5.038511793s ago: executing program 0 (id=5955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'pim6reg0\x00', 0x2})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x82080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x20000000)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xe18c18475b77c332, 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, <r7=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r5, &(0x7f0000004580)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r5, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0)

4.320663028s ago: executing program 3 (id=5956):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0)
open(&(0x7f00000001c0)='./file1\x00', 0xc930122c3f642257, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x440000000000000, 0x4)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
rmdir(&(0x7f0000000040)='./file1\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x5}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
bind$unix(r3, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)

4.104359468s ago: executing program 2 (id=5957):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x37)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
r3 = getpgrp(0x0)
fcntl$setown(r0, 0x8, r3)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r2, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x4044057)

3.995057999s ago: executing program 2 (id=5958):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_io_uring_setup(0xa4f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4901}, 0x0) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0)

3.635575173s ago: executing program 2 (id=5960):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
write$cgroup_devices(r0, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000001100)=@qipcrtr, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)=""/23, 0x17}, {&(0x7f00000011c0)=""/127, 0x7f}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/40, 0x28}, {&(0x7f0000001300)=""/209, 0xd1}, {&(0x7f0000001400)=""/148, 0x94}], 0x6, &(0x7f0000001540)=""/131, 0x83}, 0xc}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001600)=""/161, 0xa1}, {&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000001700)=""/111, 0x6f}, {&(0x7f0000001780)=""/219, 0xdb}, {&(0x7f0000001880)}], 0x5}, 0x9}, {{&(0x7f0000001940)=@ethernet, 0x80, &(0x7f0000002b40)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/75, 0x4b}, {&(0x7f0000002a40)=""/29, 0x1d}, {&(0x7f0000002a80)=""/113, 0x71}, {&(0x7f0000002b00)=""/48, 0x30}], 0x5, &(0x7f0000002bc0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000003bc0)=@xdp, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c40)=""/203, 0xcb}, {&(0x7f0000003d40)=""/43, 0x2b}], 0x2, &(0x7f0000001880)=""/38, 0x26}, 0x7f}, {{&(0x7f0000003e00)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003e80)=""/246, 0xf6}, {&(0x7f0000003f80)=""/96, 0x60}, {&(0x7f0000004000)=""/4, 0x4}, {&(0x7f0000004040)=""/27, 0x1b}, {&(0x7f0000004080)=""/20, 0x14}, {&(0x7f00000040c0)=""/195, 0xc3}, {&(0x7f00000041c0)=""/2, 0x2}], 0x7, &(0x7f0000004280)=""/114, 0x72}, 0x8}, {{&(0x7f0000004300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004380), 0x0, &(0x7f00000043c0)=""/3, 0x3}, 0xfffffffa}], 0x6, 0x2002, &(0x7f00000045c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x65, @mcast2, 0x7}, 0x1c)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000640)={0x796, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100009"], 0x1c}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r8, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x73, @mcast2, 0x40}}, 0x4, 0x1, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5, 0x4}, 0x9c)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0xfc0}], 0x2, 0x8, 0x1)
write$vga_arbiter(r10, &(0x7f0000000100)=@other={'trylock', ' ', 'io+mem'}, 0xf)

3.484674569s ago: executing program 3 (id=5961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0xb, 0x1, 0x8000, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x0, 0x0, 0x7e4, 0x1, 0x1, 0x45, [0x2, 0x10000001]}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_clone(0x0, &(0x7f0000000080)="6a8b83d9b8f035875bc93f42be942043dd015fc17fc6bcbf31f2aed4f927695bc7b7783558075ecad060cddd7c2ef942afec5c740840a0937d53b0aa7a6f6e3fb4690f7d31bee3306ce442f0e5b46105a54afbeb5be387a6cafed1adccaada352c3a52ed909d9761d6294be138ec42", 0x6f, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000340)="9649b739724089c30ea72a0ec7bdadca373a92e04cfd79dee56918b5a8f36acf4984018d603383a47d14f10ade66329eb4d7cfb06fa9cbca97ded2c3ff547d62237e6af7ad153384d0db50f83e9ae3c46b0dfde2c63539b1962ec1e4514f108f4617cbabede2b5207758694d1fa610abed6fc21ec35b0e69514bda4e2126bd99accb21f4638dcf185370f286850d1e62e53f54a4e6a12d778b3048ff929fd893e2ebf4e2e71cb4529cd9ee0aafdc4a5aa2eae7e0f231a68c1bca0853decca9903691a79cd48e1761c5855e70a0659b3ce3cf8e35c9a249")
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xca3e9000)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf784, 0x2, 0x1, 0xfffffffc}, &(0x7f0000000600), &(0x7f0000000100))
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x3)
ioctl$TCFLSH(r4, 0x540b, 0xfffffffffffffffe)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local})

2.905400609s ago: executing program 5 (id=5964):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r3=>0x0, 0x6, 0x4e, 0x1, 0x7, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x740, 0x40, 0xfff, 0x4}})
sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000002840)=@newtfilter={0x164, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0x3, 0xa}, {0xf, 0xad59fb5d201bfbb3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x118, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x108, 0x4, [@m_tunnel_key={0x48, 0xb, 0x0, 0x0, {{0xf}, {0x4}, {0x15, 0x6, "67d4355b33fdceff2d23e91b417bcfef0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xbc, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x3, 0xffffffffffffffff, 0x1, 0x5}, 0x3}}]}, {0x71, 0x6, "1d021e74490a57d2a3ec75101feaa1ac4ee35eed3cf5a37c1cf5a72f9fd841f022195e0faf1d32259099c74409eedd40ec4772b7f270a87860142b33fb26f5e948e3e00224db154b7e755b623cbb6243a8f6b31378b7a8f5951f34e45069e7b44028324cdecba4801ec7846021"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x164}, 0x1, 0x0, 0x0, 0x48004}, 0x40000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.708712878s ago: executing program 5 (id=5965):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x810)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="e0b9545dd30a", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000440)=[{r0}, {r0, 0x280}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0xa9}, {0xffffffffffffffff, 0x5009}, {0xffffffffffffffff, 0x5130}], 0x6, 0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="68000000150001002cbd7000fbdbdf25ffffffff000000000000000000000000fc0200000000000000000000000000004e240a874e210009020020802f000000", @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="00000000020000000c001500c4050000700000000c000800e7"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x12, r7, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x81, 0xffffffffefffff15, 0x3, 0x5, 0x3, 0xb37f]}})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.351682493s ago: executing program 3 (id=5966):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
r1 = socket(0x2, 0x80805, 0x0)
listen(r1, 0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000004380)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='r', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00'], 0x20, 0x20000010}], 0x1, 0x4000)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="a51fc147f918ccaa6322a4338e9b0164012024d66bd783394047a9fc1704bc919fb60da1e1be4fafda57d4630dde90f976", 0x31}], 0x1}, 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)

1.205127782s ago: executing program 5 (id=5967):
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x149842, 0x4)
r2 = eventfd2(0x8, 0x1)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
io_submit(r0, 0x11, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xd, r1, &(0x7f0000000100)='\x00', 0x1, 0x9000, 0x0, 0x1, r2}])

949.239138ms ago: executing program 3 (id=5968):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x73, {"c481d55d7e00440f20c03505000000440f22c048b843480000000000000f23c00f21f835010006000f23f840870048b80f000000000000000f23c00f21f83501000d000f23f80f2168f30f09470f01cbb96d0800000f322666440f38809f2b49e1c8"}}, @wrmsr={0x1e, 0x20, {0xce, 0x7}}, @wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffffe}}, @wrmsr={0x1e, 0x20, {0x853, 0xe}}, @wrmsr={0x1e, 0x20, {0x8b8, 0x8}}, @rdmsr={0x32, 0x18, {0x996}}, @rdmsr={0x32, 0x18, {0xbf5}}, @uexit={0x0, 0x18, 0x5}, @wrmsr={0x1e, 0x20, {0x639, 0x4}}, @wr_crn={0x46, 0x20, {0x0, 0xfff}}, @wr_crn={0x46, 0x20, {0x4, 0x401}}, @uexit={0x0, 0x18, 0x7f}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x40}, @cpuid={0x14, 0x18, {0x0, 0x66}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}, @wrmsr={0x1e, 0x20, {0x40000090, 0x9}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x14, 0x18, {0x7, 0x8}}, @wrmsr={0x1e, 0x20, {0x83a, 0x83e5}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x6c, {"66440f79c966400f38805b09c441e1d9242f420f30c421d5f9d866baf80cb8a1328882ef66bafc0cb0f9eec4c299ac2866baf80cb879473f86ef66bafc0cb073ee67660f009cf700a0000066baf80cb85a91568cef66bafc0c66ed"}}], 0x30f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

948.472497ms ago: executing program 5 (id=5969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (fail_nth: 12)

808.472571ms ago: executing program 3 (id=5970):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000001300)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
listen(0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='net/ip_tables_matches\x00')
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000012c0)=0x5d8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68)
unshare(0x10040200)
futex(&(0x7f0000000100), 0x3, 0x2, 0x0, 0xfffffffffffffffd, 0x1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r1, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0x34, 0x8, 0x8, &(0x7f0000001540)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001780)={'syztnl0\x00', &(0x7f00000016c0)={'ip_vti0\x00', <r4=>0x0, 0x20, 0x10, 0x2, 0xe, {{0x27, 0x4, 0x3, 0x0, 0x9c, 0x65, 0x7, 0x42, 0x4, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x1c, 0x72, 0x0, 0x3, [0x9, 0x2380, 0x75, 0x7, 0x6, 0x400]}, @noop, @rr={0x7, 0x13, 0xcb, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast1]}, @end, @timestamp={0x44, 0xc, 0x77, 0x0, 0xb, [0x2, 0x101]}, @end, @timestamp={0x44, 0x1c, 0xf3, 0x0, 0x6, [0xc, 0x8, 0x1000, 0x6, 0x6, 0x4]}, @lsrr={0x83, 0x2b, 0x5b, [@local, @dev={0xac, 0x14, 0x14, 0x12}, @local, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}})
r5 = socket(0x10, 0x3, 0x6)
r6 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001b40)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f00000017c0)={0x320, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(\\^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$:%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa76}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xae%$[^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "80af90901f406b24055089da2b249cb34571a6be34f679393545eda9617c8210f5c940167d8c056e275d055aedf8b0f5d414c9ac5e69ba7092a78a80a8c7dbeeb1f4bf0a90ba3e7963f48bad907b7f3bdd03e2505ddba4427d562f3f7e7c7845696432bc9800e16cce7be793e5d5bda73e9d94d4d9987985f17fd4fd25f781889b292ebc2b560b7105e632a215d3ae952ae186f211d06b0468434e2838cfb5bba23db28e8db1d83a1721a9761c62ff6a1cadb922d9435f6f583717d0bac1a4382e13d1cfd29ed647f61c4075eeed0b3494a9ac543bf8c715a8b48634e1e79ae996457f5bd57420a58df24572841b78fbec2691767a"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\)_\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x880}, 0x20000054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001240)={0x2, 0x1000, &(0x7f0000000240)="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"})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x69f3101545d1b7c2, 0x40008, 0xc1})
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x20)

276.111734ms ago: executing program 5 (id=5971):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0x3)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)

99.135039ms ago: executing program 2 (id=5972):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000031000000000000000000010"], 0x0)

0s ago: executing program 5 (id=5973):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r3=>0x0, 0x6, 0x4e, 0x1, 0x7, 0x21, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x740, 0x40, 0xfff, 0x4}})
sendmsg$nl_route_sched(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000002840)=@newtfilter={0x1860, 0x2c, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0x3, 0xa}, {0xf, 0xad59fb5d201bfbb3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x180c, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x17fc, 0x4, [@m_tunnel_key={0x48, 0xb, 0x0, 0x0, {{0xf}, {0x4}, {0x15, 0x6, "67d4355b33fdceff2d23e91b417bcfef0a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x16f4, 0x17, 0x0, 0x0, {{0xb}, {0x1070, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x23}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff2, 0x400, 0xfffffffc, 0x8001, 0x100000, 0xca62, 0x1, 0x3, 0x3ca1, 0x1ff, 0xff, 0x5, 0x1, 0x101, 0x4, 0x10, 0x7, 0x17f, 0x7, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x0, 0x7ff, 0xfffffffe, 0x7, 0x5, 0x7, 0x3, 0x9, 0x2, 0x3, 0x8, 0x3, 0x3, 0xffff, 0x20, 0xfffffff9, 0xffff, 0x5, 0xff, 0x4, 0x5, 0x6, 0x3, 0x2000000, 0xffffffff, 0x2, 0xfffffffd, 0x0, 0x0, 0x81, 0xd, 0xcbae, 0x6, 0xbbb6, 0x7ff, 0x0, 0x4, 0x7, 0x2, 0xf, 0x5, 0x5, 0xa, 0x392, 0x2, 0x5, 0x7fff, 0xa0f, 0xba, 0xa, 0xa, 0x2, 0xac54, 0x7, 0xffffff57, 0x5, 0x7, 0x2, 0xd, 0x8, 0x8, 0x6, 0x8, 0x4, 0x400, 0x9, 0x9, 0xdad5, 0x3, 0x52e, 0x101, 0x3, 0x652, 0x2, 0x80, 0x2, 0x1d, 0x7, 0x7, 0xfffff896, 0xffff, 0x80b, 0xc, 0x8000, 0x5, 0x2, 0x57cf, 0x7fff, 0x8, 0x2, 0x0, 0x5, 0xc03, 0x0, 0xfffffffa, 0x4, 0x2, 0xffffffff, 0x9, 0x0, 0x4, 0x7, 0x7, 0xf305, 0x0, 0x8, 0x1, 0x40, 0x8, 0xfffffff7, 0x6, 0x200, 0x80000000, 0x9, 0x4, 0x3, 0x5, 0x9, 0x7, 0x0, 0x3, 0x3, 0x6, 0x3, 0x6, 0x9, 0x3ff, 0xc, 0x5, 0xd0f, 0xb3a, 0x1, 0x40, 0xffffffff, 0x2, 0x9, 0xfffffffa, 0x401, 0x3ff, 0x1d, 0x5, 0xfff, 0x7ff, 0x3ff, 0xfffffffe, 0x8, 0xb74, 0x1, 0x479, 0x67, 0xe2, 0x5, 0x4, 0x7, 0x7f, 0x9fa, 0xffff, 0x6, 0x401, 0xcd8, 0x7, 0x0, 0x5, 0x87, 0xffffffff, 0x0, 0x406996b, 0x1, 0x4, 0x4, 0x7, 0x10000, 0x7, 0x40, 0x2, 0x7, 0xfff, 0x37, 0x1, 0x0, 0x9, 0x0, 0x840, 0x5, 0xb, 0x2, 0xae, 0x9ee, 0x1, 0xfffffffd, 0x4, 0x7, 0x5720, 0x7, 0x7, 0x0, 0x4000, 0x40000000, 0x1, 0xfffffff7, 0x4, 0x88a3, 0x90000000, 0x6, 0x9, 0x401, 0x40, 0x7, 0x10, 0x1, 0x7, 0x8, 0x10000, 0x9, 0x3, 0x9, 0x4, 0x80000000, 0x7ff, 0xfffffffd, 0x52dd, 0x4, 0xe00000, 0x8001, 0x6, 0x400, 0x1, 0x2, 0x3, 0x8, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x6, 0x5, 0x7, 0xbee8, 0xe0479713, 0x1, 0x0, 0x101, 0x9, 0x1, 0x9, 0x7fff, 0x1ff, 0x200, 0x7, 0x2, 0x1, 0x0, 0x8e, 0x4, 0x1, 0x2, 0xa7d, 0x0, 0x4, 0xfffffff9, 0x7, 0x7, 0xac7, 0x2, 0x6, 0x80, 0x40, 0x8, 0x1, 0x5, 0x8, 0x8, 0x0, 0x0, 0x6, 0x8, 0x6, 0x506d, 0x5, 0x9, 0xfff, 0x7, 0x1, 0x7, 0x4, 0x8b7818d, 0x5, 0xcb, 0x8, 0x7, 0x1, 0x7, 0x1, 0x9, 0x7, 0x18000000, 0x2, 0x101, 0x9, 0xd, 0x8, 0x9, 0x7, 0x0, 0x4, 0xf, 0x2, 0x4, 0x8, 0x10000000, 0x1, 0x4, 0x7, 0x2, 0xfffffffe, 0x9, 0x5, 0x8, 0x6, 0x5fd5, 0x0, 0x8, 0x100, 0xffffff7f, 0x9, 0xd0, 0xffffffff, 0x8, 0x4, 0xfffffffe, 0xfffffff7, 0x8, 0xffffffff, 0xfffffffd, 0x4, 0xf, 0x3, 0x7, 0x4, 0x2b0, 0x7, 0x4, 0x10000, 0x3, 0x9, 0x7, 0xfffffff8, 0x2, 0x7, 0x3, 0x80, 0x8000, 0x0, 0x83b, 0x3, 0x7, 0x80, 0x3, 0xfffffffe, 0x0, 0x7, 0x22, 0x1, 0xff, 0x5, 0x9c91, 0x8, 0x8, 0x81, 0x7fff, 0x6, 0x8517, 0x1, 0x4, 0x5, 0x8, 0x5, 0x67, 0x5ce, 0x9, 0x1000, 0x4, 0x8, 0x5, 0x1b2, 0x8, 0x6c000000, 0xb, 0x7, 0xff, 0x80000001, 0x10001, 0x7, 0x2, 0xf, 0xc43c, 0x0, 0x7, 0x2, 0xde93, 0x7, 0x2, 0xfff, 0x6, 0x5, 0x1, 0x9, 0x5bb6, 0x5, 0x3, 0x2, 0x4, 0x121, 0x6, 0x8, 0x800, 0x27, 0x44, 0x2, 0x144f, 0x9, 0x3, 0x1000, 0xf, 0x4, 0x3ff, 0x401, 0xae, 0x2, 0x8000, 0x3, 0x95ec, 0x40, 0x81, 0x2, 0x6, 0x3, 0x4, 0xfff, 0xffffffff, 0x3, 0xa4, 0xf0, 0x4, 0x1, 0x9, 0x9, 0x101, 0x5, 0x5, 0x8, 0x7, 0x9, 0x8, 0x80, 0x8, 0x0, 0x5, 0x7, 0xf7, 0x7fff, 0x0, 0x100, 0x5, 0x249, 0x5, 0x7ff, 0x6, 0xfff, 0x4, 0x3ff, 0x4f6, 0x8000, 0x400, 0x7, 0x400, 0x0, 0x2, 0x6, 0x7, 0xca84, 0x8, 0xfffff482, 0x70000000, 0x7, 0x9, 0x2, 0x8, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x37f}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x0, 0xee0, 0x10001, 0x3, 0x2, 0x1, 0x5, 0x7ff, 0x3, 0x1, 0x80004, 0x40, 0xe7, 0xb, 0x3, 0x0, 0x0, 0x2, 0x10, 0x1ff, 0xff5, 0x7, 0x401, 0x9, 0x9, 0xd, 0x47bd, 0x9dbd, 0x6, 0x333, 0x6, 0xf, 0x6470, 0x5, 0x7, 0x2, 0x8000000, 0x0, 0x6, 0x4, 0x9, 0x7, 0xcfb, 0x2000, 0x4, 0x8, 0x80000, 0x9, 0xffff, 0x7, 0x3, 0x6, 0x4, 0x6, 0x7, 0xfffffffd, 0x3, 0xfffffffe, 0x2, 0x1, 0xf99, 0x7ebc, 0x7, 0x1, 0x3, 0x4802, 0x9, 0x9, 0x40, 0xff, 0x0, 0x5, 0xe, 0xffff, 0x7, 0x2, 0x0, 0x10001, 0x4, 0xfffeffff, 0xcb, 0xffffff00, 0xf, 0x8, 0x1000, 0x3, 0x7, 0x5, 0x7, 0xa, 0xfffffff9, 0x9, 0x5, 0xfc6, 0x7fff, 0xffffff5d, 0x48c, 0x8, 0x9, 0x4, 0x3ff, 0x0, 0x7, 0x7, 0x0, 0xcb1b, 0x80, 0xffff9aae, 0x9, 0x0, 0x8000, 0x9, 0x101, 0x3, 0x1, 0x100, 0x0, 0x2, 0x3eb, 0x0, 0x10, 0xde54, 0xffffffff, 0x6, 0x10000, 0xa32, 0x8, 0x8001, 0xfa, 0xffff, 0x1000, 0x5, 0x90000, 0x29, 0xb, 0xad, 0x2, 0x7, 0x5, 0x0, 0xfb, 0x4, 0x9, 0x4, 0x7, 0x3, 0x1, 0x888, 0x6, 0xf, 0x7, 0x1, 0x5, 0x3, 0x9, 0x1, 0x6, 0x2, 0x5, 0x7, 0x2, 0x1, 0x7fff, 0x10000, 0x1, 0x0, 0x9d, 0x0, 0x6, 0x3e5, 0x8, 0x3ff, 0x7fff, 0x7, 0x9e14, 0x8, 0xffffffff, 0x3, 0x9, 0x2000, 0x2, 0x3, 0x3, 0xa320, 0x3, 0x6, 0x4, 0x8, 0x30b, 0xa43f3c26, 0x400, 0x0, 0x1, 0x81, 0xd, 0x412e, 0x7ff, 0x800000, 0x3, 0x3, 0x6, 0x3, 0x10001, 0x9, 0xee8d, 0x3, 0x9b, 0x0, 0x0, 0x8, 0x3, 0xfffffffd, 0x0, 0x400, 0x5, 0x2, 0x71, 0xac0, 0x6, 0x1, 0xfffffffb, 0x3, 0xef8, 0x6, 0x8, 0x8, 0x5, 0x0, 0x59, 0xfff, 0xf16, 0x2, 0x2, 0x101, 0xf4, 0x77, 0x4, 0x2, 0xfffffff7, 0x5, 0x0, 0xb, 0x7, 0x8, 0x3, 0x65, 0x5, 0x6, 0x4, 0x6, 0xffffffff, 0x8, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb3b4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x5, 0x5, 0x80000000, 0x0, 0x4, 0xfffffff7, 0x7, 0x2, 0xa768, 0x2, 0x3, 0x401, 0xc8d, 0x73cc, 0x6400d03d, 0x0, 0x8, 0x6, 0x9, 0xae0a, 0x2a, 0x5, 0x8000000, 0x80000000, 0x8, 0x1000, 0x1ff, 0x4db, 0x7, 0x1, 0x80, 0x614, 0x5, 0x0, 0xa, 0x0, 0x7f, 0x7, 0x7, 0x7, 0x0, 0x3, 0x8, 0x7, 0x10000, 0x100, 0x5, 0x5, 0xb4, 0x7, 0x0, 0xfffffff8, 0x6, 0xe26a, 0x0, 0x0, 0x2, 0x5, 0x2, 0xc90c, 0x3b9f, 0x2, 0x1, 0x6a54, 0x22b, 0xfffffcd5, 0x10000, 0x5, 0xfffffff9, 0x71ce, 0x3, 0x1ff, 0x84a, 0x8001, 0x42, 0x3, 0x15, 0x6, 0x2, 0x2, 0xe, 0x74, 0x8, 0x4000000, 0x23f00425, 0x0, 0x4, 0x96a, 0x9, 0x3, 0x2, 0x3, 0x7, 0x5e5f8d3e, 0x8144, 0x0, 0x3, 0x10001, 0x6, 0x4, 0x0, 0x15f37bf5, 0xde, 0x3, 0x1, 0x4b7, 0x7fff, 0x0, 0x4, 0x3ff, 0xe3, 0x0, 0xffffff2c, 0x1, 0x6, 0x3, 0x6, 0x3ff, 0x2, 0x6, 0x1, 0x1, 0x20000, 0xffff, 0x7, 0x81, 0x8, 0xec, 0x76, 0x8, 0x0, 0x3, 0x3, 0x5, 0x0, 0x4, 0xe, 0x8, 0x4, 0x2, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x9, 0x4, 0x6, 0x8, 0x157e, 0x0, 0x8, 0x7fff, 0xbf, 0x80, 0x40, 0x5, 0x2, 0x1, 0x6, 0x2, 0x1ff, 0x8, 0x10001, 0x3ff, 0x5, 0x7ff, 0x7, 0x283, 0xfff, 0xdb, 0x8, 0x7, 0x0, 0x8000, 0x8, 0xe, 0xfff, 0x4, 0x80000001, 0xffffffff, 0x9, 0x4, 0x6, 0x64f0, 0x1, 0x1, 0x8, 0xfffffffc, 0x3, 0x1ff, 0x80, 0x7ff, 0x4, 0x6, 0xffffffff, 0x2bf87b05, 0x8000, 0xb, 0x9, 0x1af, 0x70, 0x1, 0x1, 0x7, 0x6, 0x1000, 0xfffff0be, 0xff, 0x1, 0x5, 0x1ff, 0x3, 0xfffffffa, 0x3, 0x49, 0x72, 0x6, 0xfe, 0x9, 0x1ff, 0x7, 0x6, 0x17d, 0x7, 0x80000001, 0x101, 0x4, 0xe4ed, 0x1, 0x7, 0x0, 0x1, 0x7d4, 0xfff, 0xff, 0xc, 0x347a, 0x1000, 0x73, 0x100, 0x10000, 0x20a4da92, 0x9, 0x4, 0x5, 0x7, 0xc, 0x7fff, 0x6, 0x2072, 0x0, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc7}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x65a, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mpls={0xbc, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x3, 0xffffffffffffffff, 0x1, 0x5}, 0x3}}]}, {0x71, 0x6, "1d021e74490a57d2a3ec75101feaa1ac4ee35eed3cf5a37c1cf5a72f9fd841f022195e0faf1d32259099c74409eedd40ec4772b7f270a87860142b33fb26f5e948e3e00224db154b7e755b623cbb6243a8f6b31378b7a8f5951f34e45069e7b44028324cdecba4801ec7846021"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x1860}, 0x1, 0x0, 0x0, 0x48004}, 0x40000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc", 0xa)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ink change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  903.095450][ T5930] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  903.157848][ T5838] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  903.324957][ T5838] usb 2-1: Using ep0 maxpacket: 32
[  903.336831][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.388310][ T5838] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  903.487246][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.606202][ T5838] usb 2-1: config 0 descriptor??
[  903.647472][ T5838] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  903.668084][ T5838] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  903.815044][ T5959] usb 5-1: new full-speed USB device number 126 using dummy_hcd
[  903.965056][ T5959] usb 5-1: device descriptor read/64, error -71
[  904.062122][ T5902] usb 2-1: USB disconnect, device number 23
[  904.073370][ T5902] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  904.214867][ T5959] usb 5-1: new full-speed USB device number 127 using dummy_hcd
[  904.355251][ T5959] usb 5-1: device descriptor read/64, error -71
[  904.475377][ T5959] usb usb5-port1: attempt power cycle
[  904.825001][ T5959] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  904.872880][ T5959] usb 5-1: device descriptor read/8, error -71
[  904.924810][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  905.115151][ T5959] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  905.244093][ T5959] usb 5-1: device descriptor read/8, error -71
[  905.343167][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5468'.
[  905.362903][ T5959] usb usb5-port1: unable to enumerate USB device
[  905.554954][ T5902] usb 1-1: Using ep0 maxpacket: 32
[  905.562945][ T5902] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  905.603037][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.687528][ T5902] usb 1-1: config 0 descriptor??
[  905.938411][ T5902] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  905.968836][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  906.053681][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  906.068637][ T5902] usb 1-1: media controller created
[  906.139847][T23295] dib0700: tx buffer length is larger than 4. Not supported.
[  906.180929][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  906.310666][   T30] audit: type=1326 audit(1759236142.507:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23331 comm="syz.1.5475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8627d8eec9 code=0x0
[  906.489031][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5475'.
[  906.621598][ T5902] DVB: Unable to find symbol dib7000p_attach()
[  906.651645][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  906.775823][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found
[  906.783160][ T5902] Registered IR keymap rc-empty
[  906.848107][ T5902] dvb-usb: could not initialize remote control.
[  906.854371][ T5902] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  907.552928][ T5902] usb 1-1: USB disconnect, device number 8
[  907.584923][ T5930] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  907.745042][ T5902] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  907.774874][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  907.959659][ T5930] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  907.970198][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.013035][ T5930] usb 3-1: config 0 descriptor??
[  908.215663][  T860] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  908.255802][ T5930] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  908.276030][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  908.281214][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  908.294089][   T30] audit: type=1800 audit(1759236144.307:745): pid=23361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5481" name="file1" dev="tmpfs" ino=2437 res=0 errno=0
[  908.398350][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  908.433520][ T5930] usb 3-1: media controller created
[  908.461270][T23349] dib0700: tx buffer length is larger than 4. Not supported.
[  908.468914][  T860] usb 5-1: Using ep0 maxpacket: 32
[  908.605459][  T860] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  908.649027][  T860] usb 5-1: config 0 has no interface number 0
[  908.669513][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  908.686522][  T860] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  908.704641][  T860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.861074][  T860] usb 5-1: Product: syz
[  908.871115][  T860] usb 5-1: Manufacturer: syz
[  908.887124][  T860] usb 5-1: SerialNumber: syz
[  908.972532][  T860] usb 5-1: config 0 descriptor??
[  909.039981][  T860] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  909.188652][ T5930] DVB: Unable to find symbol dib7000p_attach()
[  909.224568][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  909.282381][  T860] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  909.317875][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5486'.
[  909.353220][T23373] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5486'.
[  909.379139][  T860] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  909.497878][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found
[  909.596514][ T5930] Registered IR keymap rc-empty
[  909.623588][T23353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.634485][T23353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.698350][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  909.698865][ T5959] usb 5-1: USB disconnect, device number 4
[  909.714591][ T5930] dvb-usb: could not initialize remote control.
[  909.784833][ T5930] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  909.820642][ T5959] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  909.992985][ T5959] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  910.008815][ T5959] quatech2 5-1:0.51: device disconnected
[  910.114281][T23384] program syz.3.5488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  910.934832][ T5902] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  911.234870][ T5902] usb 1-1: Using ep0 maxpacket: 32
[  911.252930][ T5902] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  911.273641][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.300892][ T5902] usb 1-1: config 0 descriptor??
[  911.332576][ T5930] usb 3-1: USB disconnect, device number 22
[  911.478129][ T5930] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  911.670105][ T5902] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  912.055462][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  912.076264][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  912.089125][ T5902] usb 1-1: media controller created
[  912.108968][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  912.253453][ T5902] DVB: Unable to find symbol dib7000p_attach()
[  912.274054][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  912.489676][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5498'.
[  912.546511][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found
[  912.560205][ T5902] Registered IR keymap rc-empty
[  912.589029][ T5902] dvb-usb: could not initialize remote control.
[  912.621904][ T5902] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  912.657412][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5499'.
[  912.840102][T23424] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  912.855102][ T5930] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  913.017806][ T5930] usb 3-1: not running at top speed; connect to a high speed hub
[  913.052047][T23428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5504'.
[  913.126774][ T5902] usb 1-1: USB disconnect, device number 9
[  913.270317][ T5930] usb 3-1: config 0 has an invalid interface number: 87 but max is 3
[  913.307468][ T5930] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  913.344902][ T5930] usb 3-1: config 0 has an invalid interface number: 231 but max is 3
[  913.412681][ T5902] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  913.422926][ T5930] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  913.433220][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'.
[  913.483926][ T5930] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  913.548834][ T5930] usb 3-1: config 0 has no interface number 0
[  913.557110][ T5930] usb 3-1: config 0 has no interface number 1
[  913.567064][ T5930] usb 3-1: config 0 interface 87 altsetting 249 has a duplicate endpoint with address 0x6, skipping
[  913.578044][ T5930] usb 3-1: config 0 interface 87 altsetting 249 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  913.589890][ T5930] usb 3-1: config 0 interface 87 altsetting 249 endpoint 0xF has invalid maxpacket 512, setting to 64
[  913.602690][ T5930] usb 3-1: config 0 interface 87 altsetting 249 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  913.643905][ T5930] usb 3-1: config 0 interface 87 altsetting 249 has a duplicate endpoint with address 0x6, skipping
[  913.700874][ T5930] usb 3-1: config 0 interface 87 altsetting 249 endpoint 0xA has invalid maxpacket 512, setting to 64
[  913.724585][ T5930] usb 3-1: config 0 interface 231 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  913.742193][ T5930] usb 3-1: config 0 interface 87 has no altsetting 0
[  913.743462][T23448] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  913.749172][ T5930] usb 3-1: config 0 interface 231 has no altsetting 0
[  913.776582][ T5930] usb 3-1: Dual-Role OTG device on HNP port
[  913.801531][ T5930] usb 3-1: New USB device found, idVendor=0403, idProduct=ed71, bcdDevice=fa.3e
[  913.813989][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.822526][ T5930] usb 3-1: Product: syz
[  913.829720][ T5930] usb 3-1: Manufacturer: syz
[  913.834415][ T5930] usb 3-1: SerialNumber: syz
[  913.841447][ T5930] usb 3-1: config 0 descriptor??
[  913.847848][T23419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  913.855515][T23419] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  914.112308][ T5930] ftdi_sio 3-1:0.87: FTDI USB Serial Device converter detected
[  914.204977][ T5930] ftdi_sio ttyUSB0: unknown device type: 0xfa3e
[  914.229820][ T5930] ftdi_sio 3-1:0.231: FTDI USB Serial Device converter detected
[  914.295138][ T5930] ftdi_sio ttyUSB1: unknown device type: 0xfa3e
[  914.324390][ T5930] usb 3-1: USB disconnect, device number 23
[  914.388558][ T5930] ftdi_sio 3-1:0.87: device disconnected
[  914.449281][ T5930] ftdi_sio 3-1:0.231: device disconnected
[  915.005771][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  915.064788][ T5930] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  915.120024][T23484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5522'.
[  915.225246][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  915.240425][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  915.269187][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  915.289427][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  915.330401][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  915.368125][ T5902] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  915.398047][ T5930] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  915.414768][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.419503][T23488] syzkaller1: entered promiscuous mode
[  915.422814][ T5902] usb 5-1: Product: syz
[  915.440613][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.451005][ T5902] usb 5-1: Manufacturer: syz
[  915.461041][T23488] syzkaller1: entered allmulticast mode
[  915.463740][ T5930] usb 3-1: config 0 descriptor??
[  915.473721][ T5902] usb 5-1: SerialNumber: syz
[  915.494430][ T5902] usb 5-1: config 0 descriptor??
[  915.560119][T23493] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5525'.
[  915.703888][ T5930] ath6kl: Failed to submit usb control message: -71
[  915.734840][ T5930] ath6kl: unable to send the bmi data to the device: -71
[  915.742034][ T5930] ath6kl: Unable to send get target info: -71
[  915.753024][ T5930] ath6kl: Failed to init ath6kl core: -71
[  915.773714][ T5930] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  915.811915][ T5930] usb 3-1: USB disconnect, device number 24
[  915.866089][T23506] loop9: detected capacity change from 0 to 8
[  915.876769][T10153] Dev loop9: unable to read RDB block 8
[  915.882340][T10153]  loop9: unable to read partition table
[  915.890170][T10153] loop9: partition table beyond EOD, truncated
[  915.901544][T23506] Dev loop9: unable to read RDB block 8
[  915.910643][T23506]  loop9: unable to read partition table
[  915.928411][T23506] loop9: partition table beyond EOD, truncated
[  915.943400][T23506] loop_reread_partitions: partition scan of loop9 (�被x�������� ) failed (rc=-5)
[  915.943672][T23508] vlan0: entered allmulticast mode
[  915.965704][T23508] dummy0: entered allmulticast mode
[  915.987281][T23506] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  915.987281][T23506]    program syz.3.5531 not setting count and/or reply_len properly
[  916.292929][T23521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5535'.
[  916.303824][T23521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5535'.
[  916.443512][ T5959] usb 5-1: USB disconnect, device number 5
[  916.485287][T19856] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  916.684800][T19856] usb 4-1: Using ep0 maxpacket: 32
[  916.696225][T19856] usb 4-1: config 0 has an invalid interface number: 215 but max is 0
[  916.720048][T19856] usb 4-1: config 0 has no interface number 0
[  916.751666][T19856] usb 4-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24
[  916.793225][T19856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.804294][T19856] usb 4-1: Product: syz
[  916.820836][T19856] usb 4-1: Manufacturer: syz
[  916.855105][T19856] usb 4-1: SerialNumber: syz
[  916.864830][T19856] usb 4-1: config 0 descriptor??
[  916.875642][T23541] binder: 23536:23541 ioctl c018620c 200000000040 returned -1
[  916.885527][T19856] io_ti 4-1:0.215: required endpoints missing
[  916.902427][T23541] syz.0.5540 (23541): drop_caches: 2
[  917.171881][T23547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5544'.
[  917.192516][T23552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.210749][T23552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.285480][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  917.310397][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  917.336325][T19856] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  917.505304][T19856] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  917.513553][T19856] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  917.535379][T19856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  917.794767][T19856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  917.807198][T19856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  917.821400][T19856] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  917.832480][T19856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.849420][T19856] usb 5-1: config 0 descriptor??
[  917.877695][T23548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  918.054247][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5547'.
[  918.350141][T19856] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd
[  918.367710][T19856] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  918.409552][ T5838] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  918.631133][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  918.652781][ T5838] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  918.674949][ T5838] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  918.714612][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.757391][ T5838] usb 1-1: config 0 descriptor??
[  918.869188][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5548'.
[  919.030216][ T5838] usb 1-1: USB disconnect, device number 10
[  919.264100][T19856] usb 4-1: USB disconnect, device number 16
[  919.382661][T23570] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  919.814904][T19856] usb 5-1: reset high-speed USB device number 6 using dummy_hcd
[  920.593122][T23591] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  920.619485][T23592] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  920.788476][T23603] trusted_key: encrypted_key: insufficient parameters specified
[  920.805017][ T5959] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  921.008499][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  921.034148][ T5959] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  921.113695][   T30] audit: type=1326 audit(1759236157.267:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.125257][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.136099][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.176395][   T30] audit: type=1326 audit(1759236157.267:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.293602][ T5838] usb 5-1: USB disconnect, device number 6
[  921.466117][ T5959] usb 2-1: config 0 descriptor??
[  921.482225][   T30] audit: type=1326 audit(1759236157.267:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.504481][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.514834][   T55] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  921.625356][   T30] audit: type=1326 audit(1759236157.277:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.650144][   T30] audit: type=1326 audit(1759236157.277:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.672510][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.678714][   T30] audit: type=1326 audit(1759236157.277:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.700950][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.707469][   T30] audit: type=1326 audit(1759236157.277:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.730098][   T30] audit: type=1326 audit(1759236157.277:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.735286][ T5838] usb 2-1: USB disconnect, device number 24
[  921.752425][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.753805][   T30] audit: type=1326 audit(1759236157.277:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  921.787858][    C0] vkms_vblank_simulate: vblank timer overrun
[  921.863062][   T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  921.908559][   T55] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  922.304797][   T55] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.326779][   T55] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  922.335932][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.358463][   T55] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  922.395184][   T30] audit: type=1326 audit(1759236157.277:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23597 comm="syz.4.5559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbd98eec9 code=0x7ffc0000
[  922.854772][   T55] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  923.046882][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  923.073484][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.121305][   T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  923.203683][   T55] usb 2-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7
[  923.259846][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.294769][   T55] usb 2-1: config 0 descriptor??
[  923.684952][ T5959] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  923.685361][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  923.846903][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  923.861663][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.884600][ T5959] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  923.884962][    T9] usb 5-1: Using ep0 maxpacket: 8
[  923.884992][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.918769][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  923.933664][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  923.948502][   T55] usb 2-1: USB disconnect, device number 25
[  923.949560][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  923.994288][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  924.013178][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.021713][    T9] usb 5-1: Product: syz
[  924.024154][ T5959] usb 1-1: config 0 descriptor??
[  924.044061][    T9] usb 5-1: Manufacturer: syz
[  924.058209][    T9] usb 5-1: SerialNumber: syz
[  924.092604][    T9] usb 5-1: config 0 descriptor??
[  924.148746][    T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  924.176470][   T55] usb 3-1: USB disconnect, device number 25
[  924.344436][    T9] snd_usb_toneport 5-1:0.0: cannot get proper max packet size
[  924.355382][    T9] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  924.370595][    T9] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  924.574818][   T55] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  924.623166][T23649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  924.647405][T23649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  924.658070][ T5959] usbhid 1-1:0.0: can't add hid device: -71
[  924.664110][ T5959] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  924.706199][T23649] fuse: Unknown parameter 'gr�����1�00000000000000000000'
[  924.718507][ T5959] usb 1-1: USB disconnect, device number 11
[  924.734719][   T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  924.771706][   T55] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  924.790543][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.803193][   T55] usb 3-1: Product: syz
[  924.808609][   T55] usb 3-1: Manufacturer: syz
[  924.813445][   T55] usb 3-1: SerialNumber: syz
[  924.826069][   T55] usb 3-1: config 0 descriptor??
[  924.837937][   T55] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  924.848273][   T55] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  924.856221][   T55] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  925.050963][ T5959] usb 3-1: USB disconnect, device number 26
[  925.059916][ T5959] garmin_gps 3-1:0.0: device disconnected
[  925.394276][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5581'.
[  926.265624][ T5959] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  926.426654][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  926.429072][    T9] usb 5-1: USB disconnect, device number 7
[  926.528354][ T5959] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  926.581573][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.667011][   T55] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  926.688075][ T5959] usb 3-1: config 0 descriptor??
[  926.857891][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  926.877855][   T55] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  926.896670][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.910925][   T55] usb 2-1: config 0 descriptor??
[  926.925683][ T5959] usbhid 3-1:0.0: can't add hid device: -71
[  926.952974][    T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  926.960439][ T5959] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  926.964961][ T5959] usb 3-1: USB disconnect, device number 27
[  927.138529][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  927.148933][    T9] usb 5-1: config 7 has an invalid interface number: 67 but max is 0
[  927.163279][    T9] usb 5-1: config 7 has no interface number 0
[  927.193393][    T9] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  927.210333][   T55] usbhid 2-1:0.0: can't add hid device: -71
[  927.217795][   T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  927.225325][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.233572][    T9] usb 5-1: Product: 㯑
[  927.243265][   T55] usb 2-1: USB disconnect, device number 26
[  927.455017][ T5959] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  927.475311][    T9] usb 5-1: USB disconnect, device number 8
[  927.654903][ T5959] usb 3-1: Using ep0 maxpacket: 32
[  927.661738][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.672837][ T5959] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  927.692067][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.709046][ T5959] usb 3-1: config 0 descriptor??
[  927.721185][ T5959] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  927.739621][ T5959] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  928.044286][T23703] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5590'.
[  928.122847][ T5959] usb 3-1: USB disconnect, device number 28
[  928.137158][ T5959] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  928.324866][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  928.439337][T23711] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551605)
[  928.449896][T23711] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  928.495942][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  928.505152][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  928.515288][    T9] usb 5-1: config 1 has no interface number 1
[  928.521398][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  928.536537][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  928.545849][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.553867][    T9] usb 5-1: Product: syz
[  928.558179][    T9] usb 5-1: Manufacturer: syz
[  928.562792][    T9] usb 5-1: SerialNumber: syz
[  928.684400][T23713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5594'.
[  928.744538][T23715] FAULT_INJECTION: forcing a failure.
[  928.744538][T23715] name failslab, interval 1, probability 0, space 0, times 0
[  928.761369][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.2.5595 Not tainted syzkaller #0 PREEMPT(full) 
[  928.761395][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  928.761407][T23715] Call Trace:
[  928.761412][T23715]  <TASK>
[  928.761418][T23715]  dump_stack_lvl+0x189/0x250
[  928.761435][T23715]  ? __pfx____ratelimit+0x10/0x10
[  928.761448][T23715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  928.761460][T23715]  ? __pfx__printk+0x10/0x10
[  928.761478][T23715]  ? __pfx___might_resched+0x10/0x10
[  928.761495][T23715]  ? fs_reclaim_acquire+0x7d/0x100
[  928.761518][T23715]  should_fail_ex+0x414/0x560
[  928.761549][T23715]  should_failslab+0xa8/0x100
[  928.761568][T23715]  __kmalloc_cache_noprof+0x70/0x3d0
[  928.761583][T23715]  ? nf_tables_newchain+0xef1/0x2900
[  928.761599][T23715]  nf_tables_newchain+0xef1/0x2900
[  928.761628][T23715]  ? __pfx_nf_tables_newchain+0x10/0x10
[  928.761680][T23715]  ? nfnl_pernet+0x23/0x240
[  928.761715][T23715]  ? __nla_parse+0x40/0x60
[  928.761738][T23715]  nfnetlink_rcv+0x1132/0x2520
[  928.761768][T23715]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  928.761794][T23715]  ? ref_tracker_free+0x63a/0x7d0
[  928.761839][T23715]  ? __netlink_deliver_tap+0x807/0x850
[  928.761867][T23715]  ? netlink_deliver_tap+0x2e/0x1b0
[  928.761904][T23715]  netlink_unicast+0x82c/0x9e0
[  928.761922][T23715]  ? __pfx_netlink_unicast+0x10/0x10
[  928.761940][T23715]  ? netlink_sendmsg+0x642/0xb30
[  928.761957][T23715]  ? skb_put+0x11b/0x210
[  928.761981][T23715]  netlink_sendmsg+0x805/0xb30
[  928.762010][T23715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  928.762033][T23715]  ? aa_sock_msg_perm+0xf1/0x1d0
[  928.762051][T23715]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  928.762063][T23715]  ? __pfx_netlink_sendmsg+0x10/0x10
[  928.762075][T23715]  __sock_sendmsg+0x21c/0x270
[  928.762090][T23715]  ____sys_sendmsg+0x505/0x830
[  928.762118][T23715]  ? __pfx_____sys_sendmsg+0x10/0x10
[  928.762150][T23715]  ? import_iovec+0x74/0xa0
[  928.762173][T23715]  ___sys_sendmsg+0x21f/0x2a0
[  928.762188][T23715]  ? __pfx____sys_sendmsg+0x10/0x10
[  928.762219][T23715]  ? __fget_files+0x2a/0x420
[  928.762228][T23715]  ? __fget_files+0x3a0/0x420
[  928.762252][T23715]  __x64_sys_sendmsg+0x19b/0x260
[  928.762278][T23715]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  928.762310][T23715]  ? __pfx_ksys_write+0x10/0x10
[  928.762326][T23715]  ? rcu_is_watching+0x15/0xb0
[  928.762339][T23715]  ? do_syscall_64+0xbe/0x3b0
[  928.762353][T23715]  do_syscall_64+0xfa/0x3b0
[  928.762363][T23715]  ? lockdep_hardirqs_on+0x9c/0x150
[  928.762373][T23715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.762385][T23715]  ? clear_bhb_loop+0x60/0xb0
[  928.762405][T23715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.762422][T23715] RIP: 0033:0x7f6f6bf8eec9
[  928.762438][T23715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  928.762453][T23715] RSP: 002b:00007f6f6ce9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  928.762470][T23715] RAX: ffffffffffffffda RBX: 00007f6f6c1e5fa0 RCX: 00007f6f6bf8eec9
[  928.762478][T23715] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  928.762484][T23715] RBP: 00007f6f6ce9a090 R08: 0000000000000000 R09: 0000000000000000
[  928.762490][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  928.762496][T23715] R13: 00007f6f6c1e6038 R14: 00007f6f6c1e5fa0 R15: 00007f6f6c30fa28
[  928.762511][T23715]  </TASK>
[  928.791304][    T9] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  928.795255][    C1] vkms_vblank_simulate: vblank timer overrun
[  929.108026][    C1] vkms_vblank_simulate: vblank timer overrun
[  929.163976][T23717] sctp: [Deprecated]: syz.2.5596 (pid 23717) Use of struct sctp_assoc_value in delayed_ack socket option.
[  929.163976][T23717] Use struct sctp_sack_info instead
[  929.189894][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'.
[  929.209515][    T9] usb 5-1: failed to enable PITCH for EP 0x82
[  929.410816][    T9] usb 5-1: USB disconnect, device number 9
[  929.449808][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5600'.
[  929.577891][T23725] ip6gretap0: entered promiscuous mode
[  929.620264][ T7000] udevd[7000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  929.664503][T23733] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  929.697989][T23725] ip6gretap0: left promiscuous mode
[  929.774401][T23734] caif0: Master is either lo or non-ether device
[  931.801064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  931.809102][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  931.854138][T23779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5614'.
[  931.904956][ T5902] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  932.068193][ T5902] usb 2-1: device descriptor read/64, error -71
[  932.120272][T23795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5619'.
[  932.169506][T23793] fuse: root generation should be zero
[  932.338039][ T5902] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  932.424974][   T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  932.485256][ T5902] usb 2-1: device descriptor read/64, error -71
[  932.675067][   T55] usb 1-1: Using ep0 maxpacket: 8
[  932.675949][ T5902] usb usb2-port1: attempt power cycle
[  932.686555][   T55] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[  932.696652][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.726121][   T55] usb 1-1: config 0 descriptor??
[  932.745295][   T55] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  932.773531][   T55] ftdi_sio ttyUSB0: unknown device type: 0x256
[  933.028293][ T5902] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  933.058496][ T5902] usb 2-1: device descriptor read/8, error -71
[  933.277516][   T55] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  933.328152][ T5902] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  933.357303][ T5902] usb 2-1: device descriptor read/8, error -71
[  933.444924][   T55] usb 5-1: Using ep0 maxpacket: 8
[  933.451433][   T55] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  933.460965][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.467495][ T5902] usb usb2-port1: unable to enumerate USB device
[  933.476609][   T55] usb 5-1: config 0 descriptor??
[  933.687692][   T55] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  933.913297][   T55] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  933.929947][   T55] asix 5-1:0.0: probe with driver asix failed with error -71
[  933.944123][   T55] usb 5-1: USB disconnect, device number 10
[  934.012990][ T5902] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  934.027203][ T5902] hid-generic 0000:0000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  934.119551][T23825] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  934.398666][T23831] fuse: Bad value for 'rootmode'
[  934.700224][T23842] FAULT_INJECTION: forcing a failure.
[  934.700224][T23842] name failslab, interval 1, probability 0, space 0, times 0
[  934.716185][T23842] CPU: 0 UID: 0 PID: 23842 Comm: syz.1.5632 Not tainted syzkaller #0 PREEMPT(full) 
[  934.716211][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  934.716222][T23842] Call Trace:
[  934.716230][T23842]  <TASK>
[  934.716238][T23842]  dump_stack_lvl+0x189/0x250
[  934.716263][T23842]  ? __pfx____ratelimit+0x10/0x10
[  934.716289][T23842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  934.716309][T23842]  ? __pfx__printk+0x10/0x10
[  934.716331][T23842]  ? __pfx___might_resched+0x10/0x10
[  934.716348][T23842]  ? fs_reclaim_acquire+0x7d/0x100
[  934.716369][T23842]  should_fail_ex+0x414/0x560
[  934.716399][T23842]  should_failslab+0xa8/0x100
[  934.716425][T23842]  __kmalloc_cache_noprof+0x70/0x3d0
[  934.716448][T23842]  ? nfnetlink_rcv+0xeff/0x2520
[  934.716468][T23842]  nfnetlink_rcv+0xeff/0x2520
[  934.716515][T23842]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  934.716580][T23842]  ? netlink_deliver_tap+0x2e/0x1b0
[  934.716618][T23842]  netlink_unicast+0x82c/0x9e0
[  934.716644][T23842]  ? __pfx_netlink_unicast+0x10/0x10
[  934.716663][T23842]  ? netlink_sendmsg+0x642/0xb30
[  934.716680][T23842]  ? skb_put+0x11b/0x210
[  934.716704][T23842]  netlink_sendmsg+0x805/0xb30
[  934.716732][T23842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.716755][T23842]  ? aa_sock_msg_perm+0xf1/0x1d0
[  934.716774][T23842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  934.716793][T23842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.716813][T23842]  __sock_sendmsg+0x21c/0x270
[  934.716834][T23842]  ____sys_sendmsg+0x505/0x830
[  934.716861][T23842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  934.716893][T23842]  ? import_iovec+0x74/0xa0
[  934.716917][T23842]  ___sys_sendmsg+0x21f/0x2a0
[  934.716942][T23842]  ? __pfx____sys_sendmsg+0x10/0x10
[  934.716998][T23842]  ? __fget_files+0x2a/0x420
[  934.717015][T23842]  ? __fget_files+0x3a0/0x420
[  934.717041][T23842]  __x64_sys_sendmsg+0x19b/0x260
[  934.717066][T23842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  934.717097][T23842]  ? __pfx_ksys_write+0x10/0x10
[  934.717118][T23842]  ? rcu_is_watching+0x15/0xb0
[  934.717144][T23842]  ? do_syscall_64+0xbe/0x3b0
[  934.717168][T23842]  do_syscall_64+0xfa/0x3b0
[  934.717186][T23842]  ? lockdep_hardirqs_on+0x9c/0x150
[  934.717203][T23842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.717220][T23842]  ? clear_bhb_loop+0x60/0xb0
[  934.717241][T23842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.717257][T23842] RIP: 0033:0x7f8627d8eec9
[  934.717278][T23842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  934.717293][T23842] RSP: 002b:00007f8628b44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.717313][T23842] RAX: ffffffffffffffda RBX: 00007f8627fe5fa0 RCX: 00007f8627d8eec9
[  934.717326][T23842] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  934.717337][T23842] RBP: 00007f8628b44090 R08: 0000000000000000 R09: 0000000000000000
[  934.717348][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.717359][T23842] R13: 00007f8627fe6038 R14: 00007f8627fe5fa0 R15: 00007f862810fa28
[  934.717387][T23842]  </TASK>
[  935.112281][ T5902] usb 1-1: USB disconnect, device number 12
[  935.119667][ T5902] ftdi_sio 1-1:0.0: device disconnected
[  935.552876][T23863] syzkaller1: entered promiscuous mode
[  935.574961][ T5902] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  935.576787][T23863] syzkaller1: entered allmulticast mode
[  935.745031][ T5902] usb 1-1: Using ep0 maxpacket: 8
[  935.777442][T23850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  935.795678][T23850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  935.817274][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short
[  935.830731][ T5902] usb 1-1: no configurations
[  935.837611][ T5902] usb 1-1: can't read configurations, error -22
[  936.044808][   T55] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  936.197150][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.227768][   T55] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  936.241755][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.252031][T23879] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  936.267390][   T55] usb 2-1: config 0 descriptor??
[  936.422522][T23887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5651'.
[  936.499336][   T55] usbhid 2-1:0.0: can't add hid device: -71
[  936.762785][   T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  936.778832][   T55] usb 2-1: USB disconnect, device number 31
[  936.808519][T23894] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  937.072692][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  937.072710][   T30] audit: type=1800 audit(1759236173.227:770): pid=23896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5650" name="file1" dev="tmpfs" ino=808 res=0 errno=0
[  937.226670][   T55] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  937.475797][   T55] usb 2-1: Using ep0 maxpacket: 32
[  937.483917][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  937.567389][   T55] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  937.745414][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.770100][T23907] 8021q: adding VLAN 0 to HW filter on device bond1
[  937.806762][   T55] usb 2-1: config 0 descriptor??
[  937.875238][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  937.902058][   T55] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  937.963733][   T55] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  938.088295][   T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  938.108936][   T24] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  938.190774][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  938.213264][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.257941][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  938.303341][T23871] FAULT_INJECTION: forcing a failure.
[  938.303341][T23871] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  938.387685][T23871] CPU: 1 UID: 0 PID: 23871 Comm: syz.1.5645 Not tainted syzkaller #0 PREEMPT(full) 
[  938.387710][T23871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  938.387722][T23871] Call Trace:
[  938.387731][T23871]  <TASK>
[  938.387739][T23871]  dump_stack_lvl+0x189/0x250
[  938.387765][T23871]  ? __pfx____ratelimit+0x10/0x10
[  938.387784][T23871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  938.387809][T23871]  ? __pfx__printk+0x10/0x10
[  938.387852][T23871]  should_fail_ex+0x414/0x560
[  938.387882][T23871]  _copy_to_user+0x31/0xb0
[  938.387907][T23871]  simple_read_from_buffer+0xe1/0x170
[  938.387936][T23871]  proc_fail_nth_read+0x1b3/0x220
[  938.387960][T23871]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  938.387985][T23871]  ? rw_verify_area+0x2a6/0x4d0
[  938.388006][T23871]  ? __lock_acquire+0xab9/0xd20
[  938.388020][T23871]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  938.388042][T23871]  vfs_read+0x1fd/0xa30
[  938.388063][T23871]  ? fdget_pos+0x247/0x320
[  938.388084][T23871]  ? __pfx___mutex_lock+0x10/0x10
[  938.388104][T23871]  ? __pfx_vfs_read+0x10/0x10
[  938.388127][T23871]  ? __fget_files+0x2a/0x420
[  938.388148][T23871]  ? __fget_files+0x3a0/0x420
[  938.388163][T23871]  ? __fget_files+0x2a/0x420
[  938.388188][T23871]  ksys_read+0x145/0x250
[  938.388213][T23871]  ? __pfx_ksys_read+0x10/0x10
[  938.388232][T23871]  ? rcu_is_watching+0x15/0xb0
[  938.388256][T23871]  ? do_syscall_64+0xbe/0x3b0
[  938.388279][T23871]  do_syscall_64+0xfa/0x3b0
[  938.388305][T23871]  ? lockdep_hardirqs_on+0x9c/0x150
[  938.388324][T23871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.388341][T23871]  ? clear_bhb_loop+0x60/0xb0
[  938.388362][T23871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.388379][T23871] RIP: 0033:0x7f8627d8d8dc
[  938.388394][T23871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  938.388410][T23871] RSP: 002b:00007f8628b44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  938.388429][T23871] RAX: ffffffffffffffda RBX: 00007f8627fe5fa0 RCX: 00007f8627d8d8dc
[  938.388443][T23871] RDX: 000000000000000f RSI: 00007f8628b440a0 RDI: 0000000000000005
[  938.388452][T23871] RBP: 00007f8628b44090 R08: 0000000000000000 R09: 0000000000000000
[  938.388464][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  938.388474][T23871] R13: 00007f8627fe6038 R14: 00007f8627fe5fa0 R15: 00007f862810fa28
[  938.388502][T23871]  </TASK>
[  938.631313][    C1] vkms_vblank_simulate: vblank timer overrun
[  938.694825][   T55] usb 2-1: USB disconnect, device number 32
[  938.703510][   T55] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  938.821744][   T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  938.883777][T10153] udevd[10153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  938.972337][T23926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5660'.
[  939.304773][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  939.475136][    T9] usb 5-1: Using ep0 maxpacket: 8
[  939.496936][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  939.506988][    T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  939.575129][    T9] usb 5-1: config 4 has no interface number 0
[  939.581299][    T9] usb 5-1: config 4 interface 30 has no altsetting 0
[  939.596805][    T9] usb 5-1: string descriptor 0 read error: -22
[  939.603080][    T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  939.614169][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.838460][   T30] audit: type=1800 audit(1759236175.907:771): pid=23939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5663" name="file1" dev="tmpfs" ino=829 res=0 errno=0
[  939.849721][    T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  939.870880][    T9] dw2102: su3000_power_ctrl: 1, initialized 0
[  939.880789][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  940.150107][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  940.313042][    T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  940.330545][    T9] usb 5-1: media controller created
[  940.338640][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.346226][    T9] dw2102: i2c transfer failed.
[  940.353537][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.361133][    T9] dw2102: i2c transfer failed.
[  940.371999][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.382277][    T9] dw2102: i2c transfer failed.
[  940.389276][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.395278][    T9] dw2102: i2c transfer failed.
[  940.400067][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.406424][    T9] dw2102: i2c transfer failed.
[  940.411222][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  940.443881][    T9] dw2102: i2c transfer failed.
[  940.472000][    T9] dvb-usb: MAC address: 02:02:02:02:02:02
[  940.499631][   T55] usb 1-1: USB disconnect, device number 15
[  940.528948][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  940.639693][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  940.670950][    T9] dw2102: command 0x0e transfer failed.
[  940.777381][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  940.798650][    T9] dw2102: command 0x0e transfer failed.
[  940.894439][T23948] ipvlan0: entered promiscuous mode
[  940.928579][T23948] ipvlan0: entered allmulticast mode
[  940.933918][T23948] veth0_to_hsr: entered allmulticast mode
[  941.147883][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  941.155958][    T9] dw2102: command 0x0e transfer failed.
[  941.170112][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  941.211272][    T9] dw2102: command 0x0e transfer failed.
[  941.243360][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  941.277231][    T9] dw2102: command 0x51 transfer failed.
[  941.310106][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  941.336982][    T9] dw2102: i2c probe for address 0x68 failed.
[  941.353059][T23964] wireguard: wg2: Could not create IPv4 socket
[  941.364038][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  941.418368][    T9] dw2102: i2c probe for address 0x69 failed.
[  941.424399][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  941.430270][T23943] misc userio: The device must be registered before sending interrupts
[  941.484722][    T9] dw2102: i2c probe for address 0x6a failed.
[  941.527625][    T9] dw2102: probing for demodulator failed. Is the external power switched on?
[  941.579365][    T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  941.777638][ T5930] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  941.785421][    T9] rc_core: IR keymap rc-tt-1500 not found
[  941.791139][    T9] Registered IR keymap rc-empty
[  941.832034][    T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  941.897804][    T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input79
[  941.917009][    T9] dvb-usb: schedule remote query interval to 250 msecs.
[  941.928075][    T9] dw2102: su3000_power_ctrl: 0, initialized 1
[  941.934176][    T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  941.985603][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  942.005974][    T9] usb 5-1: USB disconnect, device number 11
[  942.015062][ T5930] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  942.064779][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.283928][ T5930] usb 1-1: config 0 descriptor??
[  942.525629][    T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  942.563691][ T5930] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  942.609372][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  942.619858][ T5902] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  942.713575][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  942.737494][ T5930] usb 1-1: media controller created
[  942.785622][T23967] dib0700: tx buffer length is larger than 4. Not supported.
[  942.813538][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  942.876980][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  942.894782][ T5902] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  942.944938][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.012402][ T5902] usb 3-1: config 0 descriptor??
[  943.041571][ T5902] pwc: Askey VC010 type 2 USB webcam detected.
[  943.080401][ T5930] DVB: Unable to find symbol dib7000p_attach()
[  943.185344][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  943.624006][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00
[  944.735274][ T5902] pwc: recv_control_msg error -32 req 02 val 2700
[  944.774872][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00
[  944.793899][ T5902] pwc: recv_control_msg error -32 req 04 val 1000
[  944.802142][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found
[  944.825270][ T5930] Registered IR keymap rc-empty
[  944.830449][ T5930] dvb-usb: could not initialize remote control.
[  944.847112][ T5902] pwc: recv_control_msg error -32 req 04 val 1300
[  944.866627][ T5902] pwc: recv_control_msg error -32 req 04 val 1400
[  944.873086][ T5930] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  944.894872][ T5902] pwc: recv_control_msg error -32 req 02 val 2000
[  944.916592][ T5902] pwc: recv_control_msg error -32 req 02 val 2100
[  944.917479][T23983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.948105][T23983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  945.023402][ T5902] pwc: recv_control_msg error -32 req 04 val 1500
[  945.056518][ T5902] pwc: recv_control_msg error -32 req 02 val 2500
[  945.071322][ T5902] pwc: recv_control_msg error -32 req 02 val 2400
[  945.090842][ T5902] pwc: recv_control_msg error -32 req 02 val 2600
[  945.105515][ T5902] pwc: recv_control_msg error -32 req 02 val 2900
[  945.265280][ T5930] usb 1-1: USB disconnect, device number 16
[  945.328570][ T5902] pwc: recv_control_msg error -71 req 04 val 1100
[  945.342428][ T5902] pwc: recv_control_msg error -71 req 04 val 1200
[  945.364049][ T5902] pwc: Registered as video103.
[  945.380603][ T5930] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  945.398371][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81
[  945.460025][ T5902] usb 3-1: USB disconnect, device number 29
[  945.734790][ T5930] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  945.889113][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  945.903639][ T5930] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  945.932785][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.960109][ T5930] usb 1-1: config 0 descriptor??
[  945.978579][ T5930] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[  946.220006][T24010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.239455][T24010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.264176][ T5930] usb 1-1: USB disconnect, device number 17
[  946.699059][   T30] audit: type=1800 audit(1759236182.897:772): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5694" name="nullb0" dev="devtmpfs" ino=4531 res=0 errno=0
[  946.791685][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5696'.
[  946.817181][T24044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  946.911813][T24048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  947.179873][   T30] audit: type=1800 audit(1759236183.377:773): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5702" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  947.410192][T24071] FAULT_INJECTION: forcing a failure.
[  947.410192][T24071] name failslab, interval 1, probability 0, space 0, times 0
[  947.429308][T24071] CPU: 1 UID: 0 PID: 24071 Comm: syz.3.5707 Not tainted syzkaller #0 PREEMPT(full) 
[  947.429336][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  947.429347][T24071] Call Trace:
[  947.429355][T24071]  <TASK>
[  947.429364][T24071]  dump_stack_lvl+0x189/0x250
[  947.429389][T24071]  ? __pfx____ratelimit+0x10/0x10
[  947.429408][T24071]  ? __pfx_dump_stack_lvl+0x10/0x10
[  947.429428][T24071]  ? __pfx__printk+0x10/0x10
[  947.429450][T24071]  ? __pfx___might_resched+0x10/0x10
[  947.429473][T24071]  should_fail_ex+0x414/0x560
[  947.429503][T24071]  ? nf_tables_newchain+0x1b7e/0x2900
[  947.429522][T24071]  should_failslab+0xa8/0x100
[  947.429548][T24071]  __kvmalloc_node_noprof+0x161/0x5f0
[  947.429573][T24071]  ? nf_tables_newchain+0x1b7e/0x2900
[  947.429599][T24071]  nf_tables_newchain+0x1b7e/0x2900
[  947.429637][T24071]  ? __pfx_nf_tables_newchain+0x10/0x10
[  947.429698][T24071]  ? nfnl_pernet+0x23/0x240
[  947.429732][T24071]  ? __nla_parse+0x40/0x60
[  947.429755][T24071]  nfnetlink_rcv+0x1132/0x2520
[  947.429802][T24071]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  947.429835][T24071]  ? ref_tracker_free+0x63a/0x7d0
[  947.429881][T24071]  ? __netlink_deliver_tap+0x807/0x850
[  947.429900][T24071]  ? netlink_deliver_tap+0x2e/0x1b0
[  947.429936][T24071]  netlink_unicast+0x82c/0x9e0
[  947.429962][T24071]  ? __pfx_netlink_unicast+0x10/0x10
[  947.429982][T24071]  ? netlink_sendmsg+0x642/0xb30
[  947.429999][T24071]  ? skb_put+0x11b/0x210
[  947.430023][T24071]  netlink_sendmsg+0x805/0xb30
[  947.430052][T24071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  947.430075][T24071]  ? aa_sock_msg_perm+0xf1/0x1d0
[  947.430095][T24071]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  947.430113][T24071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  947.430134][T24071]  __sock_sendmsg+0x21c/0x270
[  947.430154][T24071]  ____sys_sendmsg+0x505/0x830
[  947.430182][T24071]  ? __pfx_____sys_sendmsg+0x10/0x10
[  947.430213][T24071]  ? import_iovec+0x74/0xa0
[  947.430239][T24071]  ___sys_sendmsg+0x21f/0x2a0
[  947.430263][T24071]  ? __pfx____sys_sendmsg+0x10/0x10
[  947.430321][T24071]  ? __fget_files+0x2a/0x420
[  947.430336][T24071]  ? __fget_files+0x3a0/0x420
[  947.430363][T24071]  __x64_sys_sendmsg+0x19b/0x260
[  947.430386][T24071]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  947.430423][T24071]  ? do_syscall_64+0xbe/0x3b0
[  947.430446][T24071]  do_syscall_64+0xfa/0x3b0
[  947.430466][T24071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.430482][T24071]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  947.430499][T24071]  ? clear_bhb_loop+0x60/0xb0
[  947.430520][T24071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.430536][T24071] RIP: 0033:0x7feac198eec9
[  947.430552][T24071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  947.430568][T24071] RSP: 002b:00007feac27a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  947.430587][T24071] RAX: ffffffffffffffda RBX: 00007feac1be5fa0 RCX: 00007feac198eec9
[  947.430600][T24071] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  947.430611][T24071] RBP: 00007feac27a2090 R08: 0000000000000000 R09: 0000000000000000
[  947.430622][T24071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  947.430632][T24071] R13: 00007feac1be6038 R14: 00007feac1be5fa0 R15: 00007feac1d0fa28
[  947.430661][T24071]  </TASK>
[  947.830146][T24074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  948.372126][T24091] tipc: Started in network mode
[  948.399468][T24091] tipc: Node identity 080211, cluster identity 4711
[  948.545004][T24091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  949.055166][   T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  949.229764][   T24] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  949.242361][   T24] usb 4-1: config 0 has no interface number 0
[  949.358568][   T24] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[  949.381778][   T24] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  949.405059][T24105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5719'.
[  949.477484][   T24] usb 4-1: config 0 interface 48 has no altsetting 0
[  949.504000][   T24] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  949.521578][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.577934][   T24] usb 4-1: config 0 descriptor??
[  949.669294][ T5930] tipc: Node number set to 134353152
[  949.868643][T24117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5723'.
[  950.111081][T24122] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[  950.614236][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'.
[  950.721088][T24140] macvlan0: entered promiscuous mode
[  950.744416][T24140] netlink: 'syz.4.5730': attribute type 1 has an invalid length.
[  950.763939][T24140] netlink: 'syz.4.5730': attribute type 2 has an invalid length.
[  950.907389][T24146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  951.272686][T24158] FAULT_INJECTION: forcing a failure.
[  951.272686][T24158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  951.312343][T24158] CPU: 0 UID: 0 PID: 24158 Comm: syz.0.5736 Not tainted syzkaller #0 PREEMPT(full) 
[  951.312367][T24158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  951.312379][T24158] Call Trace:
[  951.312386][T24158]  <TASK>
[  951.312393][T24158]  dump_stack_lvl+0x189/0x250
[  951.312418][T24158]  ? __pfx____ratelimit+0x10/0x10
[  951.312436][T24158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  951.312455][T24158]  ? __pfx__printk+0x10/0x10
[  951.312471][T24158]  ? __might_fault+0xb0/0x130
[  951.312503][T24158]  should_fail_ex+0x414/0x560
[  951.312531][T24158]  _copy_from_user+0x2d/0xb0
[  951.312554][T24158]  do_handle_open+0xd7/0x8f0
[  951.312576][T24158]  ? __pfx_do_handle_open+0x10/0x10
[  951.312594][T24158]  ? ksys_write+0x22a/0x250
[  951.312618][T24158]  ? __pfx_ksys_write+0x10/0x10
[  951.312643][T24158]  ? do_syscall_64+0xbe/0x3b0
[  951.312664][T24158]  do_syscall_64+0xfa/0x3b0
[  951.312680][T24158]  ? lockdep_hardirqs_on+0x9c/0x150
[  951.312697][T24158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.312713][T24158]  ? clear_bhb_loop+0x60/0xb0
[  951.312733][T24158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.312749][T24158] RIP: 0033:0x7fc7e8b8eec9
[  951.312766][T24158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  951.312782][T24158] RSP: 002b:00007fc7e9aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  951.312801][T24158] RAX: ffffffffffffffda RBX: 00007fc7e8de5fa0 RCX: 00007fc7e8b8eec9
[  951.312812][T24158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  951.312819][T24158] RBP: 00007fc7e9aa0090 R08: 0000000000000000 R09: 0000000000000000
[  951.312825][T24158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.312831][T24158] R13: 00007fc7e8de6038 R14: 00007fc7e8de5fa0 R15: 00007fc7e8f0fa28
[  951.312846][T24158]  </TASK>
[  951.767014][T24172] FAULT_INJECTION: forcing a failure.
[  951.767014][T24172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  951.794826][T24172] CPU: 0 UID: 0 PID: 24172 Comm: syz.2.5741 Not tainted syzkaller #0 PREEMPT(full) 
[  951.794851][T24172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  951.794863][T24172] Call Trace:
[  951.794872][T24172]  <TASK>
[  951.794881][T24172]  dump_stack_lvl+0x189/0x250
[  951.794902][T24172]  ? __pfx____ratelimit+0x10/0x10
[  951.794914][T24172]  ? __pfx_dump_stack_lvl+0x10/0x10
[  951.794926][T24172]  ? __pfx__printk+0x10/0x10
[  951.794941][T24172]  should_fail_ex+0x414/0x560
[  951.794959][T24172]  _copy_to_user+0x31/0xb0
[  951.794975][T24172]  simple_read_from_buffer+0xe1/0x170
[  951.794992][T24172]  proc_fail_nth_read+0x1b3/0x220
[  951.795011][T24172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  951.795025][T24172]  ? rw_verify_area+0x2a6/0x4d0
[  951.795038][T24172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  951.795050][T24172]  vfs_read+0x1fd/0xa30
[  951.795073][T24172]  ? lockdep_hardirqs_on+0x9c/0x150
[  951.795084][T24172]  ? __pfx_vfs_read+0x10/0x10
[  951.795097][T24172]  ? do_handle_open+0x756/0x8f0
[  951.795107][T24172]  ? kfree+0x18e/0x440
[  951.795121][T24172]  ? dput+0x80/0x2b0
[  951.795129][T24172]  ? mntput+0x65/0xc0
[  951.795142][T24172]  ? do_handle_open+0x13f/0x8f0
[  951.795157][T24172]  ksys_read+0x145/0x250
[  951.795171][T24172]  ? __pfx_ksys_read+0x10/0x10
[  951.795182][T24172]  ? rcu_is_watching+0x15/0xb0
[  951.795196][T24172]  ? do_syscall_64+0xbe/0x3b0
[  951.795209][T24172]  do_syscall_64+0xfa/0x3b0
[  951.795219][T24172]  ? lockdep_hardirqs_on+0x9c/0x150
[  951.795229][T24172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.795244][T24172]  ? clear_bhb_loop+0x60/0xb0
[  951.795256][T24172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.795265][T24172] RIP: 0033:0x7f6f6bf8d8dc
[  951.795276][T24172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  951.795285][T24172] RSP: 002b:00007f6f6ce9a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  951.795297][T24172] RAX: ffffffffffffffda RBX: 00007f6f6c1e5fa0 RCX: 00007f6f6bf8d8dc
[  951.795304][T24172] RDX: 000000000000000f RSI: 00007f6f6ce9a0a0 RDI: 0000000000000004
[  951.795310][T24172] RBP: 00007f6f6ce9a090 R08: 0000000000000000 R09: 0000000000000000
[  951.795316][T24172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.795322][T24172] R13: 00007f6f6c1e6038 R14: 00007f6f6c1e5fa0 R15: 00007f6f6c30fa28
[  951.795337][T24172]  </TASK>
[  952.284954][ T5959] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  952.384261][   T24] usb 4-1: string descriptor 0 read error: -71
[  952.416417][   T24] gspca_main: cpia1-2.14.0 probing 0813:0001
[  952.460541][   T24] gspca_cpia1: usb_control_msg 05, error -71
[  952.490241][   T24] gspca_cpia1: usb_control_msg 01, error -71
[  952.497798][ T5959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  952.517592][   T24] cpia1 4-1:0.48: only firmware version 1 is supported (got: 0)
[  952.535115][ T5959] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  952.552571][T24183] IPVS: length: 13 != 8
[  952.557406][   T24] usb 4-1: USB disconnect, device number 17
[  952.568233][ T5959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  952.591914][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.635139][T24173] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  952.667392][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  953.154886][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  953.314807][    T9] usb 5-1: Using ep0 maxpacket: 32
[  953.324849][   T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  953.489004][ T5959] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  953.504946][    T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  953.520597][   T24] usb 4-1: Using ep0 maxpacket: 32
[  953.533362][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.553345][   T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  953.575040][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.595176][    T9] usb 5-1: config 0 descriptor??
[  953.611035][   T24] usb 4-1: config 0 descriptor??
[  953.713265][ T5959] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  953.776653][T24205] sctp: [Deprecated]: syz.2.5752 (pid 24205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  953.776653][T24205] Use struct sctp_sack_info instead
[  953.821628][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.880935][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  953.889779][ T5959] usb 1-1: Product: syz
[  953.914167][ T5959] usb 1-1: Manufacturer: syz
[  953.929709][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  953.950864][ T5959] usb 1-1: SerialNumber: syz
[  953.959835][    T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  953.973479][ T5959] usb 1-1: config 0 descriptor??
[  953.986756][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  954.015721][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  954.028175][ T5959] ch341 1-1:0.0: ch341-uart converter detected
[  954.042957][   T24] usb 4-1: media controller created
[  954.042966][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  954.043005][    T9] usb 5-1: media controller created
[  954.109852][T24194] dib0700: tx buffer length is larger than 4. Not supported.
[  954.183423][T24192] dib0700: tx buffer length is larger than 4. Not supported.
[  954.206059][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  954.228219][T24199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  954.237481][T24199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  954.307718][ T5959] usb 1-1: failed to receive control message: -32
[  954.317517][ T5959] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32
[  954.403886][ T5930] usb 1-1: USB disconnect, device number 18
[  954.410890][ T5930] ch341 1-1:0.0: device disconnected
[  954.486610][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  954.607571][    T9] DVB: Unable to find symbol dib7000p_attach()
[  954.613973][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  954.688001][ T5959] usb 2-1: USB disconnect, device number 33
[  955.226535][   T24] DVB: Unable to find symbol dib7000p_attach()
[  955.271530][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  955.445606][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[  955.479791][    T9] Registered IR keymap rc-empty
[  955.484907][ T5930] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  955.500607][    T9] dvb-usb: could not initialize remote control.
[  955.529504][    T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  955.684793][ T5930] usb 1-1: Invalid ep0 maxpacket: 64
[  955.698739][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  955.711157][   T24] Registered IR keymap rc-empty
[  955.870656][   T24] dvb-usb: could not initialize remote control.
[  955.893586][    T9] usb 5-1: USB disconnect, device number 12
[  955.903685][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  955.985849][ T5930] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  956.018207][   T24] usb 4-1: USB disconnect, device number 18
[  956.136087][    T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  956.199113][ T5930] usb 1-1: Invalid ep0 maxpacket: 64
[  956.205023][ T5930] usb usb1-port1: attempt power cycle
[  956.220668][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  956.554750][ T5930] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[  956.585555][ T5930] usb 1-1: Invalid ep0 maxpacket: 64
[  956.714795][ T5930] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  956.756262][ T5930] usb 1-1: Invalid ep0 maxpacket: 64
[  956.764288][ T5930] usb usb1-port1: unable to enumerate USB device
[  957.484829][ T5930] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  957.790904][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  957.824296][ T5930] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  957.862644][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.915706][ T5930] usb 5-1: config 0 descriptor??
[  958.126194][ T5930] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  958.134972][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  958.150466][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  958.158116][ T5930] usb 5-1: media controller created
[  958.268674][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  958.327013][T24263] dib0700: tx buffer length is larger than 4. Not supported.
[  958.475553][ T5930] DVB: Unable to find symbol dib7000p_attach()
[  958.481852][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  958.574866][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found
[  958.581054][ T5930] Registered IR keymap rc-empty
[  958.586186][ T5930] dvb-usb: could not initialize remote control.
[  958.592501][ T5930] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  959.964275][T24311] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  960.042889][   T24] IPVS: starting estimator thread 0...
[  960.144252][T24312] IPVS: using max 31 ests per chain, 74400 per kthread
[  960.244776][ T5930] usb 5-1: USB disconnect, device number 13
[  960.255963][T24314] usb usb8: usbfs: process 24314 (syz.4.5781) did not claim interface 0 before use
[  960.405539][ T5930] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  961.167716][T24331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5785'.
[  961.847379][T24338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5787'.
[  961.961082][T24343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5786'.
[  963.115072][ T5959] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  963.133846][T24368] FAULT_INJECTION: forcing a failure.
[  963.133846][T24368] name failslab, interval 1, probability 0, space 0, times 0
[  963.147109][T24368] CPU: 0 UID: 0 PID: 24368 Comm: syz.0.5795 Not tainted syzkaller #0 PREEMPT(full) 
[  963.147132][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  963.147143][T24368] Call Trace:
[  963.147151][T24368]  <TASK>
[  963.147160][T24368]  dump_stack_lvl+0x189/0x250
[  963.147187][T24368]  ? __pfx____ratelimit+0x10/0x10
[  963.147207][T24368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  963.147228][T24368]  ? __pfx__printk+0x10/0x10
[  963.147250][T24368]  ? __pfx___might_resched+0x10/0x10
[  963.147267][T24368]  ? fs_reclaim_acquire+0x7d/0x100
[  963.147289][T24368]  should_fail_ex+0x414/0x560
[  963.147318][T24368]  should_failslab+0xa8/0x100
[  963.147344][T24368]  __kmalloc_noprof+0xcb/0x4f0
[  963.147366][T24368]  ? do_handle_open+0x4d4/0x8f0
[  963.147388][T24368]  do_handle_open+0x4d4/0x8f0
[  963.147411][T24368]  ? __pfx_do_handle_open+0x10/0x10
[  963.147430][T24368]  ? ksys_write+0x22a/0x250
[  963.147454][T24368]  ? __pfx_ksys_write+0x10/0x10
[  963.147474][T24368]  ? rcu_is_watching+0x15/0xb0
[  963.147497][T24368]  ? do_syscall_64+0xbe/0x3b0
[  963.147518][T24368]  do_syscall_64+0xfa/0x3b0
[  963.147536][T24368]  ? lockdep_hardirqs_on+0x9c/0x150
[  963.147554][T24368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.147571][T24368]  ? clear_bhb_loop+0x60/0xb0
[  963.147591][T24368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.147608][T24368] RIP: 0033:0x7fc7e8b8eec9
[  963.147624][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.147640][T24368] RSP: 002b:00007fc7e9aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  963.147659][T24368] RAX: ffffffffffffffda RBX: 00007fc7e8de5fa0 RCX: 00007fc7e8b8eec9
[  963.147673][T24368] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  963.147684][T24368] RBP: 00007fc7e9aa0090 R08: 0000000000000000 R09: 0000000000000000
[  963.147695][T24368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  963.147706][T24368] R13: 00007fc7e8de6038 R14: 00007fc7e8de5fa0 R15: 00007fc7e8f0fa28
[  963.147734][T24368]  </TASK>
[  963.396283][T24371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.404946][T24371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.448004][ T5959] usb 4-1: Using ep0 maxpacket: 32
[  963.457408][T24374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5797'.
[  963.492090][ T5959] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  963.495331][T24371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.508235][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.510173][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  963.529887][T24371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.537853][T24375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.547914][T24375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.560883][ T5959] usb 4-1: config 0 descriptor??
[  963.666142][ T5902] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  963.684916][    T9] usb 2-1: Using ep0 maxpacket: 8
[  963.695917][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  963.714877][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  963.746496][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  963.763541][T24381] fuse: Bad value for 'max_read'
[  963.783283][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  963.799732][ T5959] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  963.814473][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  963.816162][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  963.840771][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.866071][ T5959] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  963.867633][ T5902] usb 1-1: config 8 has an invalid interface number: 177 but max is 0
[  963.888811][ T5959] usb 4-1: media controller created
[  963.908778][ T5902] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  963.942147][ T5902] usb 1-1: config 8 has no interface number 0
[  963.952170][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  963.957824][ T5902] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  963.994243][ T5902] usb 1-1: config 8 interface 177 has no altsetting 0
[  964.000326][T24357] dib0700: tx buffer length is larger than 4. Not supported.
[  964.018653][ T5902] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  964.039695][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.074766][ T5902] ir_toy 1-1:8.177: required endpoints not found
[  964.109030][T24366] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  964.158758][ T5959] DVB: Unable to find symbol dib7000p_attach()
[  964.172054][ T5959] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  964.258458][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  964.264244][    T9] usbtmc 2-1:16.0: can't read capabilities
[  964.284871][ T5959] rc_core: IR keymap rc-dib0700-rc5 not found
[  964.307437][ T5959] Registered IR keymap rc-empty
[  964.338859][ T5959] dvb-usb: could not initialize remote control.
[  964.367479][ T5959] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  964.404408][    T9] usb 1-1: USB disconnect, device number 23
[  964.733618][ T5902] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  964.894952][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  964.904219][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0
[  964.934474][ T5902] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  964.953954][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.980221][ T5902] usb 3-1: Product: syz
[  964.990631][ T5902] usb 3-1: Manufacturer: syz
[  965.002258][ T5902] usb 3-1: SerialNumber: syz
[  965.020736][ T5902] usb 3-1: config 0 descriptor??
[  965.234981][  T860] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  965.410717][  T860] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  965.420244][  T860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.432575][  T860] usb 5-1: Product: syz
[  965.437176][  T860] usb 5-1: Manufacturer: syz
[  965.443570][  T860] usb 5-1: SerialNumber: syz
[  965.458145][ T5902] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[  965.471839][  T860] usb 5-1: config 0 descriptor??
[  965.483206][ T5902] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  965.500397][  T860] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  965.519245][ T5902] usb 3-1: USB disconnect, device number 30
[  965.698123][  T860] gspca_sn9c2028: read1 error -71
[  965.706399][  T860] gspca_sn9c2028: read1 error -71
[  965.712033][  T860] gspca_sn9c2028: read1 error -71
[  965.717660][  T860] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  965.732758][  T860] usb 5-1: USB disconnect, device number 14
[  965.788697][ T5959] usb 4-1: USB disconnect, device number 19
[  965.846685][   T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  965.857101][ T5959] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  966.035663][   T24] usb 1-1: Using ep0 maxpacket: 16
[  966.061450][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  966.079252][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  966.114820][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  966.124530][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  966.143164][   T24] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  966.153338][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.167247][   T24] usb 1-1: Product: syz
[  966.171505][   T24] usb 1-1: Manufacturer: syz
[  966.179316][   T24] usb 1-1: SerialNumber: syz
[  966.205692][   T24] usb 1-1: config 0 descriptor??
[  966.223244][   T24] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected
[  966.248820][   T24] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  966.258862][  T860] usb 2-1: USB disconnect, device number 34
[  966.391881][T24427] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  966.484438][T24430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5817'.
[  966.613991][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5819'.
[  966.640362][ T5959] usb 1-1: USB disconnect, device number 24
[  966.668001][ T5959] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  966.686578][   T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  966.710604][ T5959] omninet 1-1:0.0: device disconnected
[  966.791863][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5822'.
[  966.859586][   T24] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  966.882609][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.910231][   T24] usb 3-1: Product: syz
[  966.914570][   T24] usb 3-1: Manufacturer: syz
[  966.919734][   T24] usb 3-1: SerialNumber: syz
[  966.933108][   T24] usb 3-1: config 0 descriptor??
[  966.953410][   T24] gspca_main: sq930x-2.14.0 probing 2770:930c
[  967.045075][  T860] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  967.099704][T24454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5826'.
[  967.204921][  T860] usb 2-1: Using ep0 maxpacket: 32
[  967.219148][  T860] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  967.238853][  T860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.253104][  T860] usb 2-1: config 0 descriptor??
[  967.280066][T24462] FAULT_INJECTION: forcing a failure.
[  967.280066][T24462] name failslab, interval 1, probability 0, space 0, times 0
[  967.293675][T24462] CPU: 0 UID: 0 PID: 24462 Comm: syz.4.5829 Not tainted syzkaller #0 PREEMPT(full) 
[  967.293699][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  967.293717][T24462] Call Trace:
[  967.293725][T24462]  <TASK>
[  967.293733][T24462]  dump_stack_lvl+0x189/0x250
[  967.293762][T24462]  ? __pfx____ratelimit+0x10/0x10
[  967.293782][T24462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  967.293802][T24462]  ? __pfx__printk+0x10/0x10
[  967.293825][T24462]  ? __pfx___might_resched+0x10/0x10
[  967.293841][T24462]  ? fs_reclaim_acquire+0x7d/0x100
[  967.293864][T24462]  should_fail_ex+0x414/0x560
[  967.293892][T24462]  ? rhashtable_init_noprof+0x4ee/0xbb0
[  967.293912][T24462]  should_failslab+0xa8/0x100
[  967.293938][T24462]  __kvmalloc_node_noprof+0x161/0x5f0
[  967.293961][T24462]  ? rhashtable_init_noprof+0x4ee/0xbb0
[  967.293986][T24462]  rhashtable_init_noprof+0x4ee/0xbb0
[  967.294013][T24462]  rhltable_init_noprof+0x1e/0x60
[  967.294034][T24462]  nf_tables_newtable+0x68f/0x1890
[  967.294076][T24462]  nfnetlink_rcv+0x1132/0x2520
[  967.294124][T24462]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  967.294158][T24462]  ? ref_tracker_free+0x63a/0x7d0
[  967.294204][T24462]  ? __netlink_deliver_tap+0x807/0x850
[  967.294224][T24462]  ? netlink_deliver_tap+0x2e/0x1b0
[  967.294261][T24462]  netlink_unicast+0x82c/0x9e0
[  967.294288][T24462]  ? __pfx_netlink_unicast+0x10/0x10
[  967.294307][T24462]  ? netlink_sendmsg+0x642/0xb30
[  967.294325][T24462]  ? skb_put+0x11b/0x210
[  967.294349][T24462]  netlink_sendmsg+0x805/0xb30
[  967.294378][T24462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.294401][T24462]  ? aa_sock_msg_perm+0xf1/0x1d0
[  967.294421][T24462]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  967.294440][T24462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.294461][T24462]  __sock_sendmsg+0x21c/0x270
[  967.294481][T24462]  ____sys_sendmsg+0x505/0x830
[  967.294509][T24462]  ? __pfx_____sys_sendmsg+0x10/0x10
[  967.294541][T24462]  ? import_iovec+0x74/0xa0
[  967.294566][T24462]  ___sys_sendmsg+0x21f/0x2a0
[  967.294591][T24462]  ? __pfx____sys_sendmsg+0x10/0x10
[  967.294648][T24462]  ? __fget_files+0x2a/0x420
[  967.294662][T24462]  ? __fget_files+0x3a0/0x420
[  967.294684][T24462]  __x64_sys_sendmsg+0x19b/0x260
[  967.294712][T24462]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  967.294741][T24462]  ? __pfx_ksys_write+0x10/0x10
[  967.294761][T24462]  ? rcu_is_watching+0x15/0xb0
[  967.294784][T24462]  ? do_syscall_64+0xbe/0x3b0
[  967.294804][T24462]  do_syscall_64+0xfa/0x3b0
[  967.294818][T24462]  ? lockdep_hardirqs_on+0x9c/0x150
[  967.294833][T24462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.294848][T24462]  ? clear_bhb_loop+0x60/0xb0
[  967.294869][T24462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.294885][T24462] RIP: 0033:0x7f0cbd98eec9
[  967.294900][T24462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  967.294916][T24462] RSP: 002b:00007f0cbe8d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.294933][T24462] RAX: ffffffffffffffda RBX: 00007f0cbdbe5fa0 RCX: 00007f0cbd98eec9
[  967.294946][T24462] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  967.294956][T24462] RBP: 00007f0cbe8d1090 R08: 0000000000000000 R09: 0000000000000000
[  967.294967][T24462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.294978][T24462] R13: 00007f0cbdbe6038 R14: 00007f0cbdbe5fa0 R15: 00007f0cbdd0fa28
[  967.295007][T24462]  </TASK>
[  967.313032][T24464] netlink: 'syz.0.5830': attribute type 20 has an invalid length.
[  967.646847][T24464] IPv6: NLM_F_CREATE should be specified when creating new route
[  967.672726][  T860] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  967.676245][T24464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  967.686726][T24464] IPv6: NLM_F_CREATE should be set when creating new route
[  967.696150][  T860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  967.716246][  T860] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  967.725159][   T24] gspca_sq930x: ucbus_write failed -110
[  967.733334][   T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  967.736659][  T860] usb 2-1: media controller created
[  967.806730][  T860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  967.873108][T24443] dib0700: tx buffer length is larger than 4. Not supported.
[  967.911790][  T860] DVB: Unable to find symbol dib7000p_attach()
[  967.930878][  T860] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  968.016959][  T860] rc_core: IR keymap rc-dib0700-rc5 not found
[  968.023307][  T860] Registered IR keymap rc-empty
[  968.028749][  T860] dvb-usb: could not initialize remote control.
[  968.041143][  T860] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  968.165092][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  968.205034][ T5959] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  968.314972][   T24] usb 1-1: Using ep0 maxpacket: 16
[  968.326678][   T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  968.335279][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  968.349844][   T24] usb 1-1: config 0 has no interface number 0
[  968.359225][   T24] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  968.368462][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.376674][   T24] usb 1-1: Product: syz
[  968.381092][   T24] usb 1-1: Manufacturer: syz
[  968.386217][   T24] usb 1-1: SerialNumber: syz
[  968.391989][ T5959] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  968.403478][   T24] usb 1-1: config 0 descriptor??
[  968.409160][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.421101][   T24] usb 1-1: Found UVC 0.00 device syz (046c:14e8)
[  968.428744][   T24] usb 1-1: No valid video chain found.
[  968.435166][ T5959] usb 4-1: config 0 descriptor??
[  968.456111][ T5959] cp210x 4-1:0.0: cp210x converter detected
[  968.629432][T24475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  968.642852][T24475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  968.665353][    T9] usb 1-1: USB disconnect, device number 25
[  968.891289][ T5959] usb 4-1: cp210x converter now attached to ttyUSB0
[  969.411509][    T9] usb 3-1: USB disconnect, device number 31
[  969.493402][T24491] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5834'.
[  969.720179][  T860] usb 2-1: USB disconnect, device number 35
[  969.745214][T24496] blktrace: Concurrent blktraces are not allowed on sg0
[  969.826992][T24502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5840'.
[  969.915356][  T860] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  969.976985][ T5959] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  970.046113][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5840'.
[  970.169517][ T5959] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  970.180964][ T5959] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[  970.183294][T24506] VFS: Lookup of 'syz0' in fuse fuse would have caused loop
[  970.201995][ T5959] usb 3-1: config 220 interface 0 has no altsetting 0
[  970.211791][ T5959] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  970.272675][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.290083][ T5959] usb 3-1: Product: syz
[  970.294363][ T5959] usb 3-1: Manufacturer: syz
[  970.299256][ T5959] usb 3-1: SerialNumber: syz
[  970.407704][T24515] netlink: 'syz.0.5844': attribute type 12 has an invalid length.
[  970.441055][T24515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5844'.
[  970.541391][T24495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  970.551952][T24495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  970.573326][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5838'.
[  970.992611][  T860] usb 4-1: USB disconnect, device number 20
[  971.001799][  T860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  971.060531][  T860] cp210x 4-1:0.0: device disconnected
[  971.134092][T24527] FAULT_INJECTION: forcing a failure.
[  971.134092][T24527] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.175967][T24527] CPU: 0 UID: 0 PID: 24527 Comm: syz.3.5849 Not tainted syzkaller #0 PREEMPT(full) 
[  971.175991][T24527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  971.176003][T24527] Call Trace:
[  971.176011][T24527]  <TASK>
[  971.176019][T24527]  dump_stack_lvl+0x189/0x250
[  971.176045][T24527]  ? __pfx____ratelimit+0x10/0x10
[  971.176062][T24527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  971.176080][T24527]  ? __pfx__printk+0x10/0x10
[  971.176096][T24527]  ? __might_fault+0xb0/0x130
[  971.176128][T24527]  should_fail_ex+0x414/0x560
[  971.176154][T24527]  _copy_from_user+0x2d/0xb0
[  971.176174][T24527]  do_handle_open+0x54d/0x8f0
[  971.176195][T24527]  ? __pfx_do_handle_open+0x10/0x10
[  971.176212][T24527]  ? ksys_write+0x22a/0x250
[  971.176235][T24527]  ? __pfx_ksys_write+0x10/0x10
[  971.176254][T24527]  ? rcu_is_watching+0x15/0xb0
[  971.176282][T24527]  ? do_syscall_64+0xbe/0x3b0
[  971.176305][T24527]  do_syscall_64+0xfa/0x3b0
[  971.176321][T24527]  ? lockdep_hardirqs_on+0x9c/0x150
[  971.176338][T24527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.176353][T24527]  ? clear_bhb_loop+0x60/0xb0
[  971.176373][T24527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.176389][T24527] RIP: 0033:0x7feac198eec9
[  971.176405][T24527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  971.176421][T24527] RSP: 002b:00007feac27a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  971.176439][T24527] RAX: ffffffffffffffda RBX: 00007feac1be5fa0 RCX: 00007feac198eec9
[  971.176451][T24527] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  971.176462][T24527] RBP: 00007feac27a2090 R08: 0000000000000000 R09: 0000000000000000
[  971.176472][T24527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.176483][T24527] R13: 00007feac1be6038 R14: 00007feac1be5fa0 R15: 00007feac1d0fa28
[  971.176510][T24527]  </TASK>
[  971.687229][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  971.905175][   T24] usb 5-1: Using ep0 maxpacket: 32
[  971.916269][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  971.955053][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.002024][   T24] usb 5-1: config 0 descriptor??
[  972.421591][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  972.431814][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  972.448232][T24530] dib0700: tx buffer length is larger than 4. Not supported.
[  972.604250][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  972.621001][   T24] usb 5-1: media controller created
[  972.662560][ T5959] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  972.689433][ T5959] usb 3-1: No valid video chain found.
[  972.712594][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  972.722353][ T5959] usb 3-1: USB disconnect, device number 32
[  972.915882][   T24] DVB: Unable to find symbol dib7000p_attach()
[  972.964727][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  973.112631][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  973.130566][   T24] Registered IR keymap rc-empty
[  973.167757][   T24] dvb-usb: could not initialize remote control.
[  973.198941][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  973.224984][  T860] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  973.374775][  T860] usb 4-1: device descriptor read/64, error -71
[  973.381953][T24580] netlink: 908 bytes leftover after parsing attributes in process `syz.1.5864'.
[  973.423154][T24580] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  973.615158][  T860] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  973.708394][T24584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.744913][  T860] usb 4-1: device descriptor read/64, error -71
[  973.859608][  T860] usb usb4-port1: attempt power cycle
[  974.204769][  T860] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  974.235493][  T860] usb 4-1: device descriptor read/8, error -71
[  974.259152][   T24] usb 5-1: USB disconnect, device number 15
[  974.322728][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  974.419230][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5870'.
[  974.504821][  T860] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  974.545736][  T860] usb 4-1: device descriptor read/8, error -71
[  974.655314][  T860] usb usb4-port1: unable to enumerate USB device
[  975.294835][   T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  975.380185][T21375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  975.392860][T21375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.449602][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  975.459283][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.519681][   T24] usb 3-1: config 0 descriptor??
[  975.532184][   T24] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  975.582150][T21375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  975.604056][T21375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.782225][T21375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  975.813077][T21375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.944053][T21375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  975.964906][T21375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.288256][   T30] audit: type=1326 audit(1759236212.477:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.318790][T24622] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  976.357206][T21375] bridge_slave_1: left allmulticast mode
[  976.364481][T21375] bridge_slave_1: left promiscuous mode
[  976.371745][   T30] audit: type=1326 audit(1759236212.477:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.390751][T21375] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.429811][T21375] bridge_slave_0: left allmulticast mode
[  976.436305][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  976.440792][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  976.453187][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  976.463202][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  976.472491][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  976.482657][   T30] audit: type=1326 audit(1759236212.487:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.493634][T21375] bridge_slave_0: left promiscuous mode
[  976.505428][ T5959] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  976.519787][   T30] audit: type=1326 audit(1759236212.487:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.544315][   T30] audit: type=1326 audit(1759236212.487:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.575032][T21375] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.580550][   T24] gspca_stv06xx: I2C: Read error writing address: -71
[  976.592573][   T30] audit: type=1326 audit(1759236212.487:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.614831][    C0] vkms_vblank_simulate: vblank timer overrun
[  976.640707][   T24] usb 3-1: USB disconnect, device number 33
[  976.658757][   T30] audit: type=1326 audit(1759236212.487:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.681377][    C0] vkms_vblank_simulate: vblank timer overrun
[  976.716520][ T5959] usb 2-1: Using ep0 maxpacket: 16
[  976.720717][   T30] audit: type=1326 audit(1759236212.487:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.723613][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  976.763626][   T30] audit: type=1326 audit(1759236212.487:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.800078][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  976.832734][ T5959] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  976.850636][   T30] audit: type=1326 audit(1759236212.487:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24621 comm="syz.3.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac198eec9 code=0x7ffc0000
[  976.863820][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.934914][ T5959] usb 2-1: config 0 descriptor??
[  976.962537][ T5959] usbhid 2-1:0.0: can't add hid device: -22
[  976.970105][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  977.182710][ T5959] usb 2-1: USB disconnect, device number 36
[  977.528996][T21375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  977.541158][T21375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  977.551948][T21375] bond0 (unregistering): Released all slaves
[  977.567529][T21375] bond1 (unregistering): Released all slaves
[  978.492380][T24676] netlink: 'syz.3.5894': attribute type 3 has an invalid length.
[  978.500409][T24676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5894'.
[  978.675138][   T51] Bluetooth: hci1: command tx timeout
[  978.767397][T21375] hsr_slave_0: left promiscuous mode
[  978.778015][T21375] hsr_slave_1: left promiscuous mode
[  978.794864][T21375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  978.802364][T21375] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.821791][T21375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  978.950805][T21375] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.114902][ T5959] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  979.139295][T21375] veth1_vlan: left promiscuous mode
[  979.162547][T21375] veth0_vlan: left promiscuous mode
[  979.266329][ T5959] usb 2-1: device descriptor read/64, error -71
[  979.506052][ T5959] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  979.648203][ T5959] usb 2-1: device descriptor read/64, error -71
[  979.682836][T21375] pim6reg (unregistering): left allmulticast mode
[  979.747476][T21375] pimreg3 (unregistering): left allmulticast mode
[  979.765200][ T5959] usb usb2-port1: attempt power cycle
[  980.094939][  T860] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  980.120039][ T5959] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  980.151207][ T5959] usb 2-1: device descriptor read/8, error -71
[  980.223516][T21375] team0 (unregistering): Port device team_slave_1 removed
[  980.278699][  T860] usb 1-1: Using ep0 maxpacket: 32
[  980.284598][T21375] team0 (unregistering): Port device team_slave_0 removed
[  980.286482][  T860] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[  980.313336][  T860] usb 1-1: config 0 has no interface number 0
[  980.328431][  T860] usb 1-1: config 0 interface 23 has no altsetting 0
[  980.338101][  T860] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf
[  980.347779][  T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.360975][  T860] usb 1-1: Product: syz
[  980.367423][  T860] usb 1-1: Manufacturer: syz
[  980.372092][  T860] usb 1-1: SerialNumber: syz
[  980.384577][  T860] usb 1-1: config 0 descriptor??
[  980.405000][ T5959] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  980.436493][ T5959] usb 2-1: device descriptor read/8, error -71
[  980.560261][ T5959] usb usb2-port1: unable to enumerate USB device
[  980.765315][   T51] Bluetooth: hci1: command tx timeout
[  980.929612][T24685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5896'.
[  980.943266][T24685] tipc: Enabling <ib:lo> not permitted
[  980.949080][T24685] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  981.183483][T24632] chnl_net:caif_netlink_parms(): no params data found
[  981.503477][T21375] IPVS: stop unused estimator thread 0...
[  981.599169][T24632] bridge0: port 1(bridge_slave_0) entered blocking state
[  981.622421][T24632] bridge0: port 1(bridge_slave_0) entered disabled state
[  981.631364][T24632] bridge_slave_0: entered allmulticast mode
[  981.640602][T24632] bridge_slave_0: entered promiscuous mode
[  981.662195][T24737] ip6gretap1: entered allmulticast mode
[  981.675173][T24632] bridge0: port 2(bridge_slave_1) entered blocking state
[  981.692736][T24632] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.710944][T24632] bridge_slave_1: entered allmulticast mode
[  981.732136][T24632] bridge_slave_1: entered promiscuous mode
[  981.824884][T24632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  981.843303][T24632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  981.896557][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5905'.
[  981.958112][T24632] team0: Port device team_slave_0 added
[  981.977125][T24632] team0: Port device team_slave_1 added
[  981.984783][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  982.049344][T24632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  982.075623][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  982.101672][T24632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  982.119658][T24632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  982.130593][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  982.158228][   T24] usb 4-1: Using ep0 maxpacket: 32
[  982.229015][T24632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  982.243227][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  982.346983][T24753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5906'.
[  982.400703][   T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  982.423814][   T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  982.444915][   T24] usb 4-1: Product: syz
[  982.449113][   T24] usb 4-1: Manufacturer: syz
[  982.453787][   T24] usb 4-1: SerialNumber: syz
[  982.476395][   T24] usb 4-1: config 0 descriptor??
[  982.483242][T24741] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  982.568404][T24632] hsr_slave_0: entered promiscuous mode
[  982.612938][T24632] hsr_slave_1: entered promiscuous mode
[  982.643041][T24632] debugfs: 'hsr0' already exists in 'hsr'
[  982.656201][T24632] Cannot create hsr debugfs directory
[  982.722454][  T860] usb 1-1: USB disconnect, device number 26
[  982.808299][T24741] loop9: detected capacity change from 0 to 7
[  982.829191][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  982.841369][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  982.855687][   T51] Bluetooth: hci1: command tx timeout
[  982.962118][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  982.970439][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  982.981817][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.011022][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.020172][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.028643][T24741] ldm_validate_partition_table(): Disk read failed.
[  983.039078][   T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  983.046968][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.055309][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.063671][T24741] Buffer I/O error on dev loop9, logical block 0, async page read
[  983.070609][  T860] usb 4-1: USB disconnect, device number 25
[  983.100268][T24741] Dev loop9: unable to read RDB block 0
[  983.160236][T24741]  loop9: unable to read partition table
[  983.171915][T24741] loop9: partition table beyond EOD, truncated
[  983.192725][T24741] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  983.192725][T24741] 
) failed (rc=-5)
[  983.256703][   T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  983.289435][   T24] usb 3-1: config 0 has no interface number 0
[  983.318155][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  983.377234][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  983.413629][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.448712][   T24] usb 3-1: Product: syz
[  983.464028][   T24] usb 3-1: Manufacturer: syz
[  983.486075][   T24] usb 3-1: SerialNumber: syz
[  983.518521][   T24] usb 3-1: config 0 descriptor??
[  983.561320][   T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  983.848704][T24632] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  983.879523][T24632] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  983.927345][T24632] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  983.939765][   T24] usb 3-1: USB disconnect, device number 34
[  983.968910][   T24] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  983.970172][T24632] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  984.207645][T24632] 8021q: adding VLAN 0 to HW filter on device bond0
[  984.265892][T24632] 8021q: adding VLAN 0 to HW filter on device team0
[  984.293675][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  984.300901][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  984.396701][T10679] bridge0: port 2(bridge_slave_1) entered blocking state
[  984.403894][T10679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  984.652175][T24632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  984.713415][T24807] fuse: Unknown parameter 'group_i	'
[  984.735766][ T5902] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  984.805338][  T860] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  984.812528][T24632] veth0_vlan: entered promiscuous mode
[  984.841697][T24632] veth1_vlan: entered promiscuous mode
[  984.890565][T24632] veth0_macvtap: entered promiscuous mode
[  984.915310][   T51] Bluetooth: hci1: command tx timeout
[  984.920928][ T5902] usb 1-1: device descriptor read/64, error -71
[  984.926643][T24632] veth1_macvtap: entered promiscuous mode
[  984.966371][T24632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  984.995070][   T55] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  984.996416][  T860] usb 2-1: device descriptor read/64, error -71
[  985.076212][T24632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  985.107262][T10672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.128588][T10672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.136495][   T55] usb 4-1: device descriptor read/64, error -71
[  985.150130][T10672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  985.205053][ T5902] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  985.215746][T10672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  985.344932][  T860] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  985.352606][ T5902] usb 1-1: device descriptor read/64, error -71
[  985.395137][   T55] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  985.470348][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  985.488391][ T5902] usb usb1-port1: attempt power cycle
[  985.494181][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  985.527458][  T860] usb 2-1: device descriptor read/64, error -71
[  985.534882][   T55] usb 4-1: device descriptor read/64, error -71
[  985.582873][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  985.595414][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  985.655670][   T55] usb usb4-port1: attempt power cycle
[  985.674988][  T860] usb usb2-port1: attempt power cycle
[  985.845554][ T5902] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  985.915786][ T5902] usb 1-1: device descriptor read/8, error -71
[  985.995028][   T55] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  986.015380][   T55] usb 4-1: device descriptor read/8, error -71
[  986.092089][  T860] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  986.116601][  T860] usb 2-1: device descriptor read/8, error -71
[  986.165027][ T5902] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  986.168788][T24829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5921'.
[  986.187644][T24829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5921'.
[  986.189893][ T5902] usb 1-1: device descriptor read/8, error -71
[  986.213795][T24829] syz_tun: entered promiscuous mode
[  986.220639][T24829] syz_tun: left promiscuous mode
[  986.221602][T24831] deleting an unspecified loop device is not supported.
[  986.265054][   T55] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  986.286175][   T55] usb 4-1: device descriptor read/8, error -71
[  986.317100][ T5902] usb usb1-port1: unable to enumerate USB device
[  986.375549][  T860] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  986.401506][   T55] usb usb4-port1: unable to enumerate USB device
[  986.405641][  T860] usb 2-1: device descriptor read/8, error -71
[  986.420481][T24837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5924'.
[  986.535795][  T860] usb usb2-port1: unable to enumerate USB device
[  986.936161][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5935'.
[  987.275030][  T860] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  987.434812][  T860] usb 6-1: Using ep0 maxpacket: 32
[  987.442229][  T860] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  987.454693][  T860] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  987.463405][  T860] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  987.481767][  T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  987.507569][  T860] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  987.517550][  T860] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  987.531857][  T860] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  987.543966][  T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.574931][  T860] usb 6-1: config 0 descriptor??
[  987.639552][T24872] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5938'.
[  987.790305][  T860] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  987.817944][  T860] usb 6-1: USB disconnect, device number 2
[  987.842409][  T860] usblp0: removed
[  988.374779][  T860] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  988.560690][T24904] program syz.2.5950 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  988.614843][  T860] usb 6-1: Using ep0 maxpacket: 32
[  988.630009][  T860] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  988.651743][  T860] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  988.700557][  T860] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  988.738945][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  988.741915][  T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  988.771450][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  988.780968][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  988.791087][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  988.800796][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  988.805077][  T860] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  988.912770][  T860] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  988.979928][  T860] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  989.005961][  T860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.071914][  T860] usb 6-1: config 0 descriptor??
[  989.296792][  T860] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  989.865265][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  989.865283][   T30] audit: type=1800 audit(1759236226.037:797): pid=24925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5955" name="file1" dev="tmpfs" ino=2902 res=0 errno=0
[  989.928434][T24908] chnl_net:caif_netlink_parms(): no params data found
[  990.633921][  T860] usb 6-1: USB disconnect, device number 3
[  990.638536][T24940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  990.653831][  T860] usblp0: removed
[  990.927720][ T5857] Bluetooth: hci5: command tx timeout
[  991.263182][T24963] netlink: 'syz.2.5960': attribute type 13 has an invalid length.
[  992.401570][T10674] bond0 (unregistering): left promiscuous mode
[  992.425334][T10674] bond0 (unregistering): Released all slaves
[  992.789944][T24963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  993.012361][ T5857] Bluetooth: hci5: command tx timeout
[  993.157977][T24908] bridge0: port 1(bridge_slave_0) entered blocking state
[  993.195597][T24908] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.220803][T24908] bridge_slave_0: entered allmulticast mode
[  993.245228][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  993.251713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  993.279328][T24908] bridge_slave_0: entered promiscuous mode
[  993.341398][T24908] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.359566][T24908] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.374828][T24908] bridge_slave_1: entered allmulticast mode
[  993.418648][T24908] bridge_slave_1: entered promiscuous mode
[  993.585520][T25002] FAULT_INJECTION: forcing a failure.
[  993.585520][T25002] name failslab, interval 1, probability 0, space 0, times 0
[  993.607019][T25002] CPU: 0 UID: 0 PID: 25002 Comm: syz.5.5969 Not tainted syzkaller #0 PREEMPT(full) 
[  993.607044][T25002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  993.607056][T25002] Call Trace:
[  993.607064][T25002]  <TASK>
[  993.607073][T25002]  dump_stack_lvl+0x189/0x250
[  993.607101][T25002]  ? __pfx____ratelimit+0x10/0x10
[  993.607122][T25002]  ? __pfx_dump_stack_lvl+0x10/0x10
[  993.607143][T25002]  ? __pfx__printk+0x10/0x10
[  993.607166][T25002]  ? __pfx___might_resched+0x10/0x10
[  993.607189][T25002]  should_fail_ex+0x414/0x560
[  993.607220][T25002]  should_failslab+0xa8/0x100
[  993.607247][T25002]  __kmalloc_noprof+0xcb/0x4f0
[  993.607269][T25002]  ? __kasan_kmalloc+0x93/0xb0
[  993.607287][T25002]  ? nla_strdup+0x9d/0x140
[  993.607317][T25002]  nla_strdup+0x9d/0x140
[  993.607336][T25002]  nf_tables_newchain+0x1998/0x2900
[  993.607373][T25002]  ? __pfx_nf_tables_newchain+0x10/0x10
[  993.607429][T25002]  ? nfnl_pernet+0x23/0x240
[  993.607464][T25002]  ? __nla_parse+0x40/0x60
[  993.607488][T25002]  nfnetlink_rcv+0x1132/0x2520
[  993.607537][T25002]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  993.607570][T25002]  ? ref_tracker_free+0x63a/0x7d0
[  993.607616][T25002]  ? __netlink_deliver_tap+0x807/0x850
[  993.607636][T25002]  ? netlink_deliver_tap+0x2e/0x1b0
[  993.607670][T25002]  netlink_unicast+0x82c/0x9e0
[  993.607698][T25002]  ? __pfx_netlink_unicast+0x10/0x10
[  993.607718][T25002]  ? netlink_sendmsg+0x642/0xb30
[  993.607735][T25002]  ? skb_put+0x11b/0x210
[  993.607760][T25002]  netlink_sendmsg+0x805/0xb30
[  993.607789][T25002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.607813][T25002]  ? aa_sock_msg_perm+0xf1/0x1d0
[  993.607832][T25002]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  993.607853][T25002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  993.607873][T25002]  __sock_sendmsg+0x21c/0x270
[  993.607899][T25002]  ____sys_sendmsg+0x505/0x830
[  993.607927][T25002]  ? __pfx_____sys_sendmsg+0x10/0x10
[  993.607957][T25002]  ? import_iovec+0x74/0xa0
[  993.607980][T25002]  ___sys_sendmsg+0x21f/0x2a0
[  993.608005][T25002]  ? __pfx____sys_sendmsg+0x10/0x10
[  993.608062][T25002]  ? __fget_files+0x2a/0x420
[  993.608078][T25002]  ? __fget_files+0x3a0/0x420
[  993.608105][T25002]  __x64_sys_sendmsg+0x19b/0x260
[  993.608130][T25002]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  993.608162][T25002]  ? __pfx_ksys_write+0x10/0x10
[  993.608183][T25002]  ? rcu_is_watching+0x15/0xb0
[  993.608207][T25002]  ? do_syscall_64+0xbe/0x3b0
[  993.608230][T25002]  do_syscall_64+0xfa/0x3b0
[  993.608248][T25002]  ? lockdep_hardirqs_on+0x9c/0x150
[  993.608266][T25002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.608283][T25002]  ? clear_bhb_loop+0x60/0xb0
[  993.608309][T25002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.608327][T25002] RIP: 0033:0x7f7a1c18eec9
[  993.608343][T25002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  993.608359][T25002] RSP: 002b:00007f7a1cf5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  993.608378][T25002] RAX: ffffffffffffffda RBX: 00007f7a1c3e5fa0 RCX: 00007f7a1c18eec9
[  993.608391][T25002] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  993.608403][T25002] RBP: 00007f7a1cf5c090 R08: 0000000000000000 R09: 0000000000000000
[  993.608414][T25002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  993.608425][T25002] R13: 00007f7a1c3e6038 R14: 00007f7a1c3e5fa0 R15: 00007f7a1c50fa28
[  993.608455][T25002]  </TASK>
[  994.338479][T24908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  994.354245][T24908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  994.440594][T25013] ------------[ cut here ]------------
[  994.446495][T25013] WARNING: CPU: 0 PID: 25013 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50
[  994.455580][T25013] Modules linked in:
[  994.459493][T25013] CPU: 0 UID: 0 PID: 25013 Comm: syz.2.5972 Not tainted syzkaller #0 PREEMPT(full) 
[  994.470140][T25013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  994.483337][T25013] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  994.489615][T25013] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2f 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2f 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2f 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2f 7b ff 45 31 e4 4c 8b 7c 24 08 e9
[  994.509733][T25013] RSP: 0018:ffffc90004affa40 EFLAGS: 00010287
[  994.517235][T25013] RAX: ffffffff8242e645 RBX: 00000000f00003b1 RCX: 0000000000080000
[  994.526065][T25013] RDX: ffffc900125fd000 RSI: 0000000000000035 RDI: 0000000000000036
[  994.534408][T25013] RBP: ffffc90004affb10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  994.542763][T25013] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242db2c
[  994.551126][T25013] R13: dffffc0000000000 R14: ffff8880288df854 R15: 0000000000000000
[  994.559448][T25013] FS:  00007f6f6ce9a6c0(0000) GS:ffff88812637e000(0000) knlGS:0000000000000000
[  994.569383][T25013] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  994.576790][T25013] CR2: 0000200000000040 CR3: 000000005ba06000 CR4: 00000000003526f0
[  994.584863][T25013] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  994.592855][T25013] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  994.601116][T25013] Call Trace:
[  994.604407][T25013]  <TASK>
[  994.607385][T25013]  ? __pfx_nsfs_fh_to_dentry+0x10/0x10
[  994.612944][T25013]  exportfs_decode_fh_raw+0x178/0x6e0
[  994.618390][T25013]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[  994.625028][T25013]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[  994.631037][T25013]  do_handle_to_path+0xa4/0x1a0
[  994.635994][T25013]  do_handle_open+0x6b4/0x8f0
[  994.640694][T25013]  ? __pfx_do_handle_open+0x10/0x10
[  994.645960][T25013]  ? rcu_is_watching+0x15/0xb0
[  994.650743][T25013]  ? do_syscall_64+0xbe/0x3b0
[  994.655504][T25013]  do_syscall_64+0xfa/0x3b0
[  994.660690][T25013]  ? lockdep_hardirqs_on+0x9c/0x150
[  994.666534][T25013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.672619][T25013]  ? clear_bhb_loop+0x60/0xb0
[  994.677379][T25013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  994.683293][T25013] RIP: 0033:0x7f6f6bf8eec9
[  994.687908][T25013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  994.707594][T25013] RSP: 002b:00007f6f6ce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  994.716083][T25013] RAX: ffffffffffffffda RBX: 00007f6f6c1e5fa0 RCX: 00007f6f6bf8eec9
[  994.724074][T25013] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  994.732128][T25013] RBP: 00007f6f6c011f91 R08: 0000000000000000 R09: 0000000000000000
[  994.740158][T25013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  994.748195][T25013] R13: 00007f6f6c1e6038 R14: 00007f6f6c1e5fa0 R15: 00007f6f6c30fa28
[  994.756235][T25013]  </TASK>
[  994.759281][T25013] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  994.766621][T25013] CPU: 0 UID: 0 PID: 25013 Comm: syz.2.5972 Not tainted syzkaller #0 PREEMPT(full) 
[  994.775997][T25013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  994.786049][T25013] Call Trace:
[  994.789319][T25013]  <TASK>
[  994.792240][T25013]  dump_stack_lvl+0x99/0x250
[  994.796826][T25013]  ? __asan_memcpy+0x40/0x70
[  994.801406][T25013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  994.806591][T25013]  ? __pfx__printk+0x10/0x10
[  994.811181][T25013]  vpanic+0x281/0x750
[  994.815156][T25013]  ? __pfx__printk+0x10/0x10
[  994.819735][T25013]  ? __pfx_vpanic+0x10/0x10
[  994.824227][T25013]  ? is_bpf_text_address+0x26/0x2b0
[  994.829422][T25013]  panic+0xb9/0xc0
[  994.833136][T25013]  ? __pfx_panic+0x10/0x10
[  994.837553][T25013]  __warn+0x31b/0x4b0
[  994.841526][T25013]  ? nsfs_fh_to_dentry+0xc56/0xd50
[  994.846622][T25013]  ? nsfs_fh_to_dentry+0xc56/0xd50
[  994.851722][T25013]  report_bug+0x2be/0x4f0
[  994.856040][T25013]  ? nsfs_fh_to_dentry+0xc56/0xd50
[  994.861138][T25013]  ? nsfs_fh_to_dentry+0xc56/0xd50
[  994.866234][T25013]  ? nsfs_fh_to_dentry+0xc58/0xd50
[  994.871332][T25013]  handle_bug+0x84/0x160
[  994.875565][T25013]  exc_invalid_op+0x1a/0x50
[  994.880058][T25013]  asm_exc_invalid_op+0x1a/0x20
[  994.884891][T25013] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50
[  994.890595][T25013] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2f 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2f 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2f 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2f 7b ff 45 31 e4 4c 8b 7c 24 08 e9
[  994.910209][T25013] RSP: 0018:ffffc90004affa40 EFLAGS: 00010287
[  994.916265][T25013] RAX: ffffffff8242e645 RBX: 00000000f00003b1 RCX: 0000000000080000
[  994.924227][T25013] RDX: ffffc900125fd000 RSI: 0000000000000035 RDI: 0000000000000036
[  994.932183][T25013] RBP: ffffc90004affb10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  994.940159][T25013] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242db2c
[  994.948118][T25013] R13: dffffc0000000000 R14: ffff8880288df854 R15: 0000000000000000
[  994.956076][T25013]  ? nsfs_fh_to_dentry+0x13c/0xd50
[  994.961181][T25013]  ? nsfs_fh_to_dentry+0xc55/0xd50
[  994.966297][T25013]  ? __pfx_nsfs_fh_to_dentry+0x10/0x10
[  994.971759][T25013]  exportfs_decode_fh_raw+0x178/0x6e0
[  994.977126][T25013]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[  994.982925][T25013]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[  994.988837][T25013]  do_handle_to_path+0xa4/0x1a0
[  994.993679][T25013]  do_handle_open+0x6b4/0x8f0
[  994.998348][T25013]  ? __pfx_do_handle_open+0x10/0x10
[  995.003536][T25013]  ? rcu_is_watching+0x15/0xb0
[  995.008288][T25013]  ? do_syscall_64+0xbe/0x3b0
[  995.012958][T25013]  do_syscall_64+0xfa/0x3b0
[  995.017444][T25013]  ? lockdep_hardirqs_on+0x9c/0x150
[  995.022625][T25013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.028764][T25013]  ? clear_bhb_loop+0x60/0xb0
[  995.033433][T25013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.039312][T25013] RIP: 0033:0x7f6f6bf8eec9
[  995.043717][T25013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  995.063306][T25013] RSP: 002b:00007f6f6ce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  995.071711][T25013] RAX: ffffffffffffffda RBX: 00007f6f6c1e5fa0 RCX: 00007f6f6bf8eec9
[  995.079676][T25013] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  995.087638][T25013] RBP: 00007f6f6c011f91 R08: 0000000000000000 R09: 0000000000000000
[  995.095596][T25013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  995.103549][T25013] R13: 00007f6f6c1e6038 R14: 00007f6f6c1e5fa0 R15: 00007f6f6c30fa28
[  995.111521][T25013]  </TASK>
[  995.114809][T25013] Kernel Offset: disabled
[  995.119117][T25013] Rebooting in 86400 seconds..