last executing test programs:

6m47.096794219s ago: executing program 0 (id=1292):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
r2 = dup2(r0, r0)
read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020)

6m46.941030007s ago: executing program 0 (id=1293):
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

6m45.788328891s ago: executing program 0 (id=1300):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd)
syz_open_dev$tty1(0xc, 0x4, 0x1)

6m44.472352669s ago: executing program 0 (id=1305):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00')

6m43.460773785s ago: executing program 0 (id=1309):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r1, 0x34da2000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x7800, 0xff, 0x7fe, {{0x2e, 0x4, 0x3, 0x9, 0xb8, 0x66, 0x0, 0x1f, 0x2f, 0x0, @local, @broadcast, {[@generic={0x86, 0xe, "e2f55e5929d98e99c2f7b66d"}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x4, [0x4, 0x8, 0x8, 0x5]}, @lsrr={0x83, 0xb, 0xc8, [@multicast2, @empty]}, @timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x4, [{@remote, 0x3}, {@remote, 0x3}, {@multicast2, 0x9}]}, @rr={0x7, 0x17, 0x1e, [@remote, @rand_addr=0x64010101, @multicast1, @multicast2, @multicast1]}, @ssrr={0x89, 0x13, 0x43, [@remote, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0x3, [{@multicast2, 0x4495}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x1b, 0xa2, [@empty, @multicast2, @loopback, @multicast1, @local, @private=0xa010100]}]}}}}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r4})

6m43.00019171s ago: executing program 0 (id=1311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x3, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x800}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r4, &(0x7f0000000300)="05", 0x1, 0x81, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

6m42.346452393s ago: executing program 32 (id=1311):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x1, 0xb}, {0x3, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x800}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000)
sendto$packet(r4, &(0x7f0000000300)="05", 0x1, 0x81, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m0.919711051s ago: executing program 5 (id=1741):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)

4m58.64762546s ago: executing program 5 (id=1757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0x2c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

4m58.326034639s ago: executing program 5 (id=1761):
mremap(&(0x7f000035a000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x70b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xfffffffd, 0xffc00, 0x3, 0x1, 0xfffffffe, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x200, 0xfffffffa}}, @TCA_NETEM_CORR={0x10, 0x1, {0x2, 0x7, 0x8}}]}}}]}, 0x68}}, 0x10)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x4a, 0x2, 0x2, "d02066000000000000000000565c000f30807278f8983c3c0a31965ebd9ca8ac", 0x20363059})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000040)='lo\x00'})
r6 = dup(r4)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000140)="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", 0x148)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)

4m57.672831336s ago: executing program 5 (id=1765):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

4m56.724421132s ago: executing program 5 (id=1767):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420000061a7b9fdd672bad09dfb78c7699874e891a0c7f120ffffffffffff000000000000000008000240000000000e"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m56.467602595s ago: executing program 5 (id=1769):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2b, 0x1, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

4m55.992837131s ago: executing program 33 (id=1769):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2b, 0x1, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

15.153748426s ago: executing program 1 (id=2923):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xe8140, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x9, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
fadvise64(r3, 0x0, 0x7f5, 0x4)
r4 = epoll_create1(0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x40000000})

12.945502997s ago: executing program 1 (id=2930):
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0xfb)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000380))
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400"], 0x0)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.915047501s ago: executing program 3 (id=2936):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
timer_create(0x1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.544922716s ago: executing program 1 (id=2940):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r2 = io_uring_setup(0x70c4, &(0x7f0000000080)={0x0, 0xbf6d, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

9.347471753s ago: executing program 3 (id=2942):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0xfd, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsetxattr(r0, 0x0, &(0x7f0000000280)='+.%+\x00', 0x5, 0x2)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = dup2(r2, r2)
prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

8.806495771s ago: executing program 2 (id=2944):
ioprio_set$pid(0x2, 0x0, 0x6000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000080)=""/86, 0x56, 0x20, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x6}}}, 0x80)
getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x0, 0x2}, 0x1)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)

8.802250827s ago: executing program 4 (id=2945):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
readv(r0, &(0x7f0000000200), 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

7.995304653s ago: executing program 4 (id=2947):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xfe)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x534d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x10, 0x1, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x9, 0x6, {0xa, 0x25, 0x25, 0x8, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x7, 0x0, {0xa, 0x25, 0x25, 0xc9d, 0x0, 0x1}}}}}}}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000640)={0x1, 0xbd})
ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x7f)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"})
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="7526b7bf10b8f5ddafd190933f8f8e042efcb390578b34bc1a759dcfb03b07c8d6d2fb727badf09db2a1afbe3610654c48b5ce6765345a9c01d81e24f9ff5fbfc9d1682a1a9962", 0x47}, {&(0x7f0000000100)="023675772090f309feb9c687d797b77fce3e6c75daa4d7f0259d809b2e04938c75987751", 0x24}, {&(0x7f0000000180)="842952d0267d8b0b742d572d81c75548a6272ee6afb7def1e34e5c0f684dde03471d8421a84e65ac8cb55a4ec948077ad96762c60dde9e4714e488b9a6d99de6468924cc266fe633bb3812f9ff63546bd891d1db3a36269279fa04d94f157d3a855ae31cf14f39456bd12bd40196b44403a8b51fbf70ad584e1710b6e5817b4c191f625ba8720ffb84516b47b8f55acb819832599192037ac1a0faa40ffad9be5204e945d63defb63413d6651fbcf4905bc1848131adf11e8d44af93a2d6", 0xbe}, {&(0x7f0000000280)="650ea699a632f5122b9de3e336120bb869b5f2d134d0e48ab0cbfb30", 0x1c}, {&(0x7f00000002c0)="87c1dfb0362721954082535247a09a76fbf5415bdeca0fba40353f8507117adea00dca4e39caa07e2ba3a5dd3938add02405776ce0b840238cd8156870af7c3112562e0cd3fc201895d7a85c3cfb949527697de485fa755734b41e9a3e23bc567b5f59db2e62aa773db0b8be9e9e89e09d4d9d2ab3cf4c63d8846f7ba0e0c377a540881be161ef1ade0e3c2db9b06faff9dd6499bb95d04a0ba8b321cb7703de381fe8d1bfbfa6983b8925ade2c107f6e77a3f54141b9539544a201dbc77cea57b09facd77871861264eff14fbeaf9d258cd0c4aff23f9b862fa447da73f0d2b042cd09d", 0xe4}, {&(0x7f00000003c0)="4315378b24ba5a95b7761242bd7729397184a02fcbe097c66a97ec26cf676e0480209178a2cd2c23bc92775e9151e6e558a5a5cf9b08160800ab56924334fcee08b99ff409566f3c9478023382963b0115f54b3498e637f17457fb9d2eebaff7ac99667dec59964dfdcc415ac1984895986af3c2e62ac29ba3b0838e559189bcabc178162c906d90c2b015de25785e324c464e84f4c00d5d0d0af01ec4a73fdac1912fb1f142f629699ed42738d3c052d2683b1ea47b97b3b7cd7efe0de820415cff66f67c6ad2f1dd469ae6f6af5e07bb7dc443cb867fa74d7f0c4765c4fb4f50726744208110e2a6374de434039d19925b2a28", 0xf4}, {&(0x7f00000004c0)="247f2c3beafd9a396964898ecf45135c8410d4ba4c900d0ab2435a25ee71a636a6afd6d96dea308725bec3f0e8e7c03a624802c946b7616ae8c6201a36879ca7ea76c07bbd34cf419d196b7c0bee57fda663c12fd8c3f0251b7c4d693397e0fd2e59fa86a8cc28c8311341932f17cef943aadd0ced6e63bb", 0x78}], 0x7, 0x5, 0xfffffff7)

7.627273962s ago: executing program 2 (id=2948):
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYBLOB=','])
kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c20", 0x7e, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f", 0x10, 0x100, 0x9}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a1302466", 0xd0}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.089236149s ago: executing program 2 (id=2949):
bind$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x1694, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

6.900430093s ago: executing program 1 (id=2950):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x4}]}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
connect$packet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)

6.518830682s ago: executing program 3 (id=2952):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/140, 0xffe5)

5.516126127s ago: executing program 1 (id=2953):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
close(r0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x10, 0x4})
syz_usb_connect(0x0, 0x4bc, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

5.39622874s ago: executing program 6 (id=2954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

5.230721875s ago: executing program 4 (id=2955):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00')
readv(r4, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9)
unshare(0x6020400)
r5 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r5}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x9, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x20, 0x80, 0x46], [0x8ac2]})
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

5.114376456s ago: executing program 6 (id=2956):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x180}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000de0000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.411451994s ago: executing program 3 (id=2957):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
readv(r0, &(0x7f0000000200), 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

3.992158281s ago: executing program 2 (id=2958):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66984150}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9cc4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40040c8}, 0x40000)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6218232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa8900020100000000000000000000000092078eb6c7159b3d66850dc4"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000030601040000000000000000010000020900020073797a31000000000900020073797a30000000020500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4004)

3.769760172s ago: executing program 2 (id=2959):
ptrace(0x10, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}, {0x0}], 0x2}, 0xffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/76, 0x4c}, {0x0}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000008940)}, 0x6}], 0x4, 0x40000001, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044015}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020)
socket$inet_sctp(0x2, 0x1, 0x84)

3.757629195s ago: executing program 6 (id=2960):
memfd_create(&(0x7f0000000080)='%\x00', 0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.619478197s ago: executing program 3 (id=2961):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000922e329499ccdc3ec11775a2ce5f229312d0dfc837324d54b963f4edec0bdc6f964969", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)

3.166079556s ago: executing program 4 (id=2962):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="bc", 0x1}], 0x1}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee1619d4b8bf4a31accb", 0x26}], 0x1}, 0x0)

3.067415511s ago: executing program 4 (id=2963):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000380)=""/131, 0x83)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
socket(0x400000000010, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read$char_usb(r2, &(0x7f0000000140)=""/160, 0xa0)
syz_usb_disconnect(r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c582a626739b1c83b47dec6359c05eaad4a5339a4e0fae9f6dcd3292ea54c7be8b", 0x24)
r3 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)

2.86528712s ago: executing program 2 (id=2964):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
unshare(0xc040400)
bind$packet(r4, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, 0x0, 0x40080)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)

2.732744358s ago: executing program 6 (id=2965):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x10000}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4)

1.882060345s ago: executing program 6 (id=2966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)

1.799613804s ago: executing program 1 (id=2967):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
sendmmsg(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.209039518s ago: executing program 6 (id=2968):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x84)
sendto$inet6(r0, &(0x7f0000000140)='\a', 0xfffffffffffffe77, 0x40040c0, &(0x7f0000000280)={0xa, 0x10, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3b}}, 0x1c)
shutdown(r0, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4054)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a3200000000050007"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r4=>0x0, 0x5, 0x7, 0x9}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x7}, &(0x7f00000000c0)=0x8)
r5 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1})
io_uring_enter(r5, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x19, {0x3, 0xc82}, 0xb}, 0x1)
splice(r1, &(0x7f00000001c0)=0x5, r0, &(0x7f0000000200)=0x2f, 0x5, 0x4)

1.039582449s ago: executing program 4 (id=2969):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x44800)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close_range(r5, 0xffffffffffffffff, 0x0)
timer_create(0x5, &(0x7f0000000000)={0x0, 0xfffffff3}, &(0x7f0000000100)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000200), &(0x7f0000000240))
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x2, 0x3, 0x1, 0x2}}, {0x3, 0x1, 0x0, 0x0, @msi={0xfffffffc, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x7, 0xb, 0x5}}]})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x2, 0x1, 0x0, 0x0}], 0x1})

0s ago: executing program 3 (id=2970):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x180}, {0x0}], 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000de0000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

2
[  602.537414][ T5709] dvb-usb: schedule remote query interval to 400 msecs.
[  602.562832][ T5709] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  602.623632][ T5709] usb 4-1: USB disconnect, device number 49
[  602.814708][T14130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  602.925649][ T5709] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  603.022994][T14130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  604.524875][T14148] netlink: 'syz.2.2497': attribute type 1 has an invalid length.
[  604.685298][T14148] bond8: entered promiscuous mode
[  604.690867][T14148] 8021q: adding VLAN 0 to HW filter on device bond8
[  604.809197][T14154] 8021q: adding VLAN 0 to HW filter on device bond8
[  604.847480][T14154] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  604.897117][T14154] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  604.968984][T14154] bond8: (slave ip6gre1): making interface the new active one
[  604.994552][T14154] ip6gre1: entered promiscuous mode
[  605.011142][T14154] bond8: (slave ip6gre1): Enslaving as an active interface with an up link
[  605.175420][T14160] syzkaller0: entered promiscuous mode
[  605.186045][T14160] syzkaller0: entered allmulticast mode
[  605.765668][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2501'.
[  605.831336][T14182] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  606.593661][ T5709] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  606.763029][ T5709] usb 2-1: Using ep0 maxpacket: 8
[  606.770223][ T5709] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  606.787195][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.841256][ T5709] pvrusb2: Hardware description: Terratec Grabster AV400
[  606.861094][ T5709] pvrusb2: **********
[  606.870351][ T5709] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  606.893107][ T5709] pvrusb2: Important functionality might not be entirely working.
[  606.915942][ T5709] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  606.945028][ T5709] pvrusb2: **********
[  607.027859][ T2368] pvrusb2: Invalid write control endpoint
[  607.365418][T14187] pvrusb2: Invalid write control endpoint
[  607.462874][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  607.707609][ T2368] pvrusb2: Invalid write control endpoint
[  607.767129][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  607.804706][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  607.829653][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  607.864033][ T2368] pvrusb2: Device being rendered inoperable
[  607.901034][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  607.931557][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  607.965067][ T5709] usb 2-1: USB disconnect, device number 57
[  608.044189][T14204] binder_alloc: 14203: binder_alloc_buf, no vma
[  608.140458][ T2368] pvrusb2: Attached sub-driver cx25840
[  608.169803][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  608.227996][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  608.359950][T14212] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2512'.
[  608.446500][T14215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2513'.
[  608.487453][T14215] openvswitch: netlink: Flow key attr not present in new flow.
[  608.772257][T14225] syzkaller0: entered promiscuous mode
[  608.790089][T14225] syzkaller0: entered allmulticast mode
[  609.379890][   T29] audit: type=1800 audit(1785288215.043:916): pid=14232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2518" name="/" dev="fuse" ino=1 res=0 errno=0
[  609.691035][T14243] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  609.723139][T14243] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  609.991987][T14251] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  610.023853][T14251] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  610.396544][T14255] syzkaller0: entered promiscuous mode
[  610.410899][T14255] syzkaller0: entered allmulticast mode
[  611.444274][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'.
[  611.662044][T14276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  611.674561][T14276] syzkaller0: entered promiscuous mode
[  611.680475][T14276] syzkaller0: entered allmulticast mode
[  611.712318][T14276] tipc: Resetting bearer <eth:syzkaller0>
[  611.731015][T14275] tipc: Resetting bearer <eth:syzkaller0>
[  611.777911][T14275] tipc: Disabling bearer <eth:syzkaller0>
[  611.886220][ T5359] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  612.080226][ T5359] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  612.115845][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.145965][ T5359] usb 4-1: Product: syz
[  612.164127][ T5359] usb 4-1: Manufacturer: syz
[  612.184249][ T5359] usb 4-1: SerialNumber: syz
[  613.215783][T14295] syzkaller0: entered promiscuous mode
[  613.238842][T14295] syzkaller0: entered allmulticast mode
[  614.030172][ T5359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  614.092194][ T5359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  614.173489][ T5359] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  614.236937][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'.
[  614.242864][ T5359] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  614.266112][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'.
[  614.299137][T14316] syzkaller0: entered promiscuous mode
[  614.321928][T14316] syzkaller0: entered allmulticast mode
[  614.345014][ T5359] usb 4-1: USB disconnect, device number 50
[  614.392660][   T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  614.585423][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  614.605698][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  614.643178][   T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  614.666800][   T24] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  614.703112][   T24] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  614.748739][   T24] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  614.782716][   T24] usb 2-1: config 1 interface 1 has no altsetting 0
[  614.803023][   T24] usb 2-1: string descriptor 0 read error: -22
[  614.818177][T14319] syzkaller1: entered promiscuous mode
[  614.826172][   T24] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  614.844379][T14319] syzkaller1: entered allmulticast mode
[  614.853792][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.259073][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  615.427303][T14324] syzkaller0: entered promiscuous mode
[  615.436372][T14324] syzkaller0: entered allmulticast mode
[  615.539651][T14326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  615.557510][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.589292][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.682609][ T5709] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  615.738793][T14326] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  615.852804][ T5709] usb 7-1: Using ep0 maxpacket: 32
[  615.869938][ T5709] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  615.892212][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.903647][ T5729] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  615.930183][ T5709] usb 7-1: Product: syz
[  615.948336][ T5709] usb 7-1: Manufacturer: syz
[  615.966922][ T5709] usb 7-1: SerialNumber: syz
[  615.996984][ T5709] usb 7-1: config 0 descriptor??
[  616.025449][ T5709] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  616.092794][ T5729] usb 3-1: Using ep0 maxpacket: 32
[  616.108745][ T5729] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  616.134533][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.171876][ T5729] gspca_main: nw80x-2.14.0 probing 055f:d001
[  616.272799][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  616.433075][    T9] usb 5-1: Using ep0 maxpacket: 8
[  616.445270][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  616.463996][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  616.487156][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  616.510914][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  616.541448][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  616.561000][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.799318][ T5729] gspca_nw80x: reg_w err -71
[  616.814041][ T5729] nw80x 3-1:16.0: probe with driver nw80x failed with error -71
[  616.825674][ T5729] usb 3-1: USB disconnect, device number 52
[  616.836423][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  616.850524][    T9] usbtmc 5-1:16.0: can't read capabilities
[  617.197802][ T5729] usb 5-1: USB disconnect, device number 46
[  617.566665][   T24] usb 2-1: USB disconnect, device number 58
[  617.782730][ T5709] gspca_topro: reg_r err -110
[  617.794660][ T5709] gspca_topro: Sensor soi763a
[  617.833613][ T5729] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  618.044566][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.076271][   T24] usb 7-1: USB disconnect, device number 14
[  618.076513][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  618.137896][ T5729] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  618.170294][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.220581][ T5729] usb 3-1: config 0 descriptor??
[  618.826520][T14371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  619.127793][T14371] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  619.140858][T14371] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  619.148505][T14371] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  619.158137][T14371] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  619.164449][T14371] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  619.294714][T14377] ipvlan1: Caught tx_queue_len zero misconfig
[  619.582618][ T5709] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  619.784916][ T5709] usb 7-1: Using ep0 maxpacket: 32
[  619.808696][ T5709] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  619.849969][ T5709] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  619.945563][ T5709] usb 7-1: config 0 interface 0 has no altsetting 0
[  620.043900][ T5709] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  620.087694][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.141784][ T5709] usb 7-1: Product: syz
[  620.166405][ T5709] usb 7-1: Manufacturer: syz
[  620.197409][ T5709] usb 7-1: SerialNumber: syz
[  620.230657][ T5709] usb 7-1: config 0 descriptor??
[  620.707082][ T5709] gs_usb 7-1:0.0: Couldn't get device config: (err=-121)
[  620.714579][ T5709] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121
[  620.923139][T14377] netlink: 'syz.6.2573': attribute type 9 has an invalid length.
[  621.018126][ T5709] usb 7-1: USB disconnect, device number 15
[  621.041715][T14407] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14403] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[14407]
[  621.078765][T14405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.120430][T14405] syzkaller0: entered promiscuous mode
[  621.138682][T14405] syzkaller0: entered allmulticast mode
[  621.152729][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout
[  621.152768][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  621.159006][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout
[  621.178991][T14405] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  621.232649][ T5630] Bluetooth: hci0: command 0x0406 tx timeout
[  621.241391][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.252709][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.273815][T14405] tipc: Resetting bearer <eth:syzkaller0>
[  621.293688][T14404] tipc: Resetting bearer <eth:syzkaller0>
[  621.330049][T14404] tipc: Disabling bearer <eth:syzkaller0>
[  621.787235][T14416] syzkaller0: entered promiscuous mode
[  621.794235][T14416] syzkaller0: entered allmulticast mode
[  621.839907][T14416] 0: reclassify loop, rule prio 0, protocol 700
[  622.375489][T14429] netlink: 63 bytes leftover after parsing attributes in process `syz.1.2580'.
[  622.403254][ T5709] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  622.479774][T14433] syzkaller0: entered promiscuous mode
[  622.495104][T14433] syzkaller0: entered allmulticast mode
[  622.544685][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2578'.
[  622.592671][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  623.204470][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short
[  623.241667][ T5709] usb 4-1: unable to read config index 0 descriptor/start: -71
[  623.298908][ T5709] usb 4-1: can't read configurations, error -71
[  623.315240][ T5630] Bluetooth: hci0: command 0x0406 tx timeout
[  623.346626][ T5729] usbhid 3-1:0.0: can't add hid device: -32
[  623.409374][ T5729] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  623.742566][ T5709] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  623.913509][ T5709] usb 4-1: Using ep0 maxpacket: 16
[  623.929088][ T5709] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  623.939160][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.976454][ T5709] usb 4-1: config 0 descriptor??
[  623.994428][ T5709] gspca_main: sonixj-2.14.0 probing 0471:0327
[  624.244102][T14450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  624.282690][ T5359] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  624.306981][T14450] syzkaller0: entered promiscuous mode
[  624.324299][T14450] syzkaller0: entered allmulticast mode
[  624.351766][T14452] syzkaller0: entered promiscuous mode
[  624.367682][T14452] syzkaller0: entered allmulticast mode
[  624.413963][T14450] tipc: Resetting bearer <eth:syzkaller0>
[  624.467856][T14449] tipc: Resetting bearer <eth:syzkaller0>
[  624.473826][ T5359] usb 5-1: Using ep0 maxpacket: 16
[  624.489260][ T5359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.531507][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  624.536016][ T5359] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  624.538158][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  624.560275][T14449] tipc: Disabling bearer <eth:syzkaller0>
[  624.571004][ T5359] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  624.596922][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.676448][ T5359] usb 5-1: config 0 descriptor??
[  625.083500][T14463] batman_adv: batadv0: Adding interface: dummy0
[  625.104197][T14463] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  625.107262][T14461] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5645] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                        <    
                \x09        \x0a     5 dummy0                              @      
                       @             /dev/vsock                                                      \x09                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               €       <                                                                                        
[  625.174980][T14463] batman_adv: batadv0: Interface activated: dummy0
[  625.299836][T14461] batadv0: mtu less than device minimum
[  625.307365][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.321461][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.333505][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.345521][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.357401][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.369401][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.381408][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.393392][T14461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.430049][ T5729] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  625.592590][ T5729] usb 7-1: Using ep0 maxpacket: 8
[  625.599927][ T5729] usb 7-1: unable to get BOS descriptor or descriptor too short
[  625.609166][ T5729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  625.634847][ T5729] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  625.667170][ T5729] usb 7-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40
[  625.688294][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.696746][ T5729] usb 7-1: Product: syz
[  625.700990][ T5729] usb 7-1: Manufacturer: syz
[  625.706458][ T5729] usb 7-1: SerialNumber: syz
[  625.999417][ T5729] gspca_main: STV06xx-2.14.0 probing 046d:0850
[  626.014504][ T5729] usb 7-1: 0:1 : does not exist
[  626.019500][ T5729] usb 7-1: unit 8 not found!
[  626.120151][ T5729] usb 7-1: USB disconnect, device number 16
[  626.692601][ T5709] gspca_sonixj: reg_w1 err -71
[  626.722347][ T5709] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  626.769026][ T5709] usb 4-1: USB disconnect, device number 52
[  627.072901][ T5359] usb 5-1: USB disconnect, device number 47
[  627.583829][ T5359] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  627.773641][ T5709] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  627.815769][ T5359] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  627.848357][ T5359] usb 5-1: config 0 has no interface number 0
[  627.891429][ T5359] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  627.943151][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.979390][ T5359] usb 5-1: Product: syz
[  627.985180][ T5709] usb 2-1: config 0 has no interfaces?
[  628.015592][ T5709] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  628.033287][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.042369][ T5709] usb 2-1: Product: syz
[  628.046798][ T5709] usb 2-1: Manufacturer: syz
[  628.046884][ T5359] usb 5-1: Manufacturer: syz
[  628.051439][ T5709] usb 2-1: SerialNumber: syz
[  628.064803][ T5709] usb 2-1: config 0 descriptor??
[  628.108707][ T5359] usb 5-1: SerialNumber: syz
[  628.161113][ T5359] usb 5-1: config 0 descriptor??
[  628.208531][ T5359] usb 5-1: selecting invalid altsetting 1
[  628.265202][ T5359] dvb_ttusb_budget: ttusb_init_controller: error
[  628.297941][ T5359] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  628.437559][T14486] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  628.583319][T14486] netdevsim netdevsim1 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  628.631197][T14486] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  628.704425][ T5359] DVB: Unable to find symbol stv0299_attach()
[  628.781992][   T24] usb 2-1: USB disconnect, device number 59
[  628.808631][ T5359] DVB: Unable to find symbol tda8083_attach()
[  628.839475][ T5359] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  628.879476][ T5359] usb 5-1: USB disconnect, device number 48
[  631.672363][T14546] syzkaller0: entered promiscuous mode
[  631.706196][T14546] syzkaller0: entered allmulticast mode
[  631.745417][T14546] net_ratelimit: 11 callbacks suppressed
[  631.745437][T14546] 0: reclassify loop, rule prio 0, protocol 800
[  631.872635][ T5359] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  632.068654][T14557] netlink: 'syz.4.2614': attribute type 1 has an invalid length.
[  632.081786][ T5359] usb 2-1: Using ep0 maxpacket: 32
[  632.112393][ T5359] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  632.192307][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2614'.
[  632.213273][ T5359] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  632.260957][T14557] bond7: entered promiscuous mode
[  632.289573][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.303220][T14557] bond7: entered allmulticast mode
[  632.341709][T14557] 8021q: adding VLAN 0 to HW filter on device bond7
[  632.348578][ T5359] usb 2-1: Product: syz
[  632.360318][ T5359] usb 2-1: Manufacturer: syz
[  632.389834][ T5359] usb 2-1: SerialNumber: syz
[  632.401603][T14560] erspan1: entered allmulticast mode
[  632.475438][T14560] bond7: (slave erspan1): making interface the new active one
[  632.518979][T14560] erspan1: entered promiscuous mode
[  632.549132][T14560] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  632.564123][ T5359] snd-ua101 2-1:1.1: sample format descriptor not found
[  632.626383][ T5359] snd-ua101 2-1:1.0: invalid num_altsetting
[  632.648230][T14551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.686221][T14561] bond7 (unregistering): (slave erspan1): Releasing active interface
[  632.695860][T14561] erspan1: left promiscuous mode
[  632.707223][T14551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.748192][T14561] bond7 (unregistering): Released all slaves
[  632.906194][ T5288] netdevsim netdevsim1 dev66: default qdisc (pfifo_fast) fail, fallback to noqueue
[  632.997549][ T5288] 8021q: adding VLAN 0 to HW filter on device dev66
[  633.263721][ T5709] usb 2-1: USB disconnect, device number 60
[  633.276648][T14573] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed
[  633.276671][T14573] kvm: kvm [14571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000
[  633.442008][T14573] kvm: kvm [14571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  633.467678][T14573] kvm: kvm [14571]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  633.495042][T14573] kvm: kvm [14571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800000000000
[  633.913056][ T5709] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  634.109714][ T5709] usb 5-1: Using ep0 maxpacket: 8
[  634.155421][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.219509][ T5709] usb 5-1: config 0 has no interfaces?
[  634.247321][   T29] audit: type=1326 audit(1785288239.913:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.253126][ T5709] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  634.316650][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.361113][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.375022][   T29] audit: type=1326 audit(1785288239.943:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.408495][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.419417][ T5709] usb 5-1: Product: syz
[  634.424085][ T5709] usb 5-1: Manufacturer: syz
[  634.428996][ T5709] usb 5-1: SerialNumber: syz
[  634.429065][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.447306][ T5709] usb 5-1: config 0 descriptor??
[  634.475315][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.490451][   T29] audit: type=1326 audit(1785288239.973:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.598811][   T29] audit: type=1326 audit(1785288239.973:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.625575][   T29] audit: type=1326 audit(1785288239.973:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.652682][   T29] audit: type=1326 audit(1785288239.983:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.677624][   T29] audit: type=1326 audit(1785288239.983:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.771665][T14605] sg_write: process 446 (syz.6.2626) changed security contexts after opening file descriptor, this is not allowed.
[  634.793402][   T29] audit: type=1326 audit(1785288239.983:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60e79de99 code=0x7ffc0000
[  634.864694][   T29] audit: type=1326 audit(1785288239.983:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb60e75e6ce code=0x7ffc0000
[  634.926949][   T29] audit: type=1326 audit(1785288239.983:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14596 comm="syz.2.2624" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb60e79db2b code=0x7ffc0000
[  635.182071][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'.
[  635.328446][T14613] sg_write: data in/out 211/120 bytes for SCSI command 0x0-- guessing data in;
[  635.328446][T14613]    program syz.1.2628 not setting count and/or reply_len properly
[  635.358002][ T5709] hid_parser_main: 30 callbacks suppressed
[  635.358027][ T5709] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  635.393163][ T5709] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  635.412081][    T9] usb 5-1: USB disconnect, device number 49
[  636.318558][T14626] syzkaller0: entered promiscuous mode
[  636.330442][T14626] syzkaller0: entered allmulticast mode
[  636.353175][T14630] syzkaller0: entered promiscuous mode
[  636.359189][T14630] syzkaller0: entered allmulticast mode
[  636.372583][   T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  636.556094][   T24] usb 5-1: Using ep0 maxpacket: 16
[  636.581465][   T24] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  636.597676][   T24] usb 5-1: config 3 has no interface number 0
[  636.620192][   T24] usb 5-1: config 3 interface 20 has no altsetting 0
[  636.674961][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  636.711019][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.752171][   T24] usb 5-1: Product: syz
[  636.787974][   T24] usb 5-1: Manufacturer: syz
[  636.793063][   T24] usb 5-1: SerialNumber: syz
[  636.967419][    T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  637.153877][    T9] usb 4-1: Using ep0 maxpacket: 16
[  637.192377][    T9] usb 4-1: config 244 has an invalid interface number: 220 but max is 0
[  637.229317][    T9] usb 4-1: config 244 has no interface number 0
[  637.250642][    T9] usb 4-1: config 244 interface 220 has no altsetting 0
[  637.296998][    T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7001, bcdDevice=bc.ac
[  637.335800][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.371307][    T9] usb 4-1: Product: syz
[  637.394074][    T9] usb 4-1: Manufacturer: syz
[  637.410145][    T9] usb 4-1: SerialNumber: syz
[  637.765332][    T9] option 4-1:244.220: GSM modem (1-port) converter detected
[  637.781099][T14647] syzkaller0: entered promiscuous mode
[  637.801479][T14647] syzkaller0: entered allmulticast mode
[  637.812705][    T9] usb 4-1: USB disconnect, device number 53
[  637.864239][    T9] option 4-1:244.220: device disconnected
[  637.967694][   T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input53
[  637.999848][ T4978] bcm5974 5-1:3.20: could not read from device
[  638.027312][ T4978] bcm5974 5-1:3.20: could not read from device
[  638.050424][   T24] usb 5-1: USB disconnect, device number 50
[  638.256634][T14651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.270138][T14651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.389656][T14651] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.405765][T14651] 8021q: adding VLAN 0 to HW filter on device team0
[  638.430313][T14651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.606740][T14651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.635423][T14651] batadv0: mtu less than device minimum
[  638.668413][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.681726][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.693138][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.702686][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  638.704818][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.729491][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.740791][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.752025][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.763363][T14651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  638.798295][T14651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.857864][T14651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  638.880293][T14651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.919816][T14651] veth1_vlan: left promiscuous mode
[  638.951552][T14651] veth0_vlan: left promiscuous mode
[  638.970380][T14651] veth0_vlan: entered promiscuous mode
[  639.009760][T14651] veth1_vlan: entered promiscuous mode
[  639.033060][T14651] veth1_macvtap: left promiscuous mode
[  639.045027][T14651] veth0_macvtap: left promiscuous mode
[  639.061064][T14651] veth0_macvtap: entered promiscuous mode
[  639.068458][T14651] veth1_macvtap: entered promiscuous mode
[  639.086187][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  639.095286][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  639.107773][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  639.117641][T14651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  639.177430][T14651] 8021q: adding VLAN 0 to HW filter on device bond1
[  639.188914][T14651] 8021q: adding VLAN 0 to HW filter on device bond2
[  639.198613][T14651] 8021q: adding VLAN 0 to HW filter on device bond3
[  639.208812][T14651] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  639.230298][T14651] 8021q: adding VLAN 0 to HW filter on device bond4
[  639.233283][ T5759] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  639.241919][T14651] 8021q: adding VLAN 0 to HW filter on device bond5
[  639.256100][T14651] 8021q: adding VLAN 0 to HW filter on device bond6
[  639.402537][ T5759] usb 5-1: Using ep0 maxpacket: 8
[  639.418141][ T5759] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  639.431937][ T5759] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  639.461381][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  639.490250][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  639.518052][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  639.547744][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  639.576594][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  639.625706][ T5759] usb 5-1: config 168 interface 0 has no altsetting 0
[  639.629259][ T7623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.645691][ T5759] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  639.657985][ T5759] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  639.669970][   T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.698372][ T7623] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.698514][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  639.747556][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  639.796213][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  639.825751][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  639.854331][   T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.855160][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  639.872491][   T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.967260][ T5759] usb 5-1: config 168 interface 0 has no altsetting 0
[  639.993763][ T5759] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  640.020793][ T5759] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  640.071235][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  640.119111][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  640.180006][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  640.266567][ T5759] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  640.309139][ T5759] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  640.368674][ T5759] usb 5-1: config 168 interface 0 has no altsetting 0
[  640.416948][ T5759] usb 5-1: string descriptor 0 read error: -22
[  640.432999][ T5759] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  640.458914][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.476190][T14668] binder: 14666:14668 ioctl 8903 0 returned -22
[  640.526426][ T5759] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  640.942938][    T9] usb 5-1: USB disconnect, device number 51
[  641.183476][T14658] trusted_key: encrypted_key: key user:syz not found
[  641.589623][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'.
[  642.057370][T14695] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2655'.
[  643.792645][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  643.797981][T14718] fuse: Bad value for 'fd'
[  644.037378][ T7623] net_ratelimit: 48 callbacks suppressed
[  644.037403][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  644.058363][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  644.135211][T14721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  644.495482][T14733] binder_alloc: 14728: binder_alloc_buf, no vma
[  644.724615][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  644.739056][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  644.898765][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2665'.
[  644.929707][T14736] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.954252][T14739] netlink: 'syz.6.2665': attribute type 4 has an invalid length.
[  644.954782][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2665'.
[  645.003350][T14739] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2665'.
[  645.372897][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  645.387400][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  645.563154][   T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  645.593725][T14745] binder: BINDER_SET_CONTEXT_MGR already set
[  645.599864][T14745] binder: 14744:14745 ioctl 4018620d 200000000100 returned -16
[  645.753038][   T43] usb 7-1: Using ep0 maxpacket: 32
[  645.842122][ T5630] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  645.982825][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  645.997909][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  646.117092][ T5359] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  646.239171][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.254414][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.271180][T14765] misc userio: The device must be registered before sending interrupts
[  646.288985][ T5359] usb 4-1: not running at top speed; connect to a high speed hub
[  646.322568][ T5359] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  646.384843][ T5359] usb 4-1: config 1 interface 0 has no altsetting 0
[  646.418258][ T5359] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40
[  646.440982][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  646.475009][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.487468][   T43] usb 7-1: unable to read config index 0 descriptor/start: -71
[  646.508439][ T5359] usb 4-1: Manufacturer: ј
[  646.520522][   T43] usb 7-1: can't read configurations, error -71
[  646.537402][ T5359] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇�
[  646.613067][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  646.805082][T14752] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2670'.
[  646.813292][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  646.862114][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'.
[  647.043429][T14779] binder: BINDER_SET_CONTEXT_MGR already set
[  647.072801][T14779] binder: 14778:14779 ioctl 4018620d 200000000100 returned -16
[  647.117986][T14779] binder: BINDER_SET_CONTEXT_MGR already set
[  647.148187][T14782] syzkaller0: entered promiscuous mode
[  647.154096][T14782] syzkaller0: entered allmulticast mode
[  647.154266][T14779] binder: 14778:14779 ioctl 4018620d 200000004a80 returned -16
[  647.762776][   T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  647.926867][T14794] syzkaller0: entered promiscuous mode
[  647.948642][T14794] syzkaller0: entered allmulticast mode
[  648.015472][T14798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.038736][T14794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.054564][T14798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.080143][T14794] tipc: Resetting bearer <eth:syzkaller0>
[  648.134663][T14793] tipc: Resetting bearer <eth:syzkaller0>
[  648.238357][T14793] tipc: Disabling bearer <eth:syzkaller0>
[  648.317015][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'.
[  648.389118][T14800] ipvlan2: entered promiscuous mode
[  648.415269][T14800] ipvlan2: entered allmulticast mode
[  648.436938][T14800] dummy0: entered allmulticast mode
[  648.495544][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  648.522056][   T43] usb 7-1: no configurations
[  648.547172][   T43] usb 7-1: can't read configurations, error -22
[  648.863563][ T5359] usbhid 4-1:1.0: can't add hid device: -71
[  648.882799][ T5359] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  648.898222][ T1227] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  648.913148][ T5359] usb 4-1: USB disconnect, device number 54
[  649.072618][ T1227] usb 5-1: Using ep0 maxpacket: 32
[  649.081684][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  649.127177][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  649.156977][T14812] syzkaller0: entered promiscuous mode
[  649.162937][T14812] syzkaller0: entered allmulticast mode
[  649.213427][ T7611] net_ratelimit: 9 callbacks suppressed
[  649.213448][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  649.235288][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  649.273039][ T5359] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  649.319790][T14815] binder: BINDER_SET_CONTEXT_MGR already set
[  649.328123][T14815] binder: 14813:14815 ioctl 4018620d 200000000100 returned -16
[  649.340485][T14815] binder: BINDER_SET_CONTEXT_MGR already set
[  649.353639][T14815] binder: 14813:14815 ioctl 4018620d 200000004a80 returned -16
[  649.463527][ T5359] usb 4-1: Using ep0 maxpacket: 16
[  649.484476][ T5359] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  649.501085][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.519440][ T5359] usb 4-1: Product: syz
[  649.530149][ T5359] usb 4-1: Manufacturer: syz
[  649.541764][ T5359] usb 4-1: SerialNumber: syz
[  649.561710][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.575372][ T5359] usb 4-1: config 0 descriptor??
[  649.605668][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.618944][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.644838][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.728638][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short
[  649.748766][ T1227] usb 5-1: unable to read config index 0 descriptor/start: -71
[  649.762378][ T1227] usb 5-1: can't read configurations, error -71
[  649.798538][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  649.813432][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  649.827989][ T5359] usb 4-1: ignoring: not an USB2CAN converter
[  649.869988][T14823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  649.886734][T14823] tipc: Resetting bearer <eth:syzkaller0>
[  650.044314][T14808] netlink: 'syz.3.2689': attribute type 12 has an invalid length.
[  650.052624][T14808] netlink: 'syz.3.2689': attribute type 29 has an invalid length.
[  650.065368][T14808] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2689'.
[  650.084070][T14808] netlink: 'syz.3.2689': attribute type 1 has an invalid length.
[  650.098687][T14808] netlink: 'syz.3.2689': attribute type 2 has an invalid length.
[  650.111809][T14808] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2689'.
[  650.137230][    T9] usb 4-1: USB disconnect, device number 55
[  650.275911][T14831] syzkaller0: entered promiscuous mode
[  650.282121][T14831] syzkaller0: entered allmulticast mode
[  650.362745][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  650.377172][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  650.698750][T14835] kvm: kvm [14834]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000080
[  650.842658][    T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  650.963520][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  650.977951][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  650.994495][ T1227] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  651.013046][    T9] usb 2-1: Using ep0 maxpacket: 16
[  651.031662][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  651.058424][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2703'.
[  651.060032][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  651.101086][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  651.131631][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.152617][ T1227] usb 4-1: Using ep0 maxpacket: 16
[  651.168660][ T1227] usb 4-1: config 3 has an invalid interface number: 20 but max is 0
[  651.173803][    T9] usb 2-1: Product: syz
[  651.206604][    T9] usb 2-1: Manufacturer: syz
[  651.214781][ T1227] usb 4-1: config 3 has no interface number 0
[  651.216732][    T9] usb 2-1: SerialNumber: syz
[  651.246205][ T1227] usb 4-1: config 3 interface 20 has no altsetting 0
[  651.258720][    T9] usb 2-1: 0:2 : does not exist
[  651.285406][ T1227] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  651.320435][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.353112][ T1227] usb 4-1: Product: syz
[  651.369419][ T1227] usb 4-1: Manufacturer: syz
[  651.399484][ T1227] usb 4-1: SerialNumber: syz
[  651.489935][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  651.522907][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  651.537430][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  651.572753][T14855] syzkaller0: entered promiscuous mode
[  651.591141][T14855] syzkaller0: entered allmulticast mode
[  651.635941][T14856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.708097][T14855] tipc: Resetting bearer <eth:syzkaller0>
[  651.724547][    T9] usb 2-1: USB disconnect, device number 61
[  651.749873][T14854] tipc: Resetting bearer <eth:syzkaller0>
[  651.835186][ T1227] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input54
[  651.869333][T14854] tipc: Disabling bearer <eth:syzkaller0>
[  651.916361][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  651.956551][ T4978] bcm5974 4-1:3.20: could not read from device
[  652.020128][ T4978] bcm5974 4-1:3.20: could not read from device
[  652.029277][T14843] tipc: Enabled bearer <eth:gre0>, priority 2
[  652.036803][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  652.078024][ T1227] usb 4-1: USB disconnect, device number 56
[  652.088995][ T4978] bcm5974 4-1:3.20: could not read from device
[  652.265408][ T7335] udevd[7335]: Error opening device "/dev/input/event4": No such file or directory
[  652.297450][ T7335] udevd[7335]: Unable to EVIOCGABS device "/dev/input/event4"
[  652.322172][ T7335] udevd[7335]: Unable to EVIOCGABS device "/dev/input/event4"
[  652.347990][T14862] binder: BINDER_SET_CONTEXT_MGR already set
[  652.354711][ T7335] udevd[7335]: Unable to EVIOCGABS device "/dev/input/event4"
[  652.371351][T14862] binder: 14861:14862 ioctl 4018620d 200000004a80 returned -16
[  652.380306][ T7335] udevd[7335]: Unable to EVIOCGABS device "/dev/input/event4"
[  653.303028][ T1227] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  653.447925][T14871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.492611][ T1227] usb 4-1: Using ep0 maxpacket: 16
[  653.500984][T14871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.530008][ T1227] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  653.573744][ T1227] usb 4-1: config 0 has no interface number 0
[  653.594832][ T1227] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  653.641886][ T1227] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  653.701046][ T1227] usb 4-1: config 0 interface 48 has no altsetting 0
[  653.740337][ T1227] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  653.771826][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.809973][ T1227] usb 4-1: Product: syz
[  653.839447][ T1227] usb 4-1: Manufacturer: syz
[  653.854808][ T1227] usb 4-1: SerialNumber: syz
[  653.895424][ T1227] usb 4-1: config 0 descriptor??
[  654.166438][ T1227] dvb_usb_dtv5100 4-1:0.48: probe with driver dvb_usb_dtv5100 failed with error -71
[  654.199384][ T1227] usb 4-1: USB disconnect, device number 57
[  654.327331][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.339394][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.692985][  T587] net_ratelimit: 10 callbacks suppressed
[  654.693007][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  654.713481][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  655.292631][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  655.307843][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  655.884831][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  655.899767][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  655.982589][ T1227] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  656.142994][ T1227] usb 2-1: Using ep0 maxpacket: 8
[  656.169741][ T1227] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  656.194718][ T1227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  656.226422][ T1227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  656.255589][ T1227] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  656.299769][T14912] [U] 
[  656.302737][T14912] [U] 
[  656.305423][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.352325][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.411039][ T1227] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  656.427262][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.481791][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  656.496200][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  656.618614][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.665596][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.712533][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.759478][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  656.854548][T14911] netdevsim netdevsim6: Direct firmware load for .
[  656.854548][T14911]  failed with error -2
[  656.889948][T14911] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  656.889948][T14911] 
[  656.920732][ T1227] usb 2-1: GET_CAPABILITIES returned 0
[  656.940359][ T1227] usbtmc 2-1:16.0: can't read capabilities
[  657.033883][T14916] binder: BINDER_SET_CONTEXT_MGR already set
[  657.063409][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  657.077866][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  657.094737][T14916] binder: 14915:14916 ioctl 4018620d 200000004a80 returned -16
[  657.223892][T14912] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  657.264276][ T1227] usb 2-1: USB disconnect, device number 62
[  657.425309][T14926] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  657.641779][T14930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.666840][T14930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.000426][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  658.000439][   T29] audit: type=1326 audit(1785288263.653:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14924 comm="syz.6.2727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5e1d9de99 code=0x0
[  658.212516][    T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  658.396344][    T9] usb 5-1: Using ep0 maxpacket: 8
[  658.411144][    T9] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  658.440524][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.481587][    T9] usb 5-1: Product: syz
[  658.510997][    T9] usb 5-1: Manufacturer: syz
[  658.529312][    T9] usb 5-1: SerialNumber: syz
[  658.537216][T14945] syzkaller0: entered promiscuous mode
[  658.555146][T14945] syzkaller0: entered allmulticast mode
[  658.589961][    T9] usb 5-1: config 0 descriptor??
[  658.631091][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  659.198771][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  659.245232][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  659.456149][    T9] usb 5-1: reset high-speed USB device number 54 using dummy_hcd
[  659.582663][T14814] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  659.658081][T14964] kvm: kvm [14963]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080
[  659.730628][T14964] kvm: kvm [14963]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[  659.778158][T14964] kvm: kvm [14963]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  659.778541][T14814] usb 2-1: config 127 has an invalid interface number: 1 but max is 0
[  659.903939][T14814] usb 2-1: config 127 has no interface number 0
[  659.966397][T14814] usb 2-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  660.057793][T14814] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  660.078449][T14814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.097516][T14814] usb 2-1: Product: syz
[  660.116585][T14814] usb 2-1: Manufacturer: syz
[  660.121485][T14814] usb 2-1: SerialNumber: syz
[  660.132021][T14960] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  660.196915][  T587] net_ratelimit: 10 callbacks suppressed
[  660.196932][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  660.217103][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  660.370019][    T9] gspca_se401: read req failed req 0x06 error -71
[  660.389453][    T9] se401 5-1:0.0: probe with driver se401 failed with error -71
[  660.426155][    T9] usb 5-1: USB disconnect, device number 54
[  660.554278][T14960] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  660.735665][T14975] tc action pedit 'at' offset 4 out of bounds
[  660.753122][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  660.767535][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  660.799945][T14960] vivid-002: disconnect
[  660.905055][T14814] asix 2-1:127.1 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  660.915840][T14959] vivid-002: reconnect
[  660.936645][T14814] asix 2-1:127.1: probe with driver asix failed with error -71
[  660.956709][T14814] usb 2-1: USB disconnect, device number 63
[  661.393286][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  661.407661][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.073232][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  662.087742][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.708058][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  662.722657][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  663.043519][T15000] syzkaller0: entered promiscuous mode
[  663.066576][T15000] syzkaller0: entered allmulticast mode
[  664.192908][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  664.608284][T15015] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  664.891096][T15016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  665.176495][T15022] binder: BINDER_SET_CONTEXT_MGR already set
[  665.200782][T15022] binder: 15020:15022 ioctl 4018620d 200000004a80 returned -16
[  665.462832][T12948] net_ratelimit: 8 callbacks suppressed
[  665.462854][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  665.484295][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  665.941729][T15033] kvm: kvm [15032]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50
[  666.102867][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  666.117703][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  666.612962][T14814] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  666.713074][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  666.727953][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  666.764698][T15050] netlink: 'syz.3.2763': attribute type 13 has an invalid length.
[  666.784781][T14814] usb 2-1: Using ep0 maxpacket: 32
[  667.161699][T15053] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2763'.
[  667.283095][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  667.297495][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  667.502380][T14814] usb 2-1: unable to get BOS descriptor or descriptor too short
[  667.556672][T14814] usb 2-1: unable to read config index 0 descriptor/start: -71
[  667.602628][T14814] usb 2-1: can't read configurations, error -71
[  667.801728][T15066] syzkaller0: entered promiscuous mode
[  667.829740][T15066] syzkaller0: entered allmulticast mode
[  667.926382][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  667.941098][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  668.240183][ T5630] Bluetooth: hci1: unexpected event for opcode 0x1005
[  668.673606][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  669.452974][ T5759] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  669.679178][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.692646][ T5759] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  669.731468][ T5759] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  669.771403][ T5759] usb 5-1: config 0 has no interface number 0
[  669.800150][ T5759] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  669.855945][ T5759] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  669.904246][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.935674][ T5759] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  669.986047][ T5759] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  670.007567][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.099897][ T5759] usb 5-1: config 0 descriptor??
[  670.120956][T15086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  670.590874][ T7617] net_ratelimit: 8 callbacks suppressed
[  670.590890][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  670.613224][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  670.872583][ T5759] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input55
[  671.124866][ T5759] usb 5-1: USB disconnect, device number 55
[  671.130895][    C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  671.142995][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  671.157485][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  671.723084][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  671.737533][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.062563][ T5759] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  672.243969][ T5759] usb 5-1: Using ep0 maxpacket: 32
[  672.291083][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  672.305683][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.833621][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  672.848178][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.886116][ T5759] usb 5-1: unable to get BOS descriptor or descriptor too short
[  672.907732][ T5759] usb 5-1: unable to read config index 0 descriptor/start: -71
[  672.924535][ T5759] usb 5-1: can't read configurations, error -71
[  674.359004][T15107] syzkaller0: entered promiscuous mode
[  674.381818][T15107] syzkaller0: entered allmulticast mode
[  674.509629][T14814] IPVS: starting estimator thread 0...
[  674.612554][T15121] IPVS: using max 30 ests per chain, 72000 per kthread
[  674.666807][ T5759] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  674.681672][T15126] raw_sendmsg: syz.4.2784 forgot to set AF_INET. Fix it!
[  674.838283][ T5759] usb 7-1: Using ep0 maxpacket: 32
[  674.869670][ T5759] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  674.917680][ T5759] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  674.931259][ T5759] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  674.945074][ T5759] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  675.037226][ T5759] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  675.048998][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.078001][ T5759] usb 7-1: Product: syz
[  675.082362][ T5759] usb 7-1: Manufacturer: syz
[  675.130772][ T5759] usb 7-1: SerialNumber: syz
[  675.201408][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  675.220221][ T5759] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input56
[  675.443508][ T5759] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  675.459996][ T5759]  (id 0x00)
[  675.653260][ T5759] rc_core: IR keymap rc-imon-pad not found
[  675.673865][ T5759] Registered IR keymap rc-empty
[  675.695777][ T5759] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  675.757048][ T5759] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  675.831449][ T5759] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  675.874898][ T5759] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input57
[  675.930094][ T5759] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:21> initialized
[  675.983896][ T7611] net_ratelimit: 10 callbacks suppressed
[  675.983918][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  676.004510][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  676.547032][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  676.561615][  T587] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.082654][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  677.097066][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.699379][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  677.714150][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.838533][T15156] imon:send_packet: task interrupted
[  677.846558][T15156] imon:send_packet: packet tx failed (-512)
[  677.890840][T15156] imon:vfd_write: send packet #5 failed
[  677.926033][T14814] usb 7-1: USB disconnect, device number 21
[  678.242557][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  678.257116][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.874891][T15165] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2789'.
[  680.186478][ T5759] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  680.362621][ T5759] usb 5-1: Using ep0 maxpacket: 8
[  680.370296][ T5759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  680.385831][ T5759] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  680.395944][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.408634][ T5759] usb 5-1: config 0 descriptor??
[  680.555803][T15131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  680.665547][ T5759] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  680.922627][T14814] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  681.085635][T14814] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  681.138330][T14814] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  681.197960][T14814] usb 4-1: config 0 has no interface number 0
[  681.250286][T14814] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  681.332052][T14814] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  681.356855][ T7617] net_ratelimit: 10 callbacks suppressed
[  681.356870][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  681.376973][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  681.471018][T14814] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  681.531283][T14814] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  681.571456][T14814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.653621][T14814] usb 4-1: config 0 descriptor??
[  681.680117][T15170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  682.050630][ T1227] usb 5-1: USB disconnect, device number 58
[  682.310731][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  682.325316][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  682.471596][T14814] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input58
[  682.664851][T15170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.730104][T15170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.871113][T14814] usb 4-1: USB disconnect, device number 58
[  682.877178][    C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  683.143775][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  683.158328][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  683.842799][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  683.857522][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  684.300770][T15215] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  684.502599][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  684.520225][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  684.644913][T15219] vlan3: entered promiscuous mode
[  684.665559][T15219] batadv0: entered promiscuous mode
[  684.892787][T15225] netlink: 'syz.3.2804': attribute type 1 has an invalid length.
[  685.102547][ T5759] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  685.135616][T15225] 8021q: adding VLAN 0 to HW filter on device bond7
[  685.289365][T15227] veth3: entered allmulticast mode
[  685.323022][ T5759] usb 2-1: Using ep0 maxpacket: 16
[  685.328375][T15227] bond7: (slave veth3): Enslaving as an active interface with a down link
[  685.360153][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  685.374544][T15228] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  685.406356][T15231] bond7: entered promiscuous mode
[  685.411445][T15231] bond7: entered allmulticast mode
[  685.431014][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  685.443005][T15225] macvlan2: entered promiscuous mode
[  685.470523][T15225] macvlan2: entered allmulticast mode
[  685.489967][ T5759] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  685.508873][T15225] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  685.509259][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.539438][ T5759] usb 2-1: Product: syz
[  685.552350][ T5759] usb 2-1: Manufacturer: syz
[  685.564207][ T5759] usb 2-1: SerialNumber: syz
[  685.585014][ T5759] usb 2-1: config 0 descriptor??
[  685.612549][ T5759] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  685.632196][ T5759] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  685.968351][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  685.974801][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  686.156711][T15242] kvm: pic: non byte write
[  686.265805][ T5759] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  686.278101][ T5759] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  686.666510][ T7623] net_ratelimit: 6 callbacks suppressed
[  686.666531][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  686.687054][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  687.318164][   T29] audit: type=1800 audit(1785288292.983:960): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2810" name="/" dev="fuse" ino=1 res=0 errno=0
[  687.356930][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  687.371463][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  687.421250][ T5759] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  687.445583][ T5759] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  687.531211][ T5759] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  687.559094][ T5759] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  687.575133][ T5759] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  687.771807][T15255] random: crng reseeded on system resumption
[  688.001611][ T5759] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  688.078899][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  688.093296][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  688.130658][ T5759] usb 2-1: USB disconnect, device number 66
[  688.736418][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  688.750749][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  689.383658][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  689.398434][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  691.571985][T15306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  691.730175][T15210] net_ratelimit: 8 callbacks suppressed
[  691.730192][T15210] Set syz1 is full, maxelem 65536 reached
[  692.048278][ T5709] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  692.092879][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  692.107448][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  692.125234][T14814] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  692.173084][ T5709] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  692.314036][T14814] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  692.371450][T14814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  692.449281][T14814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  692.512765][T14814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  692.579850][T14814] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  692.625495][T14814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.676653][T14814] usb 5-1: config 0 descriptor??
[  692.743802][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  692.758243][T12948] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  692.954647][T15312] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in;
[  692.954647][T15312]    program syz.4.2827 not setting count and/or reply_len properly
[  693.372943][T14814] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  693.493112][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  693.507758][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  693.995476][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'.
[  694.122758][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  694.137260][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  694.375556][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2831'.
[  694.462355][T15346] batadv_slave_1: entered promiscuous mode
[  694.525534][ T5709] usb 5-1: USB disconnect, device number 59
[  694.671619][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2833'.
[  694.737709][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  696.874908][   T12] net_ratelimit: 7 callbacks suppressed
[  696.874931][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  696.895437][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  697.507258][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'.
[  697.558202][T15379] syzkaller0: entered promiscuous mode
[  697.574015][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  697.588424][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  697.606989][T15379] syzkaller0: entered allmulticast mode
[  698.016654][T15393] syzkaller0: entered promiscuous mode
[  698.029594][T15393] syzkaller0: entered allmulticast mode
[  698.078917][T15393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  698.131663][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  698.146480][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  698.188732][T15396] tipc: Resetting bearer <eth:syzkaller0>
[  698.235346][T15391] tipc: Resetting bearer <eth:syzkaller0>
[  698.291905][T15391] tipc: Disabling bearer <eth:syzkaller0>
[  698.576257][T15406] syzkaller0: entered promiscuous mode
[  698.621749][T15406] syzkaller0: entered allmulticast mode
[  698.643791][T15411] TC_ACT_REPEAT abuse ?
[  698.663250][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  698.677798][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  699.392938][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  699.436176][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  699.586494][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'.
[  699.892283][T15432] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  699.948402][T15432] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  700.535849][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'.
[  700.589531][T15440] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.203080][ T5709] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  701.239577][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'.
[  701.383287][ T5759] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  701.596083][ T5759] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  701.665444][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.777290][ T5759] usb 5-1: config 0 descriptor??
[  701.892015][ T5759] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  701.963763][ T5759] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  702.128557][   T12] net_ratelimit: 9 callbacks suppressed
[  702.128610][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  702.149256][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  702.718470][ T5759] usb 5-1: USB disconnect, device number 60
[  702.802316][T15455] syzkaller0: entered promiscuous mode
[  702.865115][T15455] syzkaller0: entered allmulticast mode
[  702.923107][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  702.939449][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  703.634445][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  703.649087][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  703.724449][T15468] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  703.881346][ T5759] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  703.996660][T15473] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2864'.
[  704.088055][ T5759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.131353][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  704.166495][ T5759] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  704.195794][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  704.210230][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  704.227842][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.254459][ T5759] usb 2-1: Product: syz
[  704.270483][ T5759] usb 2-1: Manufacturer: syz
[  704.292649][ T5759] usb 2-1: SerialNumber: syz
[  704.331666][ T5759] usb 2-1: 0:2 : does not exist
[  704.348213][ T5759] usb 2-1: unit 9 not found!
[  704.410869][T15485] kAFS: unable to lookup cell '(,c¾Ì'
[  704.552786][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.567662][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.737765][ T5759] usb 2-1: USB disconnect, device number 67
[  704.782688][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  704.797266][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  706.062541][ T5759] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  706.224850][ T5759] usb 7-1: Using ep0 maxpacket: 32
[  706.236210][ T5759] usb 7-1: config 123 interface 0 has no altsetting 0
[  706.256518][ T5759] usb 7-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[  706.281997][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.312294][ T5759] usb 7-1: Product: syz
[  706.322803][ T5759] usb 7-1: Manufacturer: syz
[  706.335507][ T5759] usb 7-1: SerialNumber: syz
[  706.452591][ T1227] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  706.462846][ T5709] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  706.559268][T15518] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2878'.
[  706.643378][ T5709] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  706.644675][ T1227] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  706.692937][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.704239][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.740272][ T5709] usb 2-1: Product: syz
[  706.760290][ T5709] usb 2-1: Manufacturer: syz
[  706.768492][ T1227] usb 4-1: config 0 descriptor??
[  706.781220][ T5709] usb 2-1: SerialNumber: syz
[  706.810270][T15504] syz.6.2874 (15504): drop_caches: 2
[  706.853585][ T1227] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  706.861643][ T5709] usb 2-1: config 0 descriptor??
[  706.895863][ T5759] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[  706.965780][ T5759] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  707.020514][ T5759] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[  707.055199][ T5759] usb 7-1: media controller created
[  707.161872][ T5709] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  707.187699][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  707.322647][ T5759] set interface failed
[  707.323178][ T5759] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  707.419468][ T5759] error writing reg: 0xff, val: 0x00
[  707.492637][ T7620] net_ratelimit: 8 callbacks suppressed
[  707.492732][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  707.518361][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  707.752769][ T5759] dvb_usb_mxl111sf 7-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  707.832011][ T5759] usb 7-1: USB disconnect, device number 22
[  707.859807][ T1227] gspca_stv06xx: HDCS-1000/1100 sensor detected
[  708.182655][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  708.197369][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  708.431469][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.466786][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.658062][ T5709] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  708.688366][ T5709] usb 2-1: USB disconnect, device number 68
[  708.742998][ T5359] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  708.754654][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  708.769780][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  708.952488][ T5359] usb 5-1: Using ep0 maxpacket: 16
[  708.966489][ T5359] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  708.990706][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.022003][ T5359] usb 5-1: Product: syz
[  709.066254][ T5359] usb 5-1: Manufacturer: syz
[  709.101616][ T5359] usb 5-1: SerialNumber: syz
[  709.309514][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.324996][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  709.339800][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  709.382790][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.422629][ T5359] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  709.432820][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.449671][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.460411][ T5359] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  709.479848][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.491937][ T5359] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  709.508468][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.521853][ T5359] usb 5-1: media controller created
[  709.574570][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.610265][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.643641][ T5359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  709.664647][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.688014][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.707279][ T5359] zl10353_read_register: readreg error (reg=127, ret==-71)
[  709.723522][T15536] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.2885'.
[  709.782913][ T5709] usb 2-1: new full-speed USB device number 69 using dummy_hcd
[  709.820530][ T5359] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  709.847068][ T5359] usb 5-1: USB disconnect, device number 61
[  709.915121][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  709.929853][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  709.974685][ T5709] usb 2-1: config 3 has an invalid interface number: 3 but max is 1
[  710.012498][ T5709] usb 2-1: config 3 has an invalid interface number: 50 but max is 1
[  710.056127][ T5709] usb 2-1: config 3 has no interface number 0
[  710.080950][ T5709] usb 2-1: config 3 has no interface number 1
[  710.096287][ T5709] usb 2-1: config 3 interface 3 has no altsetting 0
[  710.123768][ T5709] usb 2-1: config 3 interface 50 has no altsetting 0
[  710.140586][ T5709] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43
[  710.173568][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.194679][ T5709] usb 2-1: Product: syz
[  710.212739][ T5709] usb 2-1: Manufacturer: syz
[  710.230831][ T5709] usb 2-1: SerialNumber: syz
[  710.439784][ T1227] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71
[  710.494983][ T1227] usb 4-1: USB disconnect, device number 60
[  710.574751][ T5709] usb 2-1: unknown number of interfaces: 2
[  710.626197][ T5709] usb 2-1: USB disconnect, device number 69
[  711.343913][T15559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  711.397076][T15559] syzkaller0: entered promiscuous mode
[  711.420603][T15559] syzkaller0: entered allmulticast mode
[  711.489439][T15559] tipc: Resetting bearer <eth:syzkaller0>
[  711.536775][T15558] tipc: Resetting bearer <eth:syzkaller0>
[  711.595423][T15558] tipc: Disabling bearer <eth:syzkaller0>
[  712.012944][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'.
[  712.066624][ T5630] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[  712.140015][T15572] bond4: left promiscuous mode
[  712.154704][T15572] dummy0: left promiscuous mode
[  712.171084][T15572] bond4: left allmulticast mode
[  712.189990][T15572] dummy0: left allmulticast mode
[  712.324073][T15572] bridge3: left promiscuous mode
[  712.332733][ T5709] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  712.357783][T15572] bridge4: left promiscuous mode
[  712.514409][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  712.541767][ T5709] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  712.572084][T15575] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.586113][ T5709] usb 4-1: config 0 has no interface number 0
[  712.620863][T15575] 8021q: adding VLAN 0 to HW filter on device team0
[  712.645847][ T5709] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  712.703234][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.714229][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.757701][ T5709] usb 4-1: Product: syz
[  712.787264][ T5709] usb 4-1: Manufacturer: syz
[  712.814010][ T5709] usb 4-1: SerialNumber: syz
[  712.864913][ T5709] usb 4-1: config 0 descriptor??
[  712.926347][ T5709] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  712.954593][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  712.981157][ T5709] usb 4-1: selecting invalid altsetting 1
[  713.002689][ T7611] net_ratelimit: 10 callbacks suppressed
[  713.002711][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  713.011897][ T5709] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  713.022867][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  713.045946][T15575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  713.098453][T15575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  713.153851][ T5709] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  713.223046][T15575] veth1_vlan: left promiscuous mode
[  713.231102][ T5709] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  713.274342][T15575] veth0_vlan: left promiscuous mode
[  713.292042][ T5709] usb 4-1: media controller created
[  713.326804][T15575] veth0_vlan: entered promiscuous mode
[  713.446262][T15575] veth1_vlan: entered promiscuous mode
[  713.468916][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  713.585253][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  713.633414][T15575] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  713.666036][T15587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.698513][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  713.720324][T15587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.740140][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  713.750163][T15575] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  713.754593][ T7617] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  713.841678][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'.
[  713.891576][T15575] bond0: entered allmulticast mode
[  713.920639][T15575] bond_slave_0: entered allmulticast mode
[  713.948860][T15575] bond_slave_1: entered allmulticast mode
[  713.972322][T15575] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  714.008945][T15575] bond_slave_0: entered promiscuous mode
[  714.014731][T15575] bond_slave_1: entered promiscuous mode
[  714.056056][T15575] bridge1: port 1(macvlan2) entered blocking state
[  714.062760][T15575] bridge1: port 1(macvlan2) entered forwarding state
[  714.099369][T15575] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  714.154593][T15575] 8021q: adding VLAN 0 to HW filter on device bond1
[  714.201280][T15575] 8021q: adding VLAN 0 to HW filter on device bond2
[  714.232529][T15575] 8021q: adding VLAN 0 to HW filter on device bond3
[  714.287042][T15575] 8021q: adding VLAN 0 to HW filter on device bond4
[  714.376816][T15575] 8021q: adding VLAN 0 to HW filter on device bond5
[  714.407924][T15575] 8021q: adding VLAN 0 to HW filter on device bond6
[  714.433113][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  714.447619][ T7623] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  714.487741][T15575] 8021q: adding VLAN 0 to HW filter on device bond7
[  714.516168][T15575] 8021q: adding VLAN 0 to HW filter on device bond8
[  714.569850][ T7618] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  714.623348][ T7618] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  714.659542][    T9] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  714.694270][ T5709] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  714.724072][ T5709] zl10353_read_register: readreg error (reg=127, ret==-110)
[  715.073065][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  715.087458][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  715.405264][ T7618] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  715.466466][ T5759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  715.542296][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.591527][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.604816][ T5759] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  715.638911][T15606] syzkaller0: entered promiscuous mode
[  715.646758][T15606] syzkaller0: entered allmulticast mode
[  715.682892][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  715.697336][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  715.822426][   T41] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  715.834809][T15609] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  715.857783][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.901406][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.122844][ T5759] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  716.283663][ T5759] usb 7-1: Using ep0 maxpacket: 32
[  716.409628][ T1227] usb 4-1: USB disconnect, device number 61
[  716.492731][ T5709] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  716.522071][T14814] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  716.551168][T14814] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  716.592643][   T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  716.646949][ T5759] usb 7-1: unable to get BOS descriptor or descriptor too short
[  716.684759][ T5709] usb 2-1: Using ep0 maxpacket: 32
[  716.691865][ T5759] usb 7-1: too many configurations: 80, using maximum allowed: 8
[  716.711743][ T5709] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  716.725743][ T5759] usb 7-1: unable to read config index 0 descriptor/start: -71
[  716.735006][ T5709] usb 2-1: config 0 has no interface number 0
[  716.748337][ T5759] usb 7-1: can't read configurations, error -71
[  716.754846][   T10] usb 5-1: Using ep0 maxpacket: 8
[  716.766888][ T5709] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  716.779370][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.801124][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.809864][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  716.820855][ T5709] usb 2-1: Product: syz
[  716.825431][ T5709] usb 2-1: Manufacturer: syz
[  716.830757][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.839446][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  716.840707][ T5709] usb 2-1: SerialNumber: syz
[  716.861988][ T5709] usb 2-1: config 0 descriptor??
[  716.868592][   T10] usb 5-1: config 0 descriptor??
[  716.880210][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  717.124425][   T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  717.643334][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  717.770752][T15637] tc action pedit 'at' offset 2 out of bounds
[  718.130032][ T5709] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  718.211904][ T5709] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  718.299549][ T5709] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  718.342694][   T41] net_ratelimit: 8 callbacks suppressed
[  718.342718][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  718.363161][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  718.378542][ T5709] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  718.621598][ T5709] usb 2-1: USB disconnect, device number 70
[  718.649176][    T9] usb 5-1: USB disconnect, device number 62
[  718.965352][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  718.979801][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  719.080371][T15652] batman_adv: batadv0: Adding interface: vxlan0
[  719.107592][T15652] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  719.191296][T15652] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[  719.594559][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  719.608924][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  720.200855][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  720.215381][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  720.823066][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  720.837825][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  720.953187][T15678] syzkaller0: entered promiscuous mode
[  720.972556][T15678] syzkaller0: entered allmulticast mode
[  721.074469][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  721.122550][T14814] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  721.331269][T14814] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  721.386844][T14814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.481041][T14814] usb 5-1: Product: syz
[  721.521168][T14814] usb 5-1: Manufacturer: syz
[  721.535410][T14814] usb 5-1: SerialNumber: syz
[  721.712650][ T1227] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  721.858375][ T5359] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  721.893913][ T1227] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  721.940978][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  721.993345][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.046405][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.090839][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.145226][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.164641][T15661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.204180][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.220102][T15661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.246277][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.280806][    T9] usb 5-1: USB disconnect, device number 63
[  722.298728][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.339135][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.384961][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.423374][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.488424][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.521568][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.559729][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.640722][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.667591][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.677766][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.691068][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.719483][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.734352][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.767064][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.793946][ T1227] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[  722.804186][ T1227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  722.827194][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0
[  722.854156][ T1227] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  722.878346][ T1227] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  722.887426][ T1227] usb 2-1: Product: syz
[  722.900729][ T1227] usb 2-1: Manufacturer: syz
[  722.905699][ T1227] usb 2-1: SerialNumber: syz
[  722.933373][ T1227] usb 2-1: config 0 descriptor??
[  722.998494][ T1227] yurex 2-1:0.0: Could not find endpoints
[  723.056440][T15701] netlink: 'syz.2.2934': attribute type 13 has an invalid length.
[  723.074252][ T5359] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  723.120668][ T5359] ath9k_htc: Failed to initialize the device
[  723.169723][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  723.432796][   T12] net_ratelimit: 8 callbacks suppressed
[  723.432823][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  723.453255][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  724.072991][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  724.087429][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  724.424602][T15724] syzkaller0: entered promiscuous mode
[  724.432796][T15724] syzkaller0: entered allmulticast mode
[  724.524826][ T5709] usb 2-1: USB disconnect, device number 71
[  724.692637][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  724.707104][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  725.373500][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  725.388209][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  725.436320][T15739] netlink: 'syz.4.2945': attribute type 13 has an invalid length.
[  726.022565][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  726.037014][   T41] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  726.532565][ T1227] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  726.702493][ T1227] usb 5-1: Using ep0 maxpacket: 8
[  726.809152][T15751] kvm: user requested TSC rate below hardware speed
[  726.859629][T15751] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  727.742681][ T5359] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  727.914452][ T5359] usb 7-1: Using ep0 maxpacket: 32
[  728.167207][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short
[  728.199237][ T1227] usb 5-1: unable to read config index 0 descriptor/start: -71
[  728.223591][ T1227] usb 5-1: can't read configurations, error -71
[  728.634357][ T5359] usb 7-1: unable to get BOS descriptor or descriptor too short
[  728.670064][ T5359] usb 7-1: unable to read config index 0 descriptor/start: -71
[  728.704645][ T5359] usb 7-1: can't read configurations, error -71
[  728.763551][ T7620] net_ratelimit: 8 callbacks suppressed
[  728.763564][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  728.783755][ T7620] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  729.483418][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  729.503571][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  729.518121][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  729.785515][T15787] netlink: 'syz.3.2957': attribute type 13 has an invalid length.
[  730.182639][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  730.197088][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  730.782576][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  730.797147][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  730.845335][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  731.022512][    T9] usb 4-1: Using ep0 maxpacket: 32
[  731.042265][    T9] usb 4-1: config 123 interface 0 has no altsetting 0
[  731.068125][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[  731.085875][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.094800][    T9] usb 4-1: Product: syz
[  731.099496][    T9] usb 4-1: Manufacturer: syz
[  731.104980][    T9] usb 4-1: SerialNumber: syz
[  731.313998][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  731.328507][ T7611] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  731.353462][ T5709] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  731.572596][ T5709] usb 5-1: Using ep0 maxpacket: 8
[  731.601186][ T5709] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  731.601217][ T5709] usb 5-1: config 0 has no interface number 0
[  731.601307][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  731.601333][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  731.601358][ T5709] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  731.601383][ T5709] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  731.601460][ T5709] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  731.601486][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.611747][ T5709] usb 5-1: config 0 descriptor??
[  731.682324][ T5709] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  732.107167][ T5359] usb 5-1: USB disconnect, device number 66
[  732.107286][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  732.177398][ T5359] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  732.178264][T15821] ldusb: No device or device unplugged -19
[  732.178343][T15806] ldusb: No device or device unplugged -19
[  733.402101][    T9] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[  733.434320][ T5359] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  733.464180][ T1227] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  733.551563][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  733.641446][ T5359] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  733.663985][    T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[  733.676538][ T1227] usb 5-1: Using ep0 maxpacket: 8
[  733.748749][ T1227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  733.777500][    T9] usb 4-1: media controller created
[  733.785393][ T5359] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  733.830234][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.845481][ T5359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.918491][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  733.960389][ T5359] usb 7-1: Product: syz
[  733.963366][   T12] net_ratelimit: 8 callbacks suppressed
[  733.963383][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  733.966559][ T1227] pvrusb2: Hardware description: Terratec Grabster AV400
[  733.970194][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  733.985403][ T5359] usb 7-1: Manufacturer: syz
[  734.074306][ T1227] pvrusb2: **********
[  734.098540][ T1227] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  734.098596][    T9] set interface failed
[  734.123657][ T5359] usb 7-1: SerialNumber: syz
[  734.159633][ T1227] pvrusb2: Important functionality might not be entirely working.
[  734.181748][    T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  734.217905][ T1227] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  734.231740][ T5359] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  734.260414][    T9] error writing reg: 0xff, val: 0x00
[  734.293455][ T1227] pvrusb2: **********
[  734.350953][ T2368] pvrusb2: Invalid write control endpoint
[  734.518271][    T9] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  734.607374][ T5359] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  734.642923][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  734.657431][ T7618] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  734.673614][    T9] usb 4-1: USB disconnect, device number 62
[  734.709812][T15840] ------------[ cut here ]------------
[  734.713772][ T5359] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  734.715752][T15840] usb 7-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0
[  734.734372][T15840] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.4.2969/15840
[  734.745396][T15840] Modules linked in:
[  734.749678][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.4.2969 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  734.760726][T15840] Tainted: [L]=SOFTLOCKUP
[  734.765110][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  734.775798][T15840] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  734.781446][T15840] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  734.801391][T15840] RSP: 0018:ffffc9000df7f8d8 EFLAGS: 00010246
[  734.807593][T15840] RAX: 0000000000000000 RBX: ffff8880538ced00 RCX: 0000000080001b80
[  734.815702][T15840] RDX: ffff88807a96f260 RSI: ffffffff8ca31bc0 RDI: ffffffff90658160
[  734.823919][T15840] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  734.831888][T15840] R10: ffffc9000df7f9c0 R11: fffff52001beff44 R12: 1ffff1100f6e3380
[  734.839994][T15840] R13: ffff88807b719c00 R14: ffff88807a96f260 R15: 0000000080001b80
[  734.848088][T15840] FS:  00007f2118ca66c0(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000
[  734.857046][T15840] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  734.863657][T15840] CR2: 000055556df334e8 CR3: 00000000783a4000 CR4: 00000000003526f0
[  734.871627][T15840] Call Trace:
[  734.874949][T15840]  <TASK>
[  734.877882][T15840]  usb_start_wait_urb+0x13f/0x5b0
[  734.882944][T15840]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  734.888513][T15840]  usb_control_msg+0x234/0x3e0
[  734.893378][T15840]  gl861_ctrl_msg+0x207/0x420
[  734.899878][T15840]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  734.905107][T15840]  gl861_i2c_master_xfer+0x439/0x6a0
[  734.910392][T15840]  __i2c_transfer+0x7be/0x1fe0
[  734.915319][T15840]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  734.921147][T15840]  ? lockdep_hardirqs_on+0x7a/0x110
[  734.926388][T15840]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  734.932188][T15840]  ? rt_mutex_lock_nested+0x156/0x1c0
[  734.937590][T15840]  ? i2c_transfer+0xc8/0x2d0
[  734.942184][T15840]  i2c_transfer+0x1cc/0x2d0
[  734.946718][T15840]  i2cdev_ioctl_rdwr+0x460/0x740
[  734.951698][T15840]  i2cdev_ioctl+0x6a5/0x880
[  734.956225][T15840]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  734.961249][T15840]  ? __fget_files+0x3a2/0x420
[  734.965950][T15840]  ? __fget_files+0x2a/0x420
[  734.970539][T15840]  ? bpf_lsm_file_ioctl+0x9/0x20
[  734.975547][T15840]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  734.980664][T15840]  __se_sys_ioctl+0xfc/0x170
[  734.985309][T15840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.991391][T15840]  do_syscall_64+0x174/0x580
[  734.996054][T15840]  ? trace_irq_disable+0x3b/0x140
[  735.001094][T15840]  ? clear_bhb_loop+0x40/0x90
[  735.005801][T15840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.011687][T15840] RIP: 0033:0x7f2117d9de99
[  735.016134][T15840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.035771][T15840] RSP: 002b:00007f2118ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  735.044229][T15840] RAX: ffffffffffffffda RBX: 00007f2118025fa0 RCX: 00007f2117d9de99
[  735.052196][T15840] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000008
[  735.060198][T15840] RBP: 00007f2117e33eaf R08: 0000000000000000 R09: 0000000000000000
[  735.068190][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  735.076237][T15840] R13: 00007f2118026038 R14: 00007f2118025fa0 R15: 00007f211814fa48
[  735.084240][T15840]  </TASK>
[  735.087269][T15840] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  735.094542][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.4.2969 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  735.105465][T15840] Tainted: [L]=SOFTLOCKUP
[  735.109792][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  735.119855][T15840] Call Trace:
[  735.123127][T15840]  <TASK>
[  735.126052][T15840]  vpanic+0x56c/0xa60
[  735.130060][T15840]  ? __pfx__printk+0x10/0x10
[  735.134642][T15840]  ? __pfx_vpanic+0x10/0x10
[  735.139141][T15840]  ? is_bpf_text_address+0x292/0x2b0
[  735.144423][T15840]  ? is_bpf_text_address+0x26/0x2b0
[  735.149620][T15840]  panic+0xc5/0xd0
[  735.153339][T15840]  ? __pfx_panic+0x10/0x10
[  735.157762][T15840]  __warn+0x315/0x4c0
[  735.161735][T15840]  ? usb_submit_urb+0x1057/0x18b0
[  735.166757][T15840]  ? usb_submit_urb+0x1057/0x18b0
[  735.171776][T15840]  __report_bug+0x276/0x570
[  735.176356][T15840]  ? usb_submit_urb+0x1057/0x18b0
[  735.181376][T15840]  ? __pfx___report_bug+0x10/0x10
[  735.186389][T15840]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  735.192191][T15840]  ? __kmalloc_noprof+0x1ad/0x720
[  735.197211][T15840]  ? kasan_save_track+0x4f/0x80
[  735.202070][T15840]  report_bug_entry+0x19a/0x290
[  735.206914][T15840]  ? usb_submit_urb+0x1100/0x18b0
[  735.211934][T15840]  ? usb_submit_urb+0x1105/0x18b0
[  735.216957][T15840]  handle_bug+0xce/0x200
[  735.221210][T15840]  exc_invalid_op+0x1a/0x50
[  735.225710][T15840]  asm_exc_invalid_op+0x1a/0x20
[  735.230557][T15840] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  735.236195][T15840] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  735.255798][T15840] RSP: 0018:ffffc9000df7f8d8 EFLAGS: 00010246
[  735.261858][T15840] RAX: 0000000000000000 RBX: ffff8880538ced00 RCX: 0000000080001b80
[  735.269825][T15840] RDX: ffff88807a96f260 RSI: ffffffff8ca31bc0 RDI: ffffffff90658160
[  735.277792][T15840] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  735.285756][T15840] R10: ffffc9000df7f9c0 R11: fffff52001beff44 R12: 1ffff1100f6e3380
[  735.293719][T15840] R13: ffff88807b719c00 R14: ffff88807a96f260 R15: 0000000080001b80
[  735.301704][T15840]  ? usb_submit_urb+0x1091/0x18b0
[  735.306732][T15840]  usb_start_wait_urb+0x13f/0x5b0
[  735.311758][T15840]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  735.317309][T15840]  usb_control_msg+0x234/0x3e0
[  735.322073][T15840]  gl861_ctrl_msg+0x207/0x420
[  735.326746][T15840]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  735.331944][T15840]  gl861_i2c_master_xfer+0x439/0x6a0
[  735.337224][T15840]  __i2c_transfer+0x7be/0x1fe0
[  735.341986][T15840]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  735.347782][T15840]  ? lockdep_hardirqs_on+0x7a/0x110
[  735.352972][T15840]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  735.358786][T15840]  ? rt_mutex_lock_nested+0x156/0x1c0
[  735.364150][T15840]  ? i2c_transfer+0xc8/0x2d0
[  735.368742][T15840]  i2c_transfer+0x1cc/0x2d0
[  735.373242][T15840]  i2cdev_ioctl_rdwr+0x460/0x740
[  735.378193][T15840]  i2cdev_ioctl+0x6a5/0x880
[  735.382704][T15840]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  735.387727][T15840]  ? __fget_files+0x3a2/0x420
[  735.392405][T15840]  ? __fget_files+0x2a/0x420
[  735.397005][T15840]  ? bpf_lsm_file_ioctl+0x9/0x20
[  735.401933][T15840]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  735.406958][T15840]  __se_sys_ioctl+0xfc/0x170
[  735.411542][T15840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.417625][T15840]  do_syscall_64+0x174/0x580
[  735.422209][T15840]  ? trace_irq_disable+0x3b/0x140
[  735.427226][T15840]  ? clear_bhb_loop+0x40/0x90
[  735.431911][T15840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.437805][T15840] RIP: 0033:0x7f2117d9de99
[  735.442241][T15840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.461848][T15840] RSP: 002b:00007f2118ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  735.470280][T15840] RAX: ffffffffffffffda RBX: 00007f2118025fa0 RCX: 00007f2117d9de99
[  735.478251][T15840] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000008
[  735.486232][T15840] RBP: 00007f2117e33eaf R08: 0000000000000000 R09: 0000000000000000
[  735.494196][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  735.502169][T15840] R13: 00007f2118026038 R14: 00007f2118025fa0 R15: 00007f211814fa48
[  735.510158][T15840]  </TASK>
[  735.513463][T15840] Kernel Offset: disabled
[  735.517788][T15840] Rebooting in 86400 seconds..