last executing test programs:

26m49.43826158s ago: executing program 0 (id=4143):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x80000000000}, 0x18)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

26m49.232507352s ago: executing program 0 (id=4146):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10)
bind$can_raw(r1, &(0x7f00000002c0), 0x10)

26m43.652556298s ago: executing program 0 (id=4157):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x800c0}, 0x850)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = open(0x0, 0x40, 0x170)
fgetxattr(r2, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket(0x16, 0x3, 0x3a)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sched_getparam(0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

26m42.425289235s ago: executing program 0 (id=4161):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008001)

26m42.30484504s ago: executing program 0 (id=4164):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48)

26m38.589564042s ago: executing program 0 (id=4181):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000280), &(0x7f0000000540)={0x0, 0xfb, 0x101, 0x0, 0x8, "d6db7c0efcf26b03953b6080bfe7df53", "85329722214da9660a5e8f2a07093d278e3ad00e568bd76b5a21bbbe7f1a22ea29f99676711f4bd0fcba4a3683fd0b4f29bda11abdca39c8eccaacb88e460ac6ed44d1b06979cba3008dec13ec5a9328aee668cd3fe8154a7096a6f5fd251013d54054b7c50c12a81961010b5270618aa7047497a85f32370d3518a307b3605dff0634f0dbd88d9c6613e1aa8cc2a08556567d70eac8afcd432e87edd568b88c2a65204fcc3a46a7a6d70acdc46e0089f652badeb254ea5071e71ad6ba6e20cbee084586a76f406ff103ef810a603b489ecfacefede1e6719c62c24abc94a081d0700c0a5a6c31751c8a4539"}, 0x101, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[])
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)
syz_io_uring_setup(0x726c, &(0x7f0000000380)={0x0, 0x8ba8, 0x2, 0x1, 0x271}, &(0x7f0000000140), &(0x7f00000001c0))
syz_io_uring_setup(0x231, &(0x7f00000004c0)={0x0, 0x4e06, 0x10100, 0x3, 0x1}, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
socket$packet(0x11, 0x2, 0x300)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
unshare(0x2a020480)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x8, &(0x7f0000d06000)=0x1, 0x4)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0)
ioctl$TUNSETGROUP(r9, 0x400454ce, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r12 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8})
io_uring_register$IORING_REGISTER_FILES(r12, 0x1e, &(0x7f0000000000)=[r12], 0x1)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

26m23.30734913s ago: executing program 32 (id=4181):
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000280), &(0x7f0000000540)={0x0, 0xfb, 0x101, 0x0, 0x8, "d6db7c0efcf26b03953b6080bfe7df53", "85329722214da9660a5e8f2a07093d278e3ad00e568bd76b5a21bbbe7f1a22ea29f99676711f4bd0fcba4a3683fd0b4f29bda11abdca39c8eccaacb88e460ac6ed44d1b06979cba3008dec13ec5a9328aee668cd3fe8154a7096a6f5fd251013d54054b7c50c12a81961010b5270618aa7047497a85f32370d3518a307b3605dff0634f0dbd88d9c6613e1aa8cc2a08556567d70eac8afcd432e87edd568b88c2a65204fcc3a46a7a6d70acdc46e0089f652badeb254ea5071e71ad6ba6e20cbee084586a76f406ff103ef810a603b489ecfacefede1e6719c62c24abc94a081d0700c0a5a6c31751c8a4539"}, 0x101, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[])
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0)
syz_io_uring_setup(0x726c, &(0x7f0000000380)={0x0, 0x8ba8, 0x2, 0x1, 0x271}, &(0x7f0000000140), &(0x7f00000001c0))
syz_io_uring_setup(0x231, &(0x7f00000004c0)={0x0, 0x4e06, 0x10100, 0x3, 0x1}, &(0x7f0000000400)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
socket$packet(0x11, 0x2, 0x300)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
unshare(0x2a020480)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x8, &(0x7f0000d06000)=0x1, 0x4)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0)
ioctl$TUNSETGROUP(r9, 0x400454ce, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r12 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8})
io_uring_register$IORING_REGISTER_FILES(r12, 0x1e, &(0x7f0000000000)=[r12], 0x1)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

19m40.489789028s ago: executing program 5 (id=6357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a800000001a0a010400000000000000000a00"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

19m40.16023072s ago: executing program 5 (id=6362):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r4, 0xffffffffffffffff, 0x0)

19m39.815171424s ago: executing program 5 (id=6369):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r0 = dup(0xffffffffffffffff)
getsockname$packet(r0, 0x0, 0x0)

19m39.662576858s ago: executing program 5 (id=6372):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}}], 0x1, 0x40000)

19m39.59912777s ago: executing program 5 (id=6375):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
fcntl$setstatus(r0, 0x4, 0x42800)
unshare(0x2040400)
ppoll(&(0x7f000000e200)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)

19m38.679336338s ago: executing program 5 (id=6383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})

19m23.178361496s ago: executing program 33 (id=6383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})

15m48.754257375s ago: executing program 4 (id=7418):
unshare(0x6a040000)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002100010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0)

15m47.754411565s ago: executing program 4 (id=7429):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070687931000000000500"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)

15m47.596241038s ago: executing program 4 (id=7430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000100)=r1}, 0x20)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000000, 0x2)

15m47.158841561s ago: executing program 4 (id=7436):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x2, [@union={0x3, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x2, 0x6}, {0xd, 0x4, 0x2}, {0x6, 0x0, 0x40}, {0x6, 0x5, 0x800}, {0x3, 0x0, 0x10001}, {0x0, 0x5, 0x8}]}, @enum64={0x7, 0x4, 0x0, 0x13, 0x1, 0x0, [{0x5, 0x1, 0x6}, {0x4, 0x6, 0x80f1c379}, {0xe, 0xffffffff, 0x11}, {0x5, 0x9, 0x8}]}, @fwd={0xc}]}}, &(0x7f0000000000)=""/19, 0xb6, 0x13, 0x1}, 0x28)
socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x0, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

15m43.713306714s ago: executing program 4 (id=7443):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)

15m43.267129849s ago: executing program 4 (id=7446):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

15m27.302733667s ago: executing program 34 (id=7446):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

15m11.821234063s ago: executing program 1 (id=7564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xff71}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

15m11.637886151s ago: executing program 1 (id=7565):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x2}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x60000f5}, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15m10.595135247s ago: executing program 1 (id=7567):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe000000009c080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r2)
socket$xdp(0x2c, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x4, 0x0)

15m10.541998366s ago: executing program 1 (id=7569):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd86, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000140), 0x0}, 0x20)

15m9.050606055s ago: executing program 1 (id=7573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xff71}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

15m8.932231662s ago: executing program 1 (id=7576):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x140, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x110, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xec, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x319}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x14, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x8}, {0x7, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3, 0x0, 0xf}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0xffa8, 0x0, 0xfff7}, "1047bb2f2f0855d367134dcdca6a3200145551fb5a73251c8b86c1cc84a927cea87426259fdda8791c6d8080fc105c690c1bce2a9d0afe0d9131fb64dab7c00da96e1078fd"}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MASK={0x8, 0x6, 0xfe}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e2}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/199, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

14m53.795900483s ago: executing program 35 (id=7576):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x140, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x110, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xec, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x319}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x14, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x8}, {0x7, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3, 0x0, 0xf}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0xffa8, 0x0, 0xfff7}, "1047bb2f2f0855d367134dcdca6a3200145551fb5a73251c8b86c1cc84a927cea87426259fdda8791c6d8080fc105c690c1bce2a9d0afe0d9131fb64dab7c00da96e1078fd"}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MASK={0x8, 0x6, 0xfe}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e2}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/199, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

11m14.199659929s ago: executing program 2 (id=8642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0xa, 0x0, @val=@tcx}, 0x1c)

11m14.037511481s ago: executing program 2 (id=8645):
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x14, 0x2, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)

11m11.977623241s ago: executing program 2 (id=8659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x1c, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

11m11.806759249s ago: executing program 2 (id=8663):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4)

11m10.546499298s ago: executing program 2 (id=8669):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/220, 0xdc, 0x1, &(0x7f00000001c0)=""/174, 0xae}, &(0x7f00000002c0)=0x40)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, <r6=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$USERIO_CMD_REGISTER(r8, &(0x7f0000000100), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f00000000c0)={0x2, 0xfa}, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, 0x0, 0x0)
sendmsg$unix(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x6000010}, 0x4000010)
ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000700)={r6, 0xdf, 0x7, 0x6, 0x1, [], [0x7, 0x7, 0x8001, 0x5], [0x1, 0x4, 0x3, 0x6], [0x7, 0xf, 0x3, 0x2]})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x4b4, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@NL80211_ATTR_FRAME={0x459, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_b, @from_mac=@broadcast, @random="08aa56d0f33a", {0x3, 0x64}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x0, 0x1}}, @random="c963bcd30d138d0dba4d1a455b549307382a80b75ee633ac5e93f94e1dcc0f34d24ef05bacc08611f8d22f45a3d43da0eea720ecd9f81188bb4777550b86c57c579164494b6b2b50cda65ddd3b2814ac388a33b9d6c5956e262f7d5218aad4ecf6c72786d7889091d758fa692b62ff8c631efa117c9e60bfa5c661706703d19a456c1d8bfb5708988746f332e34d3b6764384ad94614b801ba93d72176a7b44857d7fe558fd4c6ad3c4d860ffdca1c2a0be903a9e1b131c445d57dd6a53e76e8ed55d12d6a630a120cfd978d348085546f9ce228120c3efd6c7086899078666df5080ea2982a71142aec1c6040057b349f04a72c9320250276c57327ac4c6daa205f8398ccb07e739ee2ee7b7bea12099702fa883e3ad7e5ff18e0edcd25ca7fe8ef26d7f31eee425ed593b48c975c4545e7529c3f615afdb4356dadd8b56d766a52baa8bf2e2985d7523c97665d4e9fe156ebae668361940758630c57550dd3637cd9391e49cbfc27838b6bfa09e6a51173ec9bb3bee8ca28674f25629420361c72b9529018597cd408018791a14c0070d9576ad2fefb3127cd2708e7d96857c55546e43e2bfb93ff837b488ad53a90346abe97f23e01cc4fa6a5df93a0bb4a305866da2132f7c50d59c942f69f42b5e0950ac4474c1351afc79b54cffd5daf1ff5ae4e0461eb967f071b648e2eb516c1384ad906b83c096c87567fc8946767436899a589d846435ef20165f35c5ce73288a1efc579c0e34a149255711a394b91204002b70aeca9019b0d8cd04359c8bd05280c3524a2cad1be9bb9ff1b83342ae284a30e78f163a70b0560e78c752b598e21b10ac854d058ac657607469818029d2af9c2f3901be2219dbe60ea5d45fee434371f52f6298f21d2a937093db8f302ce985b39cfe19d57acf3f9a0350edd3d5e924ba2a114c34b5e0c0d571da391d423a2d5fd4fc8d885ab6231fc85a1e2f80f1caad39a21c27dd594f35fc131585bf1952082cfd9254910d142932c1e682b69e37982f29c8c6fca3045c8398822fd20061c4fe59b98a3fa7ea10a65c2e769cef562bc62a52a5728910c42760dedc08edaaecd667857f296544ae4bf725046117b57ba9c8b19dbc9a7a36a44493d04b60b53d08ccde0e1a2c7d6f66ea8e87348520ef607581987259e0536b04ed1cba7c036a638cdb7ee1edbbe7b4f2339d10e18c4337a67281b33b1ad5436968adc27ed61883bf2b34728e1611950301afd26683499d89034c20e6ae42b6a453425bc27560d9454ff23d65f40934e839f469e0dfab63684160a0485a866169f6098e51dc17427796700e3c46a5cf6fffa7d838925379256203c9102b83ed0e81dbb312d6675cfc2a44ee8cf9dd904d3a445f6a454084df741746e736563ca4990227dfafcd2fec6a58df65bd291c8a9627a68f30417810c68bfabe2580a622a182d4e0c205d4f6228a6a0b36746d3ab78ac578018b09ab51ffcd22af4052ef0cbb72133ad4e80aae5e21dbf46e62025de47c9fe5867223b95"}}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xe}, @device_b, @device_a, @random="aea1a491cd1c", {0x6, 0xc}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x3b, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0)

11m9.780851076s ago: executing program 2 (id=8671):
unshare(0x6a040000)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x8}, 0x2c)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="1aa4d2541365787228f457aa7491f94b42bae988a3d342d1fb9f52dd6ac23dd83c6fd53672e226495d632589518692e46c2d1e69e24b17197575b9350c2e4f4d", 0x40, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000280)={r2, 0x97, &(0x7f00000001c0)=""/151})
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0xf}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

10m53.912840962s ago: executing program 36 (id=8671):
unshare(0x6a040000)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x8}, 0x2c)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="1aa4d2541365787228f457aa7491f94b42bae988a3d342d1fb9f52dd6ac23dd83c6fd53672e226495d632589518692e46c2d1e69e24b17197575b9350c2e4f4d", 0x40, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000280)={r2, 0x97, &(0x7f00000001c0)=""/151})
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0xf}, {@remote, 0x4e1d, 0x3}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

16.406346981s ago: executing program 3 (id=11561):
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

15.979802066s ago: executing program 3 (id=11565):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES16], 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x18, 0x20, 0x0, 0x0, {0x16}}, 0x28}}, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000052}, 0x80800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20044891}, 0x8880)
r7 = socket$inet(0x2, 0x0, 0x4)
sendmmsg$inet(r7, 0x0, 0x0, 0x4040880)

12.492530722s ago: executing program 6 (id=11582):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)

12.461430692s ago: executing program 3 (id=11583):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b10009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

11.037692972s ago: executing program 6 (id=11585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

10.783157126s ago: executing program 9 (id=11587):
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'macsec0\x00', 0xaf55})

10.756990517s ago: executing program 9 (id=11588):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0xb4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})

10.636204242s ago: executing program 6 (id=11590):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x127882, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
accept(r3, 0x0, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

7.975277464s ago: executing program 6 (id=11592):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/address_bits', 0x0, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
setpriority(0x2, 0xffffffffffffffff, 0x4d)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x1000)
r3 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x1})
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xe, 0x0, @thr={0x0, 0x0}})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003, 0x804})
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)

7.974874097s ago: executing program 3 (id=11593):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES16], 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x18, 0x20, 0x0, 0x0, {0x16}}, 0x28}}, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000052}, 0x80800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20044891}, 0x8880)
r8 = socket$inet(0x2, 0x0, 0x4)
sendmmsg$inet(r8, 0x0, 0x0, 0x4040880)

7.70443267s ago: executing program 9 (id=11594):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xf47, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

6.38878343s ago: executing program 8 (id=11595):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf", 0x56}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}], 0x2}, 0x40000022)

6.043258721s ago: executing program 8 (id=11596):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)

5.875457583s ago: executing program 7 (id=11598):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, 0x0)

5.803943887s ago: executing program 7 (id=11599):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000061ea877845055b6dbb25fa8f77"], 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0x55f, 0xd, 0x5, "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"})
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x4008}, {0x6, 0x0, 0x0, 0xffff0001}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b00)={0x20, 0x7, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$packet(0x11, 0xa, 0x300)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_open_dev$video(&(0x7f0000002c40), 0x0, 0x0)
unshare(0x20000600)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xbf9, 0x1000, 0x0, 0x7, 0x0, 0x2}, &(0x7f0000000ac0)={0x1f, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x8}, 0x0, 0x0, 0x0)
bind$inet6(r4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xa)
r6 = dup(r5)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x80001d00c0d1)
syz_emit_ethernet(0x49, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa000000000000000000000000ff020000000000000000000000000001fffc0e2200139078c4e349a5c7407bebfbb0bc00"/73], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20236c0000006c23015eaf297500adf008b221a1b42a8865f73583444067c9f5b84fd0603cb191780948b900e66394306bdfc375630f995d78a9a0b2dfc2b002306a1c43da8a0fe62e12727e063281bf7cbeee755efb768a7d5859111af5a49f753e5aaaf9cf3ae462a6807a3c81fa85919e"], &(0x7f0000000100)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "2152fb61b80838acced2625ebdca06c4740f8304da1ae0dccfa4eae861d5f8183144813f6dcc8af140df9ca4d56c32a777ec3f1b5559bff51530c6e42901a4931087889674c9307f95208f77e8794efaf8f9a7bfdce0fb6b6f97e9f962408703a01e5dc75eb87de655482f446a744b13dd900da96c32bd8a5541643586b0b7ccba825e525f48bd02911a3ff8c2e7ec630cbf037cfe0e5ccf9556ad447f86451fc1fb9a2e"}}}, 0x0)

5.351252439s ago: executing program 9 (id=11600):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}]}}, 0x0}, 0x0)

5.183393139s ago: executing program 6 (id=11601):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4.792718599s ago: executing program 8 (id=11602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000)

4.723830002s ago: executing program 3 (id=11603):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x4)
syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000200)=<r7=>0x0)
r8 = syz_io_uring_setup(0x28c, &(0x7f0000000300)={0x0, 0xf2f6, 0x1, 0x0, 0x100026}, &(0x7f0000000140)=<r9=>0x0, &(0x7f00000002c0))
syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0, 0xfffffffffffffd9b, 0x2})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000080)
sendmsg$key(r6, 0x0, 0x0)

4.341718299s ago: executing program 8 (id=11604):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80})
ioctl$sock_TIOCINQ(r2, 0x541b, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2404c0e4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94)
r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0)
r6 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x2000000000000, 0x0, 0x0, 0x1a, 0x1})
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000900)={0xe, @raw_data="fd2a1abcbc0c0c0cd528a380c06b07d4bdd15d314f85d633f432b2def770f1f3f372b6bfd97fc0b866b2c9fa6a4bc70c0de9cde2584f49e145d78302e37643955099f9f7d534b26eb3a670dedb9701c542f921d0790c39bd76ad925e53a96d084b3651bb82fcd84fa1a7de9267a0aae26d8232849f5f55dc8748e91f76e776c49b71e3eb9afd53b1b7a3fbc841b844b4e17b4f648fe4c6b3c47824512f01ad132f83e34a09c76649e663eaacd76b8582febf4531fe4f4d59b696574d958be9ba11b85b3179c6e04d"})

3.552666177s ago: executing program 9 (id=11605):
socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x11, 0x2, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
unshare(0x2c020400)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
io_uring_enter(r2, 0x2219, 0x7724, 0x50, 0x0, 0x0)

2.463160565s ago: executing program 7 (id=11606):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf", 0x56}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000002c0)=""/186, 0xba}], 0x2}, 0x40000022)

2.24217355s ago: executing program 7 (id=11607):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x5, 0x3ff, 0x9, 0x1}, 'syz1\x00', 0x11})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x140cc014)

2.11209638s ago: executing program 3 (id=11608):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba80102"], 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1})

1.983002001s ago: executing program 6 (id=11609):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff04)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)

1.707808467s ago: executing program 7 (id=11610):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

515.564474ms ago: executing program 8 (id=11611):
r0 = socket(0x2, 0x3, 0xff)
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000040)=0x3d)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0xf2, 0x7f, 0x4, 0x577, 0x130, 0x1, 0x625, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x4, 0x8, 0x7fffffff, 0x3}}, &(0x7f0000000100)=0xb0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

122.608338ms ago: executing program 9 (id=11612):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
syz_usb_connect(0x5, 0x2d, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)

87.714527ms ago: executing program 7 (id=11613):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES16], 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x18, 0x20, 0x0, 0x0, {0x16}}, 0x28}}, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000052}, 0x80800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20044891}, 0x8880)
r8 = socket$inet(0x2, 0x0, 0x4)
sendmmsg$inet(r8, 0x0, 0x0, 0x4040880)

0s ago: executing program 8 (id=11614):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)

kernel console output (not intermixed with test programs):

onfig 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.727308][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.779878][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.779909][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.782618][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.782645][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.828080][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.828110][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.831182][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.831208][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.833587][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.833612][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.896091][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.896111][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.898685][T20316] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2519.898704][T20316] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2519.906724][T20316] usb 10-1: New USB device found, idVendor=0e9c, idProduct=1b90, bcdDevice=83.00
[ 2519.906748][T20316] usb 10-1: New USB device strings: Mfr=211, Product=192, SerialNumber=233
[ 2519.906764][T20316] usb 10-1: Product: syz
[ 2519.906775][T20316] usb 10-1: Manufacturer: syz
[ 2519.906786][T20316] usb 10-1: SerialNumber: syz
[ 2519.982269][T20316] usb 10-1: config 0 descriptor??
[ 2519.984771][ T5395] netlink: 'syz.7.10927': attribute type 8 has an invalid length.
[ 2520.086747][ T5401] netlink: 27 bytes leftover after parsing attributes in process `syz.6.10929'.
[ 2520.213869][T20316] usb 10-1: USB disconnect, device number 38
[ 2520.333370][ T5413] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10933'.
[ 2520.843062][   T38] kauditd_printk_skb: 15 callbacks suppressed
[ 2520.843084][   T38] audit: type=1326 audit(1760304130.894:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.847661][   T38] audit: type=1326 audit(1760304130.904:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.848113][   T38] audit: type=1326 audit(1760304130.904:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.848535][   T38] audit: type=1326 audit(1760304130.904:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.848985][   T38] audit: type=1326 audit(1760304130.904:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.849515][   T38] audit: type=1326 audit(1760304130.904:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.850151][   T38] audit: type=1326 audit(1760304130.904:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.850703][   T38] audit: type=1326 audit(1760304130.904:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.852113][   T38] audit: type=1326 audit(1760304130.904:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2520.852814][   T38] audit: type=1326 audit(1760304130.904:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5421 comm="syz.7.10938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b3ce5eec9 code=0x7ffc0000
[ 2521.086847][T20303] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 2521.246039][T20303] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2521.246083][T20303] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2521.246114][T20303] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2521.246131][T20303] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2521.250107][T20303] usb 10-1: config 0 descriptor??
[ 2521.257925][T20303] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 2521.788448][T20316] usb 10-1: USB disconnect, device number 39
[ 2522.083208][ T5453] input: syz1 as /devices/virtual/input/input93
[ 2522.313363][ T5462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2522.328217][ T5462] syzkaller0: entered promiscuous mode
[ 2522.328246][ T5462] syzkaller0: entered allmulticast mode
[ 2522.333107][ T5462] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 2522.382446][ T5462] tipc: Resetting bearer <eth:syzkaller0>
[ 2522.423519][ T5461] tipc: Resetting bearer <eth:syzkaller0>
[ 2522.434174][T20303] usb 9-1: new full-speed USB device number 36 using dummy_hcd
[ 2522.488057][ T5466] ptrace attach of "./syz-executor exec"[31194] was attempted by "./syz-executor exec"[5466]
[ 2522.616587][T20303] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2522.616620][T20303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2522.622166][T20303] usb 9-1: config 0 descriptor??
[ 2522.650609][T20303] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2522.663706][ T5461] tipc: Disabling bearer <eth:syzkaller0>
[ 2522.886811][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10953'.
[ 2522.916185][ T5458] program syz.8.10953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2524.104178][ T4484] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 2525.465251][T20303] gp8psk: usb in 128 operation failed.
[ 2525.476917][T20303] gp8psk: usb in 137 operation failed.
[ 2525.476943][T20303] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2525.476990][T20303] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2525.557610][ T5898] usb 9-1: USB disconnect, device number 36
[ 2525.626978][ T4484] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2526.884142][ T2954] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 2527.046463][ T2954] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2527.046493][ T2954] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2527.046534][ T2954] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2527.046552][ T2954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2527.053703][ T2954] usb 7-1: config 0 descriptor??
[ 2527.110360][ T2954] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2527.454185][ T5898] usb 9-1: new full-speed USB device number 37 using dummy_hcd
[ 2527.611215][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2527.611664][ T5898] usb 9-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[ 2527.611693][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2527.635185][ T5898] usb 9-1: config 0 descriptor??
[ 2527.639600][ T5549] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 2528.118476][ T5898] usbhid 9-1:0.0: can't add hid device: -71
[ 2528.119858][ T5898] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2528.159379][ T5898] usb 9-1: USB disconnect, device number 37
[ 2529.134156][ T5898] usb 9-1: new full-speed USB device number 38 using dummy_hcd
[ 2529.350613][ T5898] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2529.350634][ T5898] usb 9-1: config 0 has no interfaces?
[ 2529.358727][ T5898] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2529.359010][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2529.359048][ T5898] usb 9-1: Product: syz
[ 2529.359067][ T5898] usb 9-1: Manufacturer: syz
[ 2529.359095][ T5898] usb 9-1: SerialNumber: syz
[ 2529.382545][ T5898] usb 9-1: config 0 descriptor??
[ 2529.760276][ T2954] usb 9-1: USB disconnect, device number 38
[ 2529.957349][T20316] usb 7-1: USB disconnect, device number 31
[ 2530.207348][ T4484] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2530.207372][ T4484] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2530.207396][ T4484] usb 10-1: Product: syz
[ 2530.207407][ T4484] usb 10-1: Manufacturer: syz
[ 2530.211143][ T4484] usb 10-1: config 0 descriptor??
[ 2530.211704][ T4484] usb 10-1: can't set config #0, error -71
[ 2530.252584][ T4484] usb 10-1: USB disconnect, device number 40
[ 2530.354532][ T5586] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11011'.
[ 2530.443435][ T5595] fuse: Bad value for 'fd'
[ 2530.584141][ T5898] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 2530.736823][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2530.740321][ T5898] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2530.740354][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2530.740376][ T5898] usb 8-1: Product: syz
[ 2530.740392][ T5898] usb 8-1: Manufacturer: syz
[ 2530.740407][ T5898] usb 8-1: SerialNumber: syz
[ 2530.756726][ T5898] usb 8-1: config 0 descriptor??
[ 2530.758580][ T4484] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 2530.841285][ T5612] netlink: 'syz.8.11022': attribute type 10 has an invalid length.
[ 2530.917769][ T4484] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2530.917858][ T4484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2530.937215][ T4484] usb 7-1: config 0 descriptor??
[ 2530.957488][ T4484] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2531.025353][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11025'.
[ 2531.211729][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11015'.
[ 2531.231446][ T5597] program syz.6.11015 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2531.295956][T20303] usb 8-1: USB disconnect, device number 39
[ 2531.643303][ T5641] netlink: 'syz.8.11033': attribute type 12 has an invalid length.
[ 2531.643327][ T5641] netlink: 'syz.8.11033': attribute type 29 has an invalid length.
[ 2531.643343][ T5641] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11033'.
[ 2531.897003][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11036'.
[ 2532.081456][ T4484] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2532.081489][ T4484] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2532.434568][T20316] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 2532.586775][T20316] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2532.586929][T20316] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2532.586976][T20316] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2532.587001][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.637394][T20316] usb 9-1: config 0 descriptor??
[ 2532.655740][T20316] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 2532.816457][ T4484] usb 7-1: USB disconnect, device number 32
[ 2532.939235][ T5656] syzkaller0: entered promiscuous mode
[ 2533.156671][T20303] usb 9-1: USB disconnect, device number 39
[ 2533.625688][ T5689] netlink: 'syz.6.11055': attribute type 10 has an invalid length.
[ 2533.625729][ T5689] macvlan1: entered allmulticast mode
[ 2533.630893][ T5689] team0: Port device macvlan1 added
[ 2533.686103][ T5693] netlink: 'syz.9.11057': attribute type 12 has an invalid length.
[ 2533.686127][ T5693] netlink: 'syz.9.11057': attribute type 29 has an invalid length.
[ 2533.686143][ T5693] netlink: 148 bytes leftover after parsing attributes in process `syz.9.11057'.
[ 2533.900570][ T5702] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11060'.
[ 2534.067735][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2534.450170][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 2535.063094][ T5758] fuse: Invalid rootmode
[ 2535.199137][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2535.434138][ T4484] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 2535.594128][ T4484] usb 9-1: Using ep0 maxpacket: 8
[ 2535.602885][ T4484] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2535.602918][ T4484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2535.602939][ T4484] usb 9-1: Product: syz
[ 2535.602955][ T4484] usb 9-1: Manufacturer: syz
[ 2535.602970][ T4484] usb 9-1: SerialNumber: syz
[ 2535.638915][ T4484] usb 9-1: config 0 descriptor??
[ 2535.664732][ T4484] gspca_main: se401-2.14.0 probing 047d:5003
[ 2535.913670][   T38] kauditd_printk_skb: 8 callbacks suppressed
[ 2535.913690][   T38] audit: type=1326 audit(1760304145.964:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2535.914165][   T38] audit: type=1326 audit(1760304145.964:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2535.970668][   T38] audit: type=1326 audit(1760304146.024:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2535.970836][   T38] audit: type=1326 audit(1760304146.024:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.088716][   T38] audit: type=1326 audit(1760304146.144:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.095216][   T38] audit: type=1326 audit(1760304146.144:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.098945][   T38] audit: type=1326 audit(1760304146.154:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.101953][   T38] audit: type=1326 audit(1760304146.154:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.112685][   T38] audit: type=1326 audit(1760304146.164:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.116727][   T38] audit: type=1326 audit(1760304146.164:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5777 comm="syz.9.11094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2536.875112][ T4484] usb 9-1: reset high-speed USB device number 40 using dummy_hcd
[ 2536.956878][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2537.094441][ T4484] usb 9-1: device descriptor read/64, error -32
[ 2537.404121][ T4484] usb 9-1: reset high-speed USB device number 40 using dummy_hcd
[ 2537.534496][ T4484] usb 9-1: device descriptor read/64, error -32
[ 2537.696961][ T5814] raw-gadget.0 gadget.8: fail, usb_ep_queue returned -108
[ 2537.796036][ T4484] usb 9-1: reset high-speed USB device number 40 using dummy_hcd
[ 2537.856784][ T4484] usb 9-1: device descriptor read/8, error -32
[ 2538.094159][ T4484] usb 9-1: reset high-speed USB device number 40 using dummy_hcd
[ 2538.168037][ T4484] usb 9-1: device descriptor read/8, error -32
[ 2538.315526][ T4484] gspca_se401: read req failed req 0x06 error -19
[ 2538.321784][ T5898] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[ 2538.321811][ T5898] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[ 2538.321830][ T5898] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[ 2538.322540][ T4484] usb 9-1: USB disconnect, device number 40
[ 2538.332165][ T4484] raw-gadget.0 gadget.8: failed to queue reset event
[ 2538.332938][ T5898] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1
[ 2538.467850][ T5834] raw-gadget.0 gadget.8: failed to queue disconnect event
[ 2539.136896][ T5872] ptrace attach of "./syz-executor exec"[29654] was attempted by "./syz-executor exec"[5872]
[ 2539.518374][T20316] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0
[ 2539.518596][T20316] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0
[ 2539.518628][T20316] hid-generic 0003:0004:0000.0034: unknown main item tag 0x0
[ 2539.521337][T20316] hid-generic 0003:0004:0000.0034: hidraw0: USB HID v0.00 Device [syz0] on syz1
[ 2539.663889][ T5835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2539.671354][ T5836] syzkaller0: entered promiscuous mode
[ 2539.671383][ T5836] syzkaller0: entered allmulticast mode
[ 2539.814122][T20316] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 2539.866197][ T5854] tipc: Resetting bearer <eth:syzkaller0>
[ 2539.979706][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2539.997847][T20316] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2539.997911][T20316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2539.999347][T20316] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2539.999376][T20316] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2539.999391][T20316] usb 9-1: Manufacturer: syz
[ 2540.003824][T20316] usb 9-1: config 0 descriptor??
[ 2540.023865][ T5854] tipc: Disabling bearer <eth:syzkaller0>
[ 2540.124256][T20316] rc_core: IR keymap rc-hauppauge not found
[ 2540.124280][T20316] Registered IR keymap rc-empty
[ 2540.125945][T20316] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 2540.129348][T20316] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input94
[ 2540.301838][    C1] igorplugusb 9-1:0.0: Error: urb status = -32
[ 2540.320441][T20316] usb 9-1: USB disconnect, device number 42
[ 2540.339533][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11149'.
[ 2540.664480][ T2954] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[ 2540.789456][ T5928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2540.800207][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2540.802835][ T5928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2540.810582][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2540.814663][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2540.824158][ T2954] usb 8-1: Using ep0 maxpacket: 8
[ 2540.874867][ T2954] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2540.874902][ T2954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2540.874923][ T2954] usb 8-1: Product: syz
[ 2540.874940][ T2954] usb 8-1: Manufacturer: syz
[ 2540.874955][ T2954] usb 8-1: SerialNumber: syz
[ 2540.913343][ T2954] usb 8-1: config 0 descriptor??
[ 2540.920803][ T2954] gspca_main: se401-2.14.0 probing 047d:5003
[ 2540.961636][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2541.205483][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2541.333870][ T2954] gspca_se401: write req failed req 0x57 val 0x00 error -71
[ 2541.336172][ T2954] se401 8-1:0.0: probe with driver se401 failed with error -71
[ 2541.395363][ T2954] usb 8-1: USB disconnect, device number 40
[ 2542.000287][ T5945] ptrace attach of "./syz-executor exec"[29654] was attempted by "\x09   
                   Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        net/if_inet6"[5945]
[ 2542.274199][ T2954] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 2542.436329][ T2954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2542.438456][ T2954] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2542.438478][ T2954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2542.438493][ T2954] usb 7-1: Product: syz
[ 2542.438504][ T2954] usb 7-1: Manufacturer: syz
[ 2542.438515][ T2954] usb 7-1: SerialNumber: syz
[ 2542.443927][ T2954] usb 7-1: config 0 descriptor??
[ 2542.775475][ T5952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2542.776342][ T5953] syzkaller0: entered promiscuous mode
[ 2542.776367][ T5953] syzkaller0: entered allmulticast mode
[ 2542.859160][ T5925] lo speed is unknown, defaulting to 1000
[ 2542.953737][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2542.964622][ T2954] usb 7-1: USB disconnect, device number 33
[ 2542.977902][T11275] Bluetooth: hci2: command tx timeout
[ 2543.188022][ T5950] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) !
[ 2543.271980][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2543.284206][ T4946] usb 10-1: new full-speed USB device number 41 using dummy_hcd
[ 2543.323343][ T5951] tipc: Resetting bearer <eth:syzkaller0>
[ 2543.344797][ T5949] tipc: Resetting bearer <eth:syzkaller0>
[ 2543.452267][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2543.509669][ T5949] tipc: Disabling bearer <eth:syzkaller0>
[ 2543.517691][ T4946] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2543.517731][ T4946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2543.534283][ T4946] usb 10-1: config 0 descriptor??
[ 2543.542586][ T4946] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2543.706828][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11162'.
[ 2543.742497][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11159'.
[ 2543.810744][ T5970] program syz.9.11159 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2543.932772][ T5975] fuse: Bad value for 'rootmode'
[ 2544.114813][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2544.254183][ T4484] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[ 2544.343422][ T4946] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2544.343455][ T4946] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2544.404130][ T4484] usb 8-1: Using ep0 maxpacket: 8
[ 2544.422435][ T4484] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2544.422468][ T4484] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2544.422491][ T4484] usb 8-1: Product: syz
[ 2544.422503][ T4484] usb 8-1: Manufacturer: syz
[ 2544.422514][ T4484] usb 8-1: SerialNumber: syz
[ 2544.428559][ T4484] usb 8-1: config 0 descriptor??
[ 2544.469389][ T4484] gspca_main: se401-2.14.0 probing 047d:5003
[ 2544.904990][ T4484] gspca_se401: write req failed req 0x57 val 0x00 error -71
[ 2544.905098][ T4484] se401 8-1:0.0: probe with driver se401 failed with error -71
[ 2544.908177][ T4484] usb 8-1: USB disconnect, device number 41
[ 2545.005310][T11275] Bluetooth: hci2: command tx timeout
[ 2545.052837][ T5925] chnl_net:caif_netlink_parms(): no params data found
[ 2545.208940][ T5898] usb 10-1: USB disconnect, device number 41
[ 2545.314328][ T5997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2545.330666][ T5994] syzkaller0: entered promiscuous mode
[ 2545.330699][ T5994] syzkaller0: entered allmulticast mode
[ 2545.362998][T16224] bridge_slave_1: left allmulticast mode
[ 2545.363031][T16224] bridge_slave_1: left promiscuous mode
[ 2545.363298][T16224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2545.415998][T16224] bridge_slave_0: left allmulticast mode
[ 2545.416031][T16224] bridge_slave_0: left promiscuous mode
[ 2545.416297][T16224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2545.748029][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2545.892030][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2546.075550][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2546.211857][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2546.265977][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2546.477872][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2546.527076][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11175'.
[ 2547.084247][T11275] Bluetooth: hci2: command tx timeout
[ 2548.664848][T16224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2548.724813][T16224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2548.775367][T16224] bond0 (unregistering): Released all slaves
[ 2548.957998][ T6007] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2548.958470][ T6013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2548.984396][ T5993] tipc: Resetting bearer <eth:syzkaller0>
[ 2549.146134][ T5993] tipc: Disabling bearer <eth:syzkaller0>
[ 2549.164153][T11275] Bluetooth: hci2: command tx timeout
[ 2549.200955][   T38] kauditd_printk_skb: 3 callbacks suppressed
[ 2549.200975][   T38] audit: type=1326 audit(1760304159.254:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.201414][   T38] audit: type=1326 audit(1760304159.254:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.201771][   T38] audit: type=1326 audit(1760304159.254:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.202155][   T38] audit: type=1326 audit(1760304159.254:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.202518][   T38] audit: type=1326 audit(1760304159.254:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.202886][   T38] audit: type=1326 audit(1760304159.254:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.203455][   T38] audit: type=1326 audit(1760304159.254:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.203843][   T38] audit: type=1326 audit(1760304159.254:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.386064][   T38] audit: type=1326 audit(1760304159.444:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.386593][   T38] audit: type=1326 audit(1760304159.444:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.9.11176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2549.475352][ T6015] syzkaller0: entered promiscuous mode
[ 2549.475385][ T6015] syzkaller0: entered allmulticast mode
[ 2549.481814][T16224] tipc: Left network mode
[ 2549.686599][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2549.686740][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2549.686998][ T5925] bridge_slave_0: entered allmulticast mode
[ 2549.690303][ T5925] bridge_slave_0: entered promiscuous mode
[ 2549.769042][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11178'.
[ 2549.974249][ T4484] tipc: Node number set to 1212836414
[ 2550.059891][ T6015] tipc: Resetting bearer <eth:syzkaller0>
[ 2550.216226][ T6015] tipc: Disabling bearer <eth:syzkaller0>
[ 2550.314094][ T4946] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 2550.338674][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2550.338917][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2550.339133][ T5925] bridge_slave_1: entered allmulticast mode
[ 2550.341153][ T5925] bridge_slave_1: entered promiscuous mode
[ 2550.436859][ T6051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2550.464080][ T4946] usb 9-1: Using ep0 maxpacket: 8
[ 2550.470646][ T4946] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2550.470680][ T4946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2550.470699][ T4946] usb 9-1: Product: syz
[ 2550.470710][ T4946] usb 9-1: Manufacturer: syz
[ 2550.470722][ T4946] usb 9-1: SerialNumber: syz
[ 2550.479562][ T4946] usb 9-1: config 0 descriptor??
[ 2550.517195][ T4946] gspca_main: se401-2.14.0 probing 047d:5003
[ 2550.715003][ T6052] syzkaller0: entered promiscuous mode
[ 2550.715094][ T6052] syzkaller0: entered allmulticast mode
[ 2551.044019][ T6050] tipc: Resetting bearer <eth:syzkaller0>
[ 2551.111939][ T6071] input: syz1 as /devices/virtual/input/input95
[ 2551.174149][T20303] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 2551.192032][ T4946] gspca_se401: write req failed req 0x57 val 0x00 error -71
[ 2551.192135][ T4946] se401 9-1:0.0: probe with driver se401 failed with error -71
[ 2551.196130][ T4946] usb 9-1: USB disconnect, device number 43
[ 2551.234356][ T6048] tipc: Resetting bearer <eth:syzkaller0>
[ 2551.362741][T20303] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2551.362823][T20303] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2551.362880][T20303] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2551.362913][T20303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2551.377082][ T6048] tipc: Disabling bearer <eth:syzkaller0>
[ 2551.420467][T20303] usb 7-1: config 0 descriptor??
[ 2551.433661][T20303] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2551.671541][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2551.702269][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2551.703664][ T6066] syzkaller0: entered promiscuous mode
[ 2552.004379][T16224] hsr_slave_0: left promiscuous mode
[ 2552.052956][T16224] hsr_slave_1: left promiscuous mode
[ 2552.059631][T16224] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2552.086197][T16224] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2552.105133][T16224] batman_adv: batadv0: Interface deactivated: dummy0
[ 2552.105165][T16224] batman_adv: batadv0: Removing interface: dummy0
[ 2554.005029][T16224] team0 (unregistering): Port device macvlan1 removed
[ 2557.907564][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11201'.
[ 2558.114785][T16224] team0 (unregistering): Port device team_slave_1 removed
[ 2558.224199][T20303] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 2558.374140][T20303] usb 9-1: Using ep0 maxpacket: 8
[ 2558.379557][T20303] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2558.379590][T20303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2558.379612][T20303] usb 9-1: Product: syz
[ 2558.379623][T20303] usb 9-1: Manufacturer: syz
[ 2558.379634][T20303] usb 9-1: SerialNumber: syz
[ 2558.383763][T20303] usb 9-1: config 0 descriptor??
[ 2558.414895][T20303] gspca_main: se401-2.14.0 probing 047d:5003
[ 2558.435498][T16224] team0 (unregistering): Port device team_slave_0 removed
[ 2559.184091][T20303] gspca_se401: write req failed req 0x57 val 0x00 error -71
[ 2559.184202][T20303] se401 9-1:0.0: probe with driver se401 failed with error -71
[ 2559.188090][T20303] usb 9-1: USB disconnect, device number 44
[ 2562.314934][T20303] usb 7-1: USB disconnect, device number 34
[ 2562.418655][ T6112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2562.419120][ T6113] syzkaller0: entered promiscuous mode
[ 2562.419147][ T6113] syzkaller0: entered allmulticast mode
[ 2562.451428][ T5925] team0: Port device team_slave_0 added
[ 2562.804375][ T6110] tipc: Resetting bearer <eth:syzkaller0>
[ 2563.055092][ T6110] tipc: Disabling bearer <eth:syzkaller0>
[ 2564.096674][ T6172] input: syz0 as /devices/virtual/input/input96
[ 2564.233203][ T5925] team0: Port device team_slave_1 added
[ 2566.040821][ T6183] fuse: Unknown parameter 'user_id00000000000000000000'
[ 2566.247909][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2566.247923][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2566.247945][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2566.257865][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2566.257886][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2566.257921][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2566.423191][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11226'.
[ 2567.396724][ T6200] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2567.466968][ T5925] hsr_slave_0: entered promiscuous mode
[ 2567.482655][ T5925] hsr_slave_1: entered promiscuous mode
[ 2568.680210][ T6222] netlink: 'syz.9.11234': attribute type 8 has an invalid length.
[ 2568.944599][ T6219] veth1_vlan: left allmulticast mode
[ 2569.044987][ T6226] fuse: Bad value for 'fd'
[ 2569.814123][T20303] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 2569.976209][T20303] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2569.976252][T20303] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2569.976284][T20303] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2569.976302][T20303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2570.082026][T20303] usb 9-1: config 0 descriptor??
[ 2570.125346][T20303] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 2570.258667][ T6251] netlink: 312 bytes leftover after parsing attributes in process `syz.9.11243'.
[ 2571.028694][ T6250] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2571.161820][ T6262] netlink: 'syz.6.11244': attribute type 8 has an invalid length.
[ 2572.176385][T20303] usb 9-1: USB disconnect, device number 45
[ 2572.453734][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2573.487246][ T5925] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2573.548815][ T5925] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2574.064162][ T5925] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2574.446522][ T5925] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2575.264992][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2575.320131][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[ 2575.357052][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2575.357294][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2575.428892][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2575.429397][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2576.264099][T20303] usb 9-1: new full-speed USB device number 46 using dummy_hcd
[ 2576.271678][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2576.401396][ T5925] veth0_vlan: entered promiscuous mode
[ 2576.417375][T20303] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2576.417403][T20303] usb 9-1: config 0 has no interfaces?
[ 2576.420923][T20303] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2576.420952][T20303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2576.420974][T20303] usb 9-1: Product: syz
[ 2576.420990][T20303] usb 9-1: Manufacturer: syz
[ 2576.421006][T20303] usb 9-1: SerialNumber: syz
[ 2576.443854][ T5925] veth1_vlan: entered promiscuous mode
[ 2576.488599][T20303] usb 9-1: config 0 descriptor??
[ 2576.544087][ T5925] veth0_macvtap: entered promiscuous mode
[ 2576.562817][ T5925] veth1_macvtap: entered promiscuous mode
[ 2576.622297][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2576.707008][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2576.710198][ T2954] usb 9-1: USB disconnect, device number 46
[ 2576.754257][   T38] audit: type=1326 audit(1760304186.794:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.755855][   T38] audit: type=1326 audit(1760304186.814:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.817817][T16224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2576.872847][T16224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2576.873584][T16224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2576.875425][T16224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2576.879933][   T38] audit: type=1326 audit(1760304186.924:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.880345][   T38] audit: type=1326 audit(1760304186.934:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.880835][   T38] audit: type=1326 audit(1760304186.934:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.881569][   T38] audit: type=1326 audit(1760304186.934:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.882117][   T38] audit: type=1326 audit(1760304186.934:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.883133][   T38] audit: type=1326 audit(1760304186.934:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.883711][   T38] audit: type=1326 audit(1760304186.934:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2576.885685][   T38] audit: type=1326 audit(1760304186.944:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.9.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2578.025366][ T2185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2578.025384][ T2185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2578.117743][ T2185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2578.117767][ T2185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2578.411629][ T6329] netlink: 'syz.3.11148': attribute type 1 has an invalid length.
[ 2578.411656][ T6329] netlink: 'syz.3.11148': attribute type 4 has an invalid length.
[ 2578.411673][ T6329] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11148'.
[ 2578.494071][ T4484] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 2578.626287][ T4484] usb 9-1: device descriptor read/64, error -71
[ 2578.805014][ T6335] tipc: Started in network mode
[ 2578.805049][ T6335] tipc: Node identity 4a1680d2fa15, cluster identity 4711
[ 2578.805274][ T6335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2578.839395][ T6335] syzkaller0: entered promiscuous mode
[ 2578.839427][ T6335] syzkaller0: entered allmulticast mode
[ 2578.894160][ T4484] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 2578.972501][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2579.054105][ T4484] usb 9-1: device descriptor read/64, error -71
[ 2579.164561][ T4484] usb usb9-port1: attempt power cycle
[ 2579.209139][ T6337] tipc: Resetting bearer <eth:syzkaller0>
[ 2579.306743][ T6334] tipc: Resetting bearer <eth:syzkaller0>
[ 2579.472773][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2579.575141][ T6334] tipc: Disabling bearer <eth:syzkaller0>
[ 2579.585247][ T4484] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 2579.604892][ T4484] usb 9-1: device descriptor read/8, error -71
[ 2579.857958][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2579.860224][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2579.874213][ T4484] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 2579.890166][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2579.897433][ T4484] usb 9-1: device descriptor read/8, error -71
[ 2579.925967][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2579.926911][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2579.941062][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2580.004131][ T2954] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 2580.008747][ T4484] usb usb9-port1: unable to enumerate USB device
[ 2580.169443][ T2954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2580.169502][ T2954] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2580.169538][ T2954] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2580.169558][ T2954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2580.236673][ T2954] usb 10-1: config 0 descriptor??
[ 2580.258506][ T2954] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 2580.366965][ T4946] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[ 2580.544087][ T4946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2580.544117][ T4946] usb 4-1: config 0 has no interfaces?
[ 2580.573868][ T4946] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2580.573899][ T4946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2580.583080][ T4946] usb 4-1: Product: syz
[ 2580.583106][ T4946] usb 4-1: Manufacturer: syz
[ 2580.583123][ T4946] usb 4-1: SerialNumber: syz
[ 2580.613541][ T4946] usb 4-1: config 0 descriptor??
[ 2580.663699][ T6342] lo speed is unknown, defaulting to 1000
[ 2580.801482][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2580.827067][ T5898] usb 4-1: USB disconnect, device number 106
[ 2581.038348][T20316] usb 10-1: USB disconnect, device number 42
[ 2581.096846][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2581.389956][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2581.900572][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11276'.
[ 2582.037134][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2582.052347][T11275] Bluetooth: hci0: command tx timeout
[ 2582.403847][ T6342] chnl_net:caif_netlink_parms(): no params data found
[ 2583.031901][ T6394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2583.165893][ T6391] syzkaller0: entered promiscuous mode
[ 2583.165922][ T6391] syzkaller0: entered allmulticast mode
[ 2583.275409][ T6396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2583.385815][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2583.402689][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2583.402911][ T6342] bridge_slave_0: entered allmulticast mode
[ 2583.435420][ T6342] bridge_slave_0: entered promiscuous mode
[ 2583.445931][ T6397] syzkaller0: entered promiscuous mode
[ 2583.445962][ T6397] syzkaller0: entered allmulticast mode
[ 2583.527780][ T6393] tipc: Resetting bearer <eth:syzkaller0>
[ 2583.545363][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2583.545535][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2583.545792][ T6342] bridge_slave_1: entered allmulticast mode
[ 2583.548857][ T6342] bridge_slave_1: entered promiscuous mode
[ 2583.624379][ T6390] tipc: Resetting bearer <eth:syzkaller0>
[ 2583.775067][ T6390] tipc: Disabling bearer <eth:syzkaller0>
[ 2583.824210][ T4484] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[ 2583.824369][ T5898] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 2583.914394][ T6395] tipc: Resetting bearer <eth:syzkaller0>
[ 2583.955780][ T6405] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11284'.
[ 2584.017179][ T4484] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2584.017209][ T4484] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2584.018826][ T4484] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2584.018917][ T4484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2584.018940][ T4484] usb 7-1: SerialNumber: syz
[ 2584.021390][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2584.021414][ T5898] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2584.021453][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2584.021477][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2584.096432][ T5898] usb 4-1: config 0 descriptor??
[ 2584.110135][ T6395] tipc: Disabling bearer <eth:syzkaller0>
[ 2584.124221][T11275] Bluetooth: hci0: command tx timeout
[ 2584.161240][ T4484] usb 7-1: 0:2 : does not exist
[ 2584.161528][ T4484] usb 7-1: unit 255 not found!
[ 2584.314984][ T5898] usb 4-1: string descriptor 0 read error: -71
[ 2584.317716][ T5898] usb 4-1: USB disconnect, device number 107
[ 2584.396237][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2584.396773][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2584.549879][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2584.591534][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2584.676923][ T5898] usb 7-1: USB disconnect, device number 35
[ 2585.109661][ T6418] netlink: 'syz.9.11287': attribute type 1 has an invalid length.
[ 2585.109679][ T6418] netlink: 'syz.9.11287': attribute type 4 has an invalid length.
[ 2585.109689][ T6418] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.11287'.
[ 2585.488850][ T6422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11288'.
[ 2586.154278][ T2186] gretap0 (unregistering): left promiscuous mode
[ 2586.214345][T11275] Bluetooth: hci0: command tx timeout
[ 2586.264091][T20303] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 2586.416491][T20303] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 2586.416554][T20303] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2586.416601][T20303] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2586.416623][T20303] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2586.420481][T20303] usb 7-1: config 0 descriptor??
[ 2586.426585][T20303] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2588.236926][ T2186] bond0 (unregistering): Released all slaves
[ 2588.255137][ T2186] bond1 (unregistering): Released all slaves
[ 2588.275186][ T2186] bond2 (unregistering): Released all slaves
[ 2588.284101][T11275] Bluetooth: hci0: command tx timeout
[ 2588.625817][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2588.627177][ T6438] syzkaller0: entered promiscuous mode
[ 2588.627205][ T6438] syzkaller0: entered allmulticast mode
[ 2588.644505][ T6442] tipc: Resetting bearer <eth:syzkaller0>
[ 2588.645723][ T2186] : left promiscuous mode
[ 2588.763830][ T6342] team0: Port device team_slave_0 added
[ 2588.794309][ T6435] tipc: Resetting bearer <eth:syzkaller0>
[ 2588.966432][ T2954] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 2588.994982][ T6435] tipc: Disabling bearer <eth:syzkaller0>
[ 2589.053321][ T4946] usb 7-1: USB disconnect, device number 36
[ 2589.103893][ T6461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11297'.
[ 2589.126207][ T2954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2589.126236][ T2954] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2589.126275][ T2954] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2589.126300][ T2954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2589.129964][ T2954] usb 10-1: config 0 descriptor??
[ 2589.170740][ T6342] team0: Port device team_slave_1 added
[ 2589.180999][ T6454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2589.181483][ T2186] tipc: Left network mode
[ 2589.194767][ T6455] syzkaller0: entered promiscuous mode
[ 2589.194798][ T6455] syzkaller0: entered allmulticast mode
[ 2589.342602][ T2954] usb 10-1: string descriptor 0 read error: -71
[ 2589.346403][ T2954] usb 10-1: USB disconnect, device number 43
[ 2589.404737][ T6451] tipc: Resetting bearer <eth:syzkaller0>
[ 2589.556798][ T6451] tipc: Disabling bearer <eth:syzkaller0>
[ 2589.922868][ T6477] fuse: Unknown parameter '0x0000000000000004'
[ 2589.924169][ T2954] usb 9-1: new full-speed USB device number 51 using dummy_hcd
[ 2590.039687][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2590.039702][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2590.039722][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2590.111450][ T2954] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2590.111485][ T2954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2590.134192][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2590.134211][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2590.134238][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2590.184731][ T2954] usb 9-1: config 0 descriptor??
[ 2590.213672][ T2954] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2590.431191][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11299'.
[ 2590.485199][ T6481] program syz.8.11299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2590.799613][ T2186] batadv_slave_1: left promiscuous mode
[ 2590.869908][ T6487] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11306'.
[ 2590.964902][ T2186] hsr_slave_0: left promiscuous mode
[ 2590.970074][ T6488] netlink: 'syz.9.11305': attribute type 1 has an invalid length.
[ 2590.970097][ T6488] netlink: 'syz.9.11305': attribute type 4 has an invalid length.
[ 2590.970114][ T6488] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.11305'.
[ 2591.013075][ T2954] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2591.013124][ T2954] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2591.035049][ T2186] hsr_slave_1: left promiscuous mode
[ 2591.836017][T20303] usb 9-1: USB disconnect, device number 51
[ 2591.894986][ T2186] team0 (unregistering): Port device macvlan1 removed
[ 2592.650341][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2592.744861][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2592.919192][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2593.153724][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2593.242830][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2593.344164][ T4946] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 2593.554085][ T4946] usb 9-1: Using ep0 maxpacket: 16
[ 2593.558189][ T4946] usb 9-1: config 0 has no interfaces?
[ 2593.560193][ T4946] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2593.560215][ T4946] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2593.560230][ T4946] usb 9-1: Manufacturer: syz
[ 2593.599172][ T4946] usb 9-1: config 0 descriptor??
[ 2593.963830][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.474259][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.554343][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.625443][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.710098][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.762115][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2594.973129][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.041860][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.109501][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.164225][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.294638][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.373893][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.442250][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.500233][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.583280][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.779899][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.911214][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2595.921602][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 2595.973077][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.027878][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.094277][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.189898][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.329996][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.399938][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.472882][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.559807][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.631870][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.708697][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.768184][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.917860][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2596.989988][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2597.323835][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2597.394568][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2597.471590][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2597.532253][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2597.665245][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2598.240899][ T6342] hsr_slave_0: entered promiscuous mode
[ 2598.242000][ T6342] hsr_slave_1: entered promiscuous mode
[ 2598.242727][ T6342] debugfs: 'hsr0' already exists in 'hsr'
[ 2598.242770][ T6342] Cannot create hsr debugfs directory
[ 2598.305347][ T6492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2598.339485][ T6493] syzkaller0: entered promiscuous mode
[ 2598.339517][ T6493] syzkaller0: entered allmulticast mode
[ 2598.367331][ T6501] tipc: Resetting bearer <eth:syzkaller0>
[ 2598.406725][ T2954] usb 9-1: USB disconnect, device number 52
[ 2598.425112][ T6490] tipc: Resetting bearer <eth:syzkaller0>
[ 2598.556316][ T6490] tipc: Disabling bearer <eth:syzkaller0>
[ 2598.664267][T20303] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 2598.715732][ T6525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2598.716255][ T6526] syzkaller0: entered promiscuous mode
[ 2598.716280][ T6526] syzkaller0: entered allmulticast mode
[ 2598.837398][T20303] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 2598.837459][T20303] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2598.837505][T20303] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2598.837531][T20303] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2598.885344][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[ 2598.886245][T20303] usb 10-1: config 0 descriptor??
[ 2598.890869][T20303] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 2599.076019][ T6522] tipc: Disabling bearer <eth:syzkaller0>
[ 2600.161350][ T2186] IPVS: stop unused estimator thread 0...
[ 2600.534123][ T2954] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 2600.560812][ T6551] netlink: 'syz.3.11321': attribute type 1 has an invalid length.
[ 2600.560849][ T6551] netlink: 'syz.3.11321': attribute type 4 has an invalid length.
[ 2600.560864][ T6551] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11321'.
[ 2600.748125][ T2954] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2600.748156][ T2954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2600.758769][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11323'.
[ 2600.798035][ T2954] usb 7-1: config 0 descriptor??
[ 2600.813612][ T2954] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2601.019392][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11318'.
[ 2601.058387][ T6342] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2601.062930][ T6545] program syz.6.11318 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2601.123860][ T6342] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2601.148215][ T6342] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2601.213682][ T6342] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2601.510084][ T4484] usb 10-1: USB disconnect, device number 44
[ 2601.575252][ T2954] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2601.575299][ T2954] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2601.616071][T20316] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 2601.779814][T20316] usb 9-1: Using ep0 maxpacket: 16
[ 2601.797526][T20316] usb 9-1: config 0 has no interfaces?
[ 2601.802621][T20316] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2601.802654][T20316] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2601.802677][T20316] usb 9-1: Manufacturer: syz
[ 2601.908479][T20316] usb 9-1: config 0 descriptor??
[ 2602.107275][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11329'.
[ 2602.231093][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2602.265901][ T6342] 8021q: adding VLAN 0 to HW filter on device team0
[ 2602.321763][T16224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2602.341233][T16224] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2602.359747][T27494] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2602.359953][T27494] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2602.431524][ T4484] usb 7-1: USB disconnect, device number 37
[ 2602.745794][ T6591] netlink: 'syz.6.11332': attribute type 1 has an invalid length.
[ 2602.745819][ T6591] netlink: 'syz.6.11332': attribute type 4 has an invalid length.
[ 2602.745834][ T6591] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.11332'.
[ 2602.944077][ T4484] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 2603.129627][ T4484] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2603.314536][ T6595] input: syz1 as /devices/virtual/input/input98
[ 2603.787247][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2604.297122][ T4484] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2604.297155][ T4484] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2604.297177][ T4484] usb 10-1: Product: syz
[ 2604.297193][ T4484] usb 10-1: Manufacturer: syz
[ 2604.297211][ T4484] usb 10-1: SerialNumber: syz
[ 2604.376854][ T4484] usb 10-1: config 0 descriptor??
[ 2606.242084][ T2954] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 2606.369221][ T6342] veth0_vlan: entered promiscuous mode
[ 2606.392658][ T6342] veth1_vlan: entered promiscuous mode
[ 2606.436635][ T2954] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 2606.436735][ T2954] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2606.436782][ T2954] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2606.436809][ T2954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2606.491601][ T2954] usb 7-1: config 0 descriptor??
[ 2606.518553][ T2954] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2606.534617][ T6342] veth0_macvtap: entered promiscuous mode
[ 2606.582939][ T6342] veth1_macvtap: entered promiscuous mode
[ 2606.746903][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2606.824955][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2606.861755][ T2185] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2606.879332][ T2185] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2606.880965][ T2185] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2606.882640][ T2185] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2606.956814][T31197] usb 9-1: USB disconnect, device number 53
[ 2608.310319][ T2186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2608.310345][ T2186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2608.429968][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2608.430002][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2609.206797][ T6630] ptrace attach of "./syz-executor exec"[6342] was attempted by "./syz-executor exec"[6630]
[ 2609.300310][ T4946] usb 7-1: USB disconnect, device number 38
[ 2609.541793][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11340'.
[ 2609.809549][ T5898] usb 10-1: USB disconnect, device number 45
[ 2610.744962][ T5928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2610.776977][ T5928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2610.784445][ T5928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2610.799727][ T5928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2610.800612][ T5928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2611.047148][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2611.154875][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2611.354087][ T4946] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2611.506870][ T4946] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 2611.506933][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2611.506979][ T4946] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2611.507012][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2611.513454][ T4946] usb 4-1: config 0 descriptor??
[ 2611.566256][ T4946] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2611.623480][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2612.394135][ T5898] usb 10-1: new full-speed USB device number 46 using dummy_hcd
[ 2612.549814][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2612.567005][ T5898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2612.567033][ T5898] usb 10-1: config 0 has no interfaces?
[ 2612.573088][ T5898] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2612.573120][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2612.573141][ T5898] usb 10-1: Product: syz
[ 2612.573157][ T5898] usb 10-1: Manufacturer: syz
[ 2612.573169][ T5898] usb 10-1: SerialNumber: syz
[ 2612.579530][ T5898] usb 10-1: config 0 descriptor??
[ 2612.614063][ T2954] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 2612.661072][   T13] bond0: (slave netdevsim0): Releasing backup interface
[ 2612.786752][ T2954] usb 7-1: config 0 has no interfaces?
[ 2612.811804][ T2954] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2612.811836][ T2954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2612.811858][ T2954] usb 7-1: Product: syz
[ 2612.811873][ T2954] usb 7-1: Manufacturer: syz
[ 2612.811889][ T2954] usb 7-1: SerialNumber: syz
[ 2612.862992][ T5898] usb 10-1: USB disconnect, device number 46
[ 2612.892019][ T2954] usb 7-1: config 0 descriptor??
[ 2612.934218][T11275] Bluetooth: hci4: command tx timeout
[ 2613.143872][ T6656] chnl_net:caif_netlink_parms(): no params data found
[ 2613.855658][   T13] bridge_slave_1: left allmulticast mode
[ 2613.855691][   T13] bridge_slave_1: left promiscuous mode
[ 2613.855933][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2613.935766][   T13] bridge_slave_0: left allmulticast mode
[ 2613.935807][   T13] bridge_slave_0: left promiscuous mode
[ 2613.936102][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2614.152147][ T4946] usb 4-1: USB disconnect, device number 108
[ 2614.234130][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2614.613761][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2614.694630][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2614.706778][ T4946] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 2614.784870][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2614.877087][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 2614.877142][ T4946] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2614.877167][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2614.884394][ T4946] usb 4-1: config 0 descriptor??
[ 2614.894113][ T4946] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2614.958762][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2615.004279][T11275] Bluetooth: hci4: command tx timeout
[ 2615.033506][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2615.133588][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2615.252976][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2615.329760][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2615.402962][ T4946] usb 7-1: USB disconnect, device number 39
[ 2616.015397][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2616.105360][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2616.253268][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2616.412319][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2616.981787][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.084339][T11275] Bluetooth: hci4: command tx timeout
[ 2617.091277][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.291005][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.332671][ T4946] usb 4-1: USB disconnect, device number 109
[ 2617.484050][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.558121][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.628218][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.721400][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.818356][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2617.974916][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11386'.
[ 2617.975329][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2618.064859][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2618.145476][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 2618.185815][   T13] bond0 (unregistering): Released all slaves
[ 2618.202806][   T13] bond1 (unregistering): Released all slaves
[ 2618.322515][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2618.405952][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2618.470431][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2618.504222][   T13] tipc: Left network mode
[ 2618.504466][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2618.504604][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2618.504867][ T6656] bridge_slave_0: entered allmulticast mode
[ 2618.514669][ T6656] bridge_slave_0: entered promiscuous mode
[ 2618.611061][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2618.691649][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2618.786901][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2618.787600][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2618.787802][ T6656] bridge_slave_1: entered allmulticast mode
[ 2618.798769][ T6656] bridge_slave_1: entered promiscuous mode
[ 2619.164381][T11275] Bluetooth: hci4: command tx timeout
[ 2619.574788][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2620.063887][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2620.082657][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2620.414058][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2620.511015][ T6656] team0: Port device team_slave_0 added
[ 2620.574074][ T2954] usb 10-1: new full-speed USB device number 47 using dummy_hcd
[ 2620.694157][   T13] hsr_slave_0: left promiscuous mode
[ 2620.714337][   T13] hsr_slave_1: left promiscuous mode
[ 2620.715070][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2620.736303][ T2954] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2620.736335][ T2954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2620.740208][ T2954] usb 10-1: config 0 descriptor??
[ 2620.743837][ T2954] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2620.785215][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2621.010622][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11395'.
[ 2621.099302][ T6794] program syz.9.11395 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2621.623320][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2621.723003][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2621.746857][ T2954] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2621.746893][ T2954] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2621.819399][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2622.105000][   T13] team0 (unregistering): Port device macvlan1 removed
[ 2622.381133][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11398'.
[ 2624.385007][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 2624.694827][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 2628.066710][ T6656] team0: Port device team_slave_1 added
[ 2628.194992][ T5898] usb 10-1: USB disconnect, device number 47
[ 2628.969927][   T38] kauditd_printk_skb: 8 callbacks suppressed
[ 2628.969948][   T38] audit: type=1326 audit(1760304239.024:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.031232][   T38] audit: type=1326 audit(1760304239.024:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.031560][   T38] audit: type=1326 audit(1760304239.084:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.031838][   T38] audit: type=1326 audit(1760304239.084:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.034282][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2629.034297][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2629.034326][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2629.120339][   T38] audit: type=1326 audit(1760304239.174:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.120761][   T38] audit: type=1326 audit(1760304239.174:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.120927][   T38] audit: type=1326 audit(1760304239.174:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6829 comm="syz.6.11405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2629.265649][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2629.265668][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2629.265694][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2629.743531][ T6656] hsr_slave_0: entered promiscuous mode
[ 2629.751728][ T6656] hsr_slave_1: entered promiscuous mode
[ 2629.771465][ T6656] debugfs: 'hsr0' already exists in 'hsr'
[ 2629.771499][ T6656] Cannot create hsr debugfs directory
[ 2630.294395][ T2954] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 2630.374118][T31197] usb 7-1: new full-speed USB device number 40 using dummy_hcd
[ 2630.451016][ T2954] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2630.451049][ T2954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2630.452487][ T2954] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2630.452516][ T2954] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2630.452539][ T2954] usb 10-1: Manufacturer: syz
[ 2630.500309][ T2954] usb 10-1: config 0 descriptor??
[ 2630.508465][ T2954] igorplugusb 10-1:0.0: incorrect number of endpoints
[ 2630.536840][T31197] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2630.536873][T31197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2630.566468][T31197] usb 7-1: config 0 descriptor??
[ 2630.571659][T31197] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2630.574119][T20302] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 2630.736555][T20302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2630.739680][T20302] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2630.739773][T20302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2630.739798][T20302] usb 4-1: Product: syz
[ 2630.739815][T20302] usb 4-1: Manufacturer: syz
[ 2630.739833][T20302] usb 4-1: SerialNumber: syz
[ 2630.810182][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11410'.
[ 2630.837389][T20302] usb 4-1: config 0 descriptor??
[ 2630.864679][ T6852] program syz.6.11410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2631.357141][T31197] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2631.357257][T31197] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2631.767577][ T6656] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2631.789346][ T6656] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2631.858137][ T6656] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2631.889972][ T6656] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2632.077525][ T5898] usb 7-1: USB disconnect, device number 40
[ 2632.199324][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2632.246878][ T6656] 8021q: adding VLAN 0 to HW filter on device team0
[ 2632.270004][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2632.270360][ T2185] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2632.307330][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2632.307542][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2633.163553][ T4946] usb 10-1: USB disconnect, device number 48
[ 2633.690412][ T6883] tipc: Started in network mode
[ 2633.690445][ T6883] tipc: Node identity 7a865f454a0b, cluster identity 4711
[ 2633.690665][ T6883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2633.691924][ T6883] syzkaller0: entered promiscuous mode
[ 2633.694022][ T6883] syzkaller0: entered allmulticast mode
[ 2633.762122][T20302] usb 4-1: USB disconnect, device number 110
[ 2634.274396][ T6882] tipc: Resetting bearer <eth:syzkaller0>
[ 2634.536269][ T6882] tipc: Disabling bearer <eth:syzkaller0>
[ 2634.809583][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2635.776914][ T6656] veth0_vlan: entered promiscuous mode
[ 2635.813226][ T6656] veth1_vlan: entered promiscuous mode
[ 2636.020416][ T6656] veth0_macvtap: entered promiscuous mode
[ 2636.027654][ T6656] veth1_macvtap: entered promiscuous mode
[ 2636.060859][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2636.093116][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2636.110763][ T2186] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2636.110952][ T2186] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2636.110992][ T2186] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2636.111019][ T2186] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2636.264058][T20302] usb 10-1: new full-speed USB device number 49 using dummy_hcd
[ 2636.437511][T20302] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2636.437546][T20302] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2636.441272][T20302] usb 10-1: config 0 descriptor??
[ 2636.470795][T20302] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2636.710955][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11424'.
[ 2636.731567][ T6914] program syz.9.11424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2636.767831][ T2185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2636.767855][ T2185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2637.163357][ T2185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2637.163382][ T2185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2637.179779][T20302] gp8psk: usb in 138 operation failed.
[ 2637.179801][T20302] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2637.179842][T20302] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2637.744021][T20316] usb 10-1: USB disconnect, device number 49
[ 2638.174128][T20316] usb 10-1: new full-speed USB device number 50 using dummy_hcd
[ 2638.354062][T20316] usb 10-1: device descriptor read/64, error -71
[ 2638.467491][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11430'.
[ 2638.594056][T20316] usb 10-1: new full-speed USB device number 51 using dummy_hcd
[ 2638.725688][T20316] usb 10-1: device descriptor read/64, error -71
[ 2638.834943][T20316] usb usb10-port1: attempt power cycle
[ 2639.195605][T20316] usb 10-1: new full-speed USB device number 52 using dummy_hcd
[ 2639.254067][T20316] usb 10-1: device descriptor read/8, error -71
[ 2639.554126][T20316] usb 10-1: new full-speed USB device number 53 using dummy_hcd
[ 2639.574793][T20316] usb 10-1: device descriptor read/8, error -71
[ 2639.694481][T20316] usb usb10-port1: unable to enumerate USB device
[ 2639.978990][   T38] audit: type=1326 audit(1760304250.034:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2639.979058][   T38] audit: type=1326 audit(1760304250.034:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2639.992428][   T38] audit: type=1326 audit(1760304250.034:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2639.992512][   T38] audit: type=1326 audit(1760304250.034:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2639.992581][   T38] audit: type=1326 audit(1760304250.034:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2639.994179][ T4946] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2640.014907][   T38] audit: type=1326 audit(1760304250.074:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2640.014978][   T38] audit: type=1326 audit(1760304250.074:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2640.015034][   T38] audit: type=1326 audit(1760304250.074:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2640.020782][   T38] audit: type=1326 audit(1760304250.074:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2640.020845][   T38] audit: type=1326 audit(1760304250.074:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.8.11434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec63aeec9 code=0x7ffc0000
[ 2640.029992][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2640.050098][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2640.146266][ T4946] usb 7-1: Using ep0 maxpacket: 16
[ 2640.163614][ T4946] usb 7-1: config 0 has no interfaces?
[ 2640.172047][ T4946] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2640.172084][ T4946] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2640.172110][ T4946] usb 7-1: Manufacturer: syz
[ 2640.303104][ T4946] usb 7-1: config 0 descriptor??
[ 2642.322046][ T6936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2642.396144][ T6936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2642.714082][T20302] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 2642.869631][T20302] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2642.869668][T20302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2642.869694][T20302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2642.869719][T20302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2642.869765][T20302] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2642.869790][T20302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2642.980543][T20302] usb 4-1: config 0 descriptor??
[ 2643.445177][T20302] usbhid 4-1:0.0: can't add hid device: -71
[ 2643.445316][T20302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2643.466072][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11439'.
[ 2643.494054][T20302] usb 4-1: USB disconnect, device number 111
[ 2644.234165][T20303] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 2644.310105][T27494] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.311216][T27494] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.311319][T27494] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.311361][T27494] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2644.373284][T20303] usb 4-1: device descriptor read/64, error -71
[ 2644.404424][T20318] usb 7-1: USB disconnect, device number 41
[ 2644.604423][T20303] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 2644.724250][T20316] usb 9-1: new full-speed USB device number 54 using dummy_hcd
[ 2644.724435][ T4946] usb 10-1: new full-speed USB device number 54 using dummy_hcd
[ 2644.764227][T20303] usb 4-1: device descriptor read/64, error -71
[ 2644.854182][T20316] usb 9-1: device descriptor read/64, error -71
[ 2644.874491][T20303] usb usb4-port1: attempt power cycle
[ 2644.891504][ T4946] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2644.891542][ T4946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2644.894465][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11448'.
[ 2644.929634][ T4946] usb 10-1: config 0 descriptor??
[ 2644.933772][ T4946] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2645.114303][T20316] usb 9-1: new full-speed USB device number 55 using dummy_hcd
[ 2645.139757][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11447'.
[ 2645.205945][ T6989] program syz.9.11447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2645.214073][T20303] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 2645.237334][T20303] usb 4-1: device descriptor read/8, error -71
[ 2645.304132][T20316] usb 9-1: device descriptor read/64, error -71
[ 2645.424479][T20316] usb usb9-port1: attempt power cycle
[ 2645.509646][T20303] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 2645.524929][T20303] usb 4-1: device descriptor read/8, error -71
[ 2645.560457][ T4946] gp8psk: usb in 138 operation failed.
[ 2645.560480][ T4946] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2645.560521][ T4946] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2645.726712][T20303] usb usb4-port1: unable to enumerate USB device
[ 2645.768335][T20316] usb 9-1: new full-speed USB device number 56 using dummy_hcd
[ 2645.786473][T20316] usb 9-1: device descriptor read/8, error -71
[ 2646.034066][T20316] usb 9-1: new full-speed USB device number 57 using dummy_hcd
[ 2646.056534][T20316] usb 9-1: device descriptor read/8, error -71
[ 2646.174446][T20316] usb usb9-port1: unable to enumerate USB device
[ 2646.192329][T20303] usb 10-1: USB disconnect, device number 54
[ 2646.258408][ T6996] netlink: 'syz.9.11452': attribute type 10 has an invalid length.
[ 2647.126704][ T7007] geneve2: entered promiscuous mode
[ 2647.136935][T16224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2647.138192][T16224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2647.138249][T16224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2647.138298][T16224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2647.547425][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11460'.
[ 2647.854235][   T38] kauditd_printk_skb: 15 callbacks suppressed
[ 2647.854259][   T38] audit: type=1326 audit(1760304257.894:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2647.854310][   T38] audit: type=1326 audit(1760304257.894:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2647.854344][   T38] audit: type=1326 audit(1760304257.894:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2647.996011][   T38] audit: type=1326 audit(1760304258.054:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2647.996361][   T38] audit: type=1326 audit(1760304258.054:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.001759][T20303] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 2648.077768][   T38] audit: type=1326 audit(1760304258.134:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.078283][   T38] audit: type=1326 audit(1760304258.134:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.079086][   T38] audit: type=1326 audit(1760304258.134:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.079472][   T38] audit: type=1326 audit(1760304258.134:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.080960][   T38] audit: type=1326 audit(1760304258.134:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7008 comm="syz.9.11457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b47eec9 code=0x7ffc0000
[ 2648.274073][T20303] usb 4-1: Using ep0 maxpacket: 8
[ 2648.279081][T20303] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2648.279104][T20303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2648.279119][T20303] usb 4-1: Product: syz
[ 2648.279136][T20303] usb 4-1: Manufacturer: syz
[ 2648.279153][T20303] usb 4-1: SerialNumber: syz
[ 2648.284312][ T5898] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[ 2648.346443][T20303] usb 4-1: config 0 descriptor??
[ 2648.374098][T31197] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 2648.380989][T20303] gspca_main: se401-2.14.0 probing 047d:5003
[ 2648.491247][ T5898] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2648.491272][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2648.524098][T31197] usb 9-1: Using ep0 maxpacket: 16
[ 2648.526467][T31197] usb 9-1: config 0 has no interfaces?
[ 2648.528028][T31197] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2648.528048][T31197] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2648.528063][T31197] usb 9-1: Manufacturer: syz
[ 2648.532890][ T5898] usb 7-1: config 0 descriptor??
[ 2648.618605][T31197] usb 9-1: config 0 descriptor??
[ 2648.619616][ T5898] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2648.799428][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11463'.
[ 2648.822902][ T7028] program syz.6.11463 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2649.199325][ T5898] gp8psk: usb in 138 operation failed.
[ 2649.199410][ T5898] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2649.199456][ T5898] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2649.584090][T20303] usb 4-1: reset high-speed USB device number 116 using dummy_hcd
[ 2649.748331][T31197] usb 7-1: USB disconnect, device number 42
[ 2650.412218][T20303] gspca_se401: read req failed req 0x06 error -19
[ 2650.420422][T20303] usb 4-1: USB disconnect, device number 116
[ 2651.398017][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2651.735083][T20316] usb 9-1: USB disconnect, device number 58
[ 2651.789112][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2651.854122][T20318] usb 10-1: new full-speed USB device number 55 using dummy_hcd
[ 2651.994106][T20318] usb 10-1: device descriptor read/64, error -71
[ 2652.042458][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2652.234201][T20318] usb 10-1: new full-speed USB device number 56 using dummy_hcd
[ 2652.411576][T20318] usb 10-1: device descriptor read/64, error -71
[ 2652.425018][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11474'.
[ 2652.524827][T20318] usb usb10-port1: attempt power cycle
[ 2652.944101][T20316] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[ 2652.974035][T20318] usb 10-1: new full-speed USB device number 57 using dummy_hcd
[ 2652.994987][T20318] usb 10-1: device descriptor read/8, error -71
[ 2653.143211][T20316] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2653.143236][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2653.212389][T20316] usb 9-1: config 0 descriptor??
[ 2653.244159][T20318] usb 10-1: new full-speed USB device number 58 using dummy_hcd
[ 2653.265000][T20318] usb 10-1: device descriptor read/8, error -71
[ 2653.291557][T20316] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2653.374844][T20318] usb usb10-port1: unable to enumerate USB device
[ 2653.423719][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11475'.
[ 2653.475256][ T7071] program syz.8.11475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2653.911912][T20316] gp8psk: usb in 138 operation failed.
[ 2653.911934][T20316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2653.912048][T20316] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2654.461633][T20316] usb 9-1: USB disconnect, device number 59
[ 2654.721180][   T38] kauditd_printk_skb: 9 callbacks suppressed
[ 2654.721199][   T38] audit: type=1326 audit(1760304264.774:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.758612][   T38] audit: type=1326 audit(1760304264.814:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.760529][   T38] audit: type=1326 audit(1760304264.814:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.761508][   T38] audit: type=1326 audit(1760304264.814:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.761853][   T38] audit: type=1326 audit(1760304264.814:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.762264][   T38] audit: type=1326 audit(1760304264.814:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.762917][   T38] audit: type=1326 audit(1760304264.814:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.763355][   T38] audit: type=1326 audit(1760304264.814:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.919615][   T38] audit: type=1326 audit(1760304264.974:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2654.920678][   T38] audit: type=1326 audit(1760304264.974:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.3.11483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f056eec9 code=0x7ffc0000
[ 2655.054029][T20316] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 2655.220677][T20316] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2655.220715][T20316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2655.220772][T20316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2655.220797][T20316] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2655.220844][T20316] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2655.220869][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2655.308838][T20316] usb 9-1: config 0 descriptor??
[ 2655.726931][T20316] usbhid 9-1:0.0: can't add hid device: -71
[ 2655.727030][T20316] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2655.748232][T20316] usb 9-1: USB disconnect, device number 60
[ 2656.574203][ T7114] veth1_vlan: left allmulticast mode
[ 2656.945983][ T2186] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2656.946043][ T2186] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2656.946086][ T2186] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2656.946128][ T2186] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2657.287932][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2657.338351][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 2657.854534][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11496'.
[ 2658.105742][ T7143] fuse: Bad value for 'fd'
[ 2658.556147][ T7150] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11501'.
[ 2658.784046][ T5898] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 2658.948815][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2658.948840][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2658.948860][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2658.948876][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2658.948907][ T5898] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2658.948924][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.025470][ T5898] usb 9-1: config 0 descriptor??
[ 2659.457157][    C0] raw-gadget.1 gadget.8: ignoring, device is not running
[ 2659.457549][    C0] raw-gadget.1 gadget.8: ignoring, device is not running
[ 2659.457896][    C0] raw-gadget.1 gadget.8: ignoring, device is not running
[ 2659.458028][ T5898] usbhid 9-1:0.0: can't add hid device: -32
[ 2659.458126][ T5898] usbhid 9-1:0.0: probe with driver usbhid failed with error -32
[ 2659.541853][ T5898] usb 9-1: USB disconnect, device number 61
[ 2659.774060][T20318] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 2659.937179][T20318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2659.937200][T20318] usb 4-1: config 0 has no interfaces?
[ 2659.937227][T20318] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2659.937245][T20318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2659.949722][T20318] usb 4-1: config 0 descriptor??
[ 2660.269950][T17096] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2660.310939][T17096] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2661.108415][T17096] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2661.125245][T17096] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2661.715131][T20318] usb 4-1: USB disconnect, device number 117
[ 2661.783542][ T7174] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2661.994064][T20316] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[ 2662.148605][T20316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2662.148635][T20316] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2662.150859][T20316] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2662.150887][T20316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2662.150906][T20316] usb 7-1: SerialNumber: syz
[ 2662.213694][T20316] usb 7-1: 0:2 : does not exist
[ 2662.213782][T20316] usb 7-1: unit 255 not found!
[ 2662.562543][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2662.563164][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2662.854371][T20316] usb 9-1: new full-speed USB device number 62 using dummy_hcd
[ 2662.903625][ T7199] netlink: 'syz.9.11518': attribute type 10 has an invalid length.
[ 2663.020583][T20316] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2663.020617][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2663.049747][T20316] usb 9-1: config 0 descriptor??
[ 2663.068625][T20316] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2663.259659][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11516'.
[ 2663.328479][ T7207] program syz.8.11516 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2663.901330][T20316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2663.902517][T20316] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2664.048208][ T4946] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 2664.226649][ T4946] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2664.230061][ T4946] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2664.230092][ T4946] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2664.230113][ T4946] usb 10-1: Product: syz
[ 2664.230130][ T4946] usb 10-1: Manufacturer: syz
[ 2664.230147][ T4946] usb 10-1: SerialNumber: syz
[ 2664.289141][ T4946] usb 10-1: config 0 descriptor??
[ 2664.372601][ T4946] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2664.532295][T11275] Bluetooth: hci2: command 0x0406 tx timeout
[ 2665.250379][ T4946] usb 9-1: USB disconnect, device number 62
[ 2665.339586][ T5898] usb 7-1: USB disconnect, device number 43
[ 2665.518814][ T7233] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2666.781154][ T4946] usb 10-1: USB disconnect, device number 59
[ 2667.234050][ T4946] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 2667.400178][ T4946] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2667.400244][ T4946] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2667.401840][ T4946] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2667.401870][ T4946] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2667.401893][ T4946] usb 10-1: Manufacturer: syz
[ 2667.462989][ T4946] usb 10-1: config 0 descriptor??
[ 2667.473203][ T4946] igorplugusb 10-1:0.0: incorrect number of endpoints
[ 2667.904068][T20316] usb 9-1: new full-speed USB device number 63 using dummy_hcd
[ 2667.954093][ T4946] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 2668.068932][T20316] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2668.068956][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2668.073230][T20316] usb 9-1: config 0 descriptor??
[ 2668.100681][T20316] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2668.118689][ T4946] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 2668.118770][ T4946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2668.154209][ T4946] usb 7-1: config 0 descriptor??
[ 2668.234081][T20302] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 2668.316997][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11536'.
[ 2668.320746][ T7260] program syz.8.11536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2668.364182][T20302] usb 4-1: device descriptor read/64, error -71
[ 2668.644043][T20302] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 2668.774075][T20302] usb 4-1: device descriptor read/64, error -71
[ 2668.911227][   T38] audit: type=1326 audit(1760304278.964:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7264 comm="syz.7.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2961eec9 code=0x7ffc0000
[ 2668.911900][   T38] audit: type=1326 audit(1760304278.964:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7264 comm="syz.7.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2961eec9 code=0x7ffc0000
[ 2668.912993][   T38] audit: type=1326 audit(1760304278.964:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7264 comm="syz.7.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0f2961eec9 code=0x7ffc0000
[ 2668.913632][   T38] audit: type=1326 audit(1760304278.964:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7264 comm="syz.7.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2961eec9 code=0x7ffc0000
[ 2669.045569][T20302] usb usb4-port1: attempt power cycle
[ 2669.047290][   T38] audit: type=1326 audit(1760304279.104:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7264 comm="syz.7.11538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2961eec9 code=0x7ffc0000
[ 2669.256893][T20316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2669.256929][T20316] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2669.314458][ T4946] pegasus 7-1:0.0: probe with driver pegasus failed with error -121
[ 2669.544085][T20302] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 2669.567373][T20302] usb 4-1: device descriptor read/8, error -71
[ 2669.804851][T20302] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 2669.827216][T20302] usb 4-1: device descriptor read/8, error -71
[ 2669.934217][ T4946] usb 10-1: USB disconnect, device number 60
[ 2669.934498][T20302] usb usb4-port1: unable to enumerate USB device
[ 2670.287111][T20302] usb 9-1: USB disconnect, device number 63
[ 2670.787235][ T7287] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 2671.363783][T20316] usb 7-1: USB disconnect, device number 44
[ 2672.518991][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2673.016790][   T38] audit: type=1326 audit(1760304283.074:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.6.11551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2673.016853][   T38] audit: type=1326 audit(1760304283.074:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.6.11551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2673.021348][   T38] audit: type=1326 audit(1760304283.074:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.6.11551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2673.021722][   T38] audit: type=1326 audit(1760304283.074:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.6.11551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2673.022386][   T38] audit: type=1326 audit(1760304283.074:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7309 comm="syz.6.11551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2674.334029][T20316] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 2674.405076][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2674.484039][T20316] usb 10-1: device descriptor read/64, error -71
[ 2674.724061][T20316] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 2674.854036][T20316] usb 10-1: device descriptor read/64, error -71
[ 2674.965103][T20316] usb usb10-port1: attempt power cycle
[ 2675.314051][T20316] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 2675.335530][T20316] usb 10-1: device descriptor read/8, error -71
[ 2675.439405][ T7362] tipc: Started in network mode
[ 2675.439430][ T7362] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[ 2675.468792][ T7362] tipc: Enabled bearer <udp:syz0>, priority 10
[ 2675.594042][T20316] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 2675.614679][T20316] usb 10-1: device descriptor read/8, error -71
[ 2675.724823][T20316] usb usb10-port1: unable to enumerate USB device
[ 2675.764060][ T4946] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[ 2675.970210][ T4946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2675.970230][ T4946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2675.971319][ T4946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2675.971339][ T4946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2675.971354][ T4946] usb 4-1: SerialNumber: syz
[ 2676.027642][ T4946] usb 4-1: 0:2 : does not exist
[ 2676.027733][ T4946] usb 4-1: unit 255 not found!
[ 2676.364650][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2676.372960][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2676.444161][ T4946] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 2676.574135][T31197] tipc: Node number set to 4269801488
[ 2676.607163][ T4946] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2676.610228][ T4946] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2676.610250][ T4946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2676.610265][ T4946] usb 9-1: Product: syz
[ 2676.610275][ T4946] usb 9-1: Manufacturer: syz
[ 2676.610287][ T4946] usb 9-1: SerialNumber: syz
[ 2676.615208][ T4946] usb 9-1: config 0 descriptor??
[ 2676.881897][ T4946] usb 9-1: USB disconnect, device number 64
[ 2677.143512][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11568'.
[ 2677.525683][   T38] kauditd_printk_skb: 13 callbacks suppressed
[ 2677.525703][   T38] audit: type=1326 audit(1760304287.584:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.526242][   T38] audit: type=1326 audit(1760304287.584:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.526634][   T38] audit: type=1326 audit(1760304287.584:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.527029][   T38] audit: type=1326 audit(1760304287.584:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.527480][   T38] audit: type=1326 audit(1760304287.584:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.527957][   T38] audit: type=1326 audit(1760304287.584:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.528591][   T38] audit: type=1326 audit(1760304287.584:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.529117][   T38] audit: type=1326 audit(1760304287.584:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.530174][   T38] audit: type=1326 audit(1760304287.584:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2677.530623][   T38] audit: type=1326 audit(1760304287.584:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.6.11570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccd01eeec9 code=0x7ffc0000
[ 2678.401582][ T7402] program syz.9.11577 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2678.749512][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11580'.
[ 2678.919426][ T4946] usb 4-1: USB disconnect, device number 122
[ 2679.144067][T20316] usb 9-1: new full-speed USB device number 65 using dummy_hcd
[ 2679.214331][ T2954] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2679.296055][T20316] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 2679.296078][T20316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2679.299858][T20316] usb 9-1: config 0 descriptor??
[ 2679.330234][T20316] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 2679.344514][ T4946] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 2679.366610][ T2954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2679.369539][ T2954] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2679.369562][ T2954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2679.369577][ T2954] usb 7-1: Product: syz
[ 2679.369588][ T2954] usb 7-1: Manufacturer: syz
[ 2679.369599][ T2954] usb 7-1: SerialNumber: syz
[ 2679.509149][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11581'.
[ 2679.517302][ T2954] usb 7-1: config 0 descriptor??
[ 2679.529650][ T7412] program syz.8.11581 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2679.606894][ T4946] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2679.606941][ T4946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2679.608483][ T4946] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2679.608504][ T4946] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2679.608519][ T4946] usb 4-1: Manufacturer: syz
[ 2679.620175][ T4946] usb 4-1: config 0 descriptor??
[ 2679.639113][ T4946] igorplugusb 4-1:0.0: incorrect number of endpoints
[ 2679.848839][ T2954] usb 7-1: USB disconnect, device number 45
[ 2679.956581][T20316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2679.956622][T20316] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 2680.712602][T20303] usb 9-1: USB disconnect, device number 65
[ 2680.914244][ T5898] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 2681.053834][ T5898] usb 10-1: device descriptor read/64, error -71
[ 2681.340175][ T5898] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 2681.500379][ T5898] usb 10-1: device descriptor read/64, error -71
[ 2681.500642][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2681.503234][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2681.604454][ T5898] usb usb10-port1: attempt power cycle
[ 2681.944065][ T5898] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 2681.965030][ T5898] usb 10-1: device descriptor read/8, error -71
[ 2682.181468][ T2954] usb 4-1: USB disconnect, device number 123
[ 2682.204282][ T5898] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 2682.224948][ T5898] usb 10-1: device descriptor read/8, error -71
[ 2682.334794][ T5898] usb usb10-port1: unable to enumerate USB device
[ 2682.781838][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2682.816978][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2683.761888][ T2954] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[ 2683.916971][ T2954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2683.917002][ T2954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2683.918281][ T2954] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2683.918309][ T2954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2683.918331][ T2954] usb 4-1: SerialNumber: syz
[ 2684.150258][ T2954] usb 4-1: 0:2 : does not exist
[ 2684.154176][ T2954] usb 4-1: unit 255 not found!
[ 2684.460597][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2684.460902][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2684.953135][ T7431] geneve2: entered promiscuous mode
[ 2685.594135][ T2954] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 2685.746244][ T2954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2685.752695][ T2954] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2685.752726][ T2954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2685.752747][ T2954] usb 9-1: Product: syz
[ 2685.752762][ T2954] usb 9-1: Manufacturer: syz
[ 2685.752773][ T2954] usb 9-1: SerialNumber: syz
[ 2685.760471][ T2954] usb 9-1: config 0 descriptor??
[ 2686.017787][ T2954] usb 9-1: USB disconnect, device number 66
[ 2686.314065][ T4946] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 2686.477632][ T4946] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2686.477657][ T4946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2686.477676][ T4946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2686.477693][ T4946] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2686.477724][ T4946] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2686.478166][ T4946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2686.482139][ T4946] usb 10-1: config 0 descriptor??
[ 2686.514312][ T2954] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 2686.623663][T25833] usb 4-1: USB disconnect, device number 124
[ 2686.669845][ T2954] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 2686.669876][ T2954] usb 7-1: can't read configurations, error -61
[ 2686.804463][ T2954] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 2686.977766][ T2954] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 2686.977880][ T2954] usb 7-1: can't read configurations, error -61
[ 2686.981769][ T2954] usb usb7-port1: attempt power cycle
[ 2687.115662][ T4946] usbhid 10-1:0.0: can't add hid device: -71
[ 2687.115761][ T4946] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 2687.172892][ T4946] usb 10-1: USB disconnect, device number 69
[ 2687.384065][ T2954] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 2687.415461][ T2954] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 2687.415491][ T2954] usb 7-1: can't read configurations, error -61
[ 2687.664562][ T2954] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 2687.710554][ T2954] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 2687.710605][ T2954] usb 7-1: can't read configurations, error -61
[ 2687.711014][ T2954] usb usb7-port1: unable to enumerate USB device
[ 2689.325610][ T7505] input: syz1 as /devices/virtual/input/input100
[ 2689.784823][ T2954] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 2689.804306][T25833] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 2689.945091][ T2954] usb 4-1: no configurations
[ 2689.945113][ T2954] usb 4-1: can't read configurations, error -22
[ 2689.974011][T25833] usb 7-1: Using ep0 maxpacket: 8
[ 2689.982081][T25833] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2689.982104][T25833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2689.982119][T25833] usb 7-1: Product: syz
[ 2689.982130][T25833] usb 7-1: Manufacturer: syz
[ 2689.982141][T25833] usb 7-1: SerialNumber: syz
[ 2689.991982][T25833] usb 7-1: config 0 descriptor??
[ 2690.049256][T25833] gspca_main: se401-2.14.0 probing 047d:5003
[ 2690.074039][ T2954] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 2690.382352][ T2954] usb 4-1: no configurations
[ 2690.382766][ T2954] usb 4-1: can't read configurations, error -22
[ 2690.385846][ T2954] usb usb4-port1: attempt power cycle
[ 2690.774051][ T2954] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 2690.796319][ T2954] usb 4-1: no configurations
[ 2690.796386][ T2954] usb 4-1: can't read configurations, error -22
[ 2690.924230][ T2954] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 2690.948770][ T2954] usb 4-1: no configurations
[ 2690.949596][ T2954] usb 4-1: can't read configurations, error -22
[ 2690.955247][ T2954] usb usb4-port1: unable to enumerate USB device
[ 2691.248135][T25833] usb 7-1: reset high-speed USB device number 50 using dummy_hcd
[ 2691.374098][T25833] usb 7-1: device descriptor read/64, error -32
[ 2691.498012][T25833] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI
[ 2691.498042][T25833] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 2691.498066][T25833] CPU: 1 UID: 0 PID: 25833 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2691.498092][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2691.498108][T25833] Workqueue: usb_hub_wq hub_event
[ 2691.498139][T25833] RIP: 0010:usb_gadget_udc_reset+0x27/0x60
[ 2691.498165][T25833] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 8e 81 f4 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6b 33 56 fb 4d 8b 1e 48 89 df 2e e8
[ 2691.498186][T25833] RSP: 0018:ffffc9000496e480 EFLAGS: 00010202
[ 2691.498205][T25833] RAX: 0000000000000008 RBX: ffff888027930c40 RCX: dffffc0000000000
[ 2691.498221][T25833] RDX: ffffc9001ce02000 RSI: 00000000000114f7 RDI: 00000000000114f8
[ 2691.498237][T25833] RBP: ffff888030ff4e6c R08: ffffffff8ef76677 R09: 1ffffffff1deecce
[ 2691.498255][T25833] R10: dffffc0000000000 R11: fffffbfff1deeccf R12: ffff888027930c40
[ 2691.498272][T25833] R13: 1ffff11004f662a1 R14: 0000000000000040 R15: 1ffff11004f26187
[ 2691.498289][T25833] FS:  0000000000000000(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000
[ 2691.498307][T25833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2691.498324][T25833] CR2: 00007f0f296021e0 CR3: 000000006ef36000 CR4: 00000000003526f0
[ 2691.498344][T25833] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 2691.498359][T25833] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2691.498375][T25833] Call Trace:
[ 2691.498383][T25833]  <TASK>
[ 2691.498393][T25833]  set_link_state+0x80b/0x1220
[ 2691.498421][T25833]  dummy_hub_control+0xcc0/0x1760
[ 2691.498451][T25833]  usb_hcd_submit_urb+0xde9/0x1a80
[ 2691.498485][T25833]  usb_start_wait_urb+0x114/0x4c0
[ 2691.498522][T25833]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2691.498574][T25833]  usb_control_msg+0x232/0x3e0
[ 2691.498611][T25833]  hub_port_reset+0x390/0x1740
[ 2691.498646][T25833]  hub_port_init+0x2b0/0x2800
[ 2691.498675][T25833]  ? usb_enable_endpoint+0x104/0x1b0
[ 2691.498697][T25833]  usb_reset_and_verify_device+0x103b/0x1a80
[ 2691.498741][T25833]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2691.498779][T25833]  ? __pfx_usb_reset_and_verify_device+0x10/0x10
[ 2691.498820][T25833]  ? mutex_lock_nested+0x154/0x1d0
[ 2691.498846][T25833]  ? usb_reset_device+0x549/0xae0
[ 2691.498883][T25833]  usb_reset_device+0x552/0xae0
[ 2691.498924][T25833]  sd_config+0x24d/0x1550
[ 2691.498959][T25833]  ? snprintf+0xda/0x120
[ 2691.498987][T25833]  ? snprintf+0xda/0x120
[ 2691.499013][T25833]  ? __pfx_sd_config+0x10/0x10
[ 2691.499044][T25833]  ? __pfx_snprintf+0x10/0x10
[ 2691.499070][T25833]  ? __rt_spin_lock_init+0x3e/0x50
[ 2691.499103][T25833]  ? __init_waitqueue_head+0xae/0x160
[ 2691.499131][T25833]  gspca_dev_probe2+0x826/0x1450
[ 2691.499168][T25833]  ? gspca_dev_probe+0x18e/0x250
[ 2691.499197][T25833]  usb_probe_interface+0x668/0xc30
[ 2691.499228][T25833]  ? __pfx_usb_probe_interface+0x10/0x10
[ 2691.499251][T25833]  really_probe+0x26d/0x9e0
[ 2691.499286][T25833]  __driver_probe_device+0x18c/0x2f0
[ 2691.499318][T25833]  driver_probe_device+0x4f/0x430
[ 2691.499350][T25833]  __device_attach_driver+0x2ce/0x530
[ 2691.499383][T25833]  bus_for_each_drv+0x254/0x2e0
[ 2691.499405][T25833]  ? __pfx___device_attach_driver+0x10/0x10
[ 2691.499438][T25833]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 2691.499460][T25833]  ? rt_spin_unlock+0x161/0x200
[ 2691.499491][T25833]  __device_attach+0x2bb/0x400
[ 2691.499521][T25833]  ? __pfx___device_attach+0x10/0x10
[ 2691.499559][T25833]  ? rt_spin_unlock+0x161/0x200
[ 2691.499589][T25833]  bus_probe_device+0x188/0x260
[ 2691.499613][T25833]  device_add+0x7b6/0xb50
[ 2691.499642][T25833]  usb_set_configuration+0x1a87/0x20e0
[ 2691.499678][T25833]  usb_generic_driver_probe+0x8d/0x150
[ 2691.499702][T25833]  usb_probe_device+0x1c4/0x390
[ 2691.499727][T25833]  ? __pfx_usb_probe_device+0x10/0x10
[ 2691.499749][T25833]  really_probe+0x26d/0x9e0
[ 2691.499783][T25833]  __driver_probe_device+0x18c/0x2f0
[ 2691.499814][T25833]  driver_probe_device+0x4f/0x430
[ 2691.499847][T25833]  __device_attach_driver+0x2ce/0x530
[ 2691.499880][T25833]  bus_for_each_drv+0x254/0x2e0
[ 2691.499902][T25833]  ? __pfx___device_attach_driver+0x10/0x10
[ 2691.499933][T25833]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 2691.499954][T25833]  ? rt_spin_unlock+0x161/0x200
[ 2691.499986][T25833]  __device_attach+0x2bb/0x400
[ 2691.500015][T25833]  ? __pfx___device_attach+0x10/0x10
[ 2691.500047][T25833]  ? rt_spin_unlock+0x161/0x200
[ 2691.500075][T25833]  bus_probe_device+0x188/0x260
[ 2691.500098][T25833]  device_add+0x7b6/0xb50
[ 2691.500126][T25833]  usb_new_device+0xa29/0x16e0
[ 2691.500165][T25833]  ? __pfx_usb_new_device+0x10/0x10
[ 2691.500201][T25833]  hub_event+0x2958/0x4a20
[ 2691.500247][T25833]  ? __pfx_hub_event+0x10/0x10
[ 2691.500267][T25833]  ? process_scheduled_works+0x9ef/0x17b0
[ 2691.500306][T25833]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2691.500340][T25833]  ? process_scheduled_works+0x9ef/0x17b0
[ 2691.500373][T25833]  ? process_scheduled_works+0x9ef/0x17b0
[ 2691.500408][T25833]  process_scheduled_works+0xae1/0x17b0
[ 2691.500457][T25833]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2691.500500][T25833]  worker_thread+0x8a0/0xda0
[ 2691.500522][T25833]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2691.500594][T25833]  ? __kthread_parkme+0x7b/0x200
[ 2691.500622][T25833]  kthread+0x711/0x8a0
[ 2691.500650][T25833]  ? __pfx_worker_thread+0x10/0x10
[ 2691.500670][T25833]  ? __pfx_kthread+0x10/0x10
[ 2691.500695][T25833]  ? rt_spin_unlock+0x150/0x200
[ 2691.500726][T25833]  ? rt_spin_unlock+0x161/0x200
[ 2691.500753][T25833]  ? __pfx_kthread+0x10/0x10
[ 2691.500778][T25833]  ret_from_fork+0x4bc/0x870
[ 2691.500812][T25833]  ? __pfx_ret_from_fork+0x10/0x10
[ 2691.500850][T25833]  ? __switch_to_asm+0x39/0x70
[ 2691.500880][T25833]  ? __switch_to_asm+0x33/0x70
[ 2691.500910][T25833]  ? __pfx_kthread+0x10/0x10
[ 2691.500936][T25833]  ret_from_fork_asm+0x1a/0x30
[ 2691.500975][T25833]  </TASK>
[ 2691.500993][T25833] Modules linked in:
[ 2691.501017][T25833] ---[ end trace 0000000000000000 ]---
[ 2691.501034][T25833] RIP: 0010:usb_gadget_udc_reset+0x27/0x60
[ 2691.501060][T25833] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 8e 81 f4 fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6b 33 56 fb 4d 8b 1e 48 89 df 2e e8
[ 2691.501080][T25833] RSP: 0018:ffffc9000496e480 EFLAGS: 00010202
[ 2691.501100][T25833] RAX: 0000000000000008 RBX: ffff888027930c40 RCX: dffffc0000000000
[ 2691.501123][T25833] RDX: ffffc9001ce02000 RSI: 00000000000114f7 RDI: 00000000000114f8
[ 2691.501140][T25833] RBP: ffff888030ff4e6c R08: ffffffff8ef76677 R09: 1ffffffff1deecce
[ 2691.501158][T25833] R10: dffffc0000000000 R11: fffffbfff1deeccf R12: ffff888027930c40
[ 2691.501176][T25833] R13: 1ffff11004f662a1 R14: 0000000000000040 R15: 1ffff11004f26187
[ 2691.501193][T25833] FS:  0000000000000000(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000
[ 2691.501211][T25833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2691.501227][T25833] CR2: 00007f0f296021e0 CR3: 000000006ef36000 CR4: 00000000003526f0
[ 2691.501246][T25833] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 2691.501262][T25833] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2691.501285][T25833] Kernel panic - not syncing: Fatal exception
[ 2691.501596][T25833] Kernel Offset: disabled